Schools Management Support Ltd are fully committed to keeping your information safe. This privacy notice explains what personal information we collect, why we collect it, and how we use it. We hope our policy is clear and transparent, but if you have any questions, please get in touch via the contact details at the bottom of the page.
We act as data controller for any data that you, our customer or potential customer, provide us with via the forms on our website or via any other means of contacting us.
We act as data processor for some organisations under contract with those organisations
We process personal information to enable us to provide consultancy and advisory services, to promote our services, to maintain our own accounts and records and to support and manage our employees.
We collect personal information about you (such as your name, address, email address or telephone number) when you give this to us as part of becoming a customer, registering for a customer portal login, signing up to our newsletters, completing a website form, or making a sales or support enquiry.
We also process salary data supplied by our clients for only the specific purpose that they provide the data.
We may use your personal information following a:
General enquiry or feedback where you may have contacted us via telephone, email or other channels requesting information about products and services and we may use the data captured to help improve services or assist in finding a resolution to your enquiry.
Customer portal registration where we may use your data to send important updates, event information, direct marketing and other useful information that will help you get the most out of the products and services available to you.
Product Purchase where we may have obtained your data following the signing of a contract. We may use this data to contact you about product updates, financial queries, renewals and other useful information that will help you get the most out of our products and services.
Sales Enquiry where you may have contacted us via telephone, email or other channels requesting information about products and services we have to offer or we have contacted you and you have expressed an interest.
Support Enquiry where you may have contacted us via telephone, email or other channels to log a support enquiry about an issue or for general assistance. We may use the data captured to help to resolve your enquiry and may contact you after for feedback to help improve the service offered.
All our services are hosted solely on cloud platforms provided by our trusted suppliers. All web hosting services are based in Europe with a cloud service provider who is compliant with ISO/IEC 27001:2013. Other servers reside in the UK, European Union, Canada and the USA. Canada is recognised by the EU as having privacy laws that are compatible with the GDPR and US companies that are Privacy Shield Certified are also recognised as having adequate legal protection. All USA companies we use are Privacy Shield certified. All our suppliers comply with the GDPR. All disks that hold customer or business information of any kind whether connected to servers or desktops are either in Enterprise-Grade secure facilities or encrypted at rest or both. Procedures are in place for ensuring the destruction of data on decommissioned equipment.
All personal data will be held in accordance with SMS Ltd Data Protection policy, and historical records will not be held without legitimate reason. We have a variety of retention policies in place that ensure data is regularly cleared down within our system if it has not been used, updated or interacted with in a reasonable amount of time.
Essentially, we will only hold your personal information on our systems for the period necessary to fulfil the purposes outlined in this privacy notice or until your request it is deleted.
The only people who have access to your personal information are staff within SMS Ltd whom require access to this to carry out their job in order to provide services to you (this may include associates but still operating solely under the policies and procedures of SMS Ltd).
In addition, we sometimes need to provide access to technical support partners in order to receive support.
Under data protection legislation you have a number of rights in relation to your personal information.
You have the right to request a copy of the personal information that we hold about you. This is known as a Subject Access Request.
If you wish to request a copy of your personal information, please address requests to firstname.lastname@example.org
The accuracy of your information is important to us. If you change your name or address/email address, or you discover that any of the other information we hold is inaccurate or out of date, please let us know by getting in touch with your nominated consultant or via email@example.com.
You may ask for your personal information to be removed from our systems. Unless we are legally permitted or required to keep the data, we will comply with your request.
You may also ask us to restrict processing your personal information in the following situations:
Where you believe it is unlawful for us to process the data,
You have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings.
If you wish to exercise any of these rights, please email your request to firstname.lastname@example.org