Privacy Statement

This statement (together with our Cookie Policy below) sets out how we will process any personal data we collect from you or that you provide to us. By visiting our website at www.westdean.ac.uk you are accepting and consenting to the practices described in this statement.

For the purpose of the General Data Protection Regulation (GDPR) the organisation is The Edward James Foundation Limited (charity number 1126084 and Company Number: 6689362) of Estate Office, West Dean, Chichester, West Sussex, PO18 0QZ. Our registration number with the Information Commissioner's Office is Z7402406.

1. Data we collect

We may collect and process the following data about you:

Data you give to us: you may give us personal data by completing forms or transactions on this website or by corresponding with us by telephone, e-mail or post. This includes data you provide when you request information from us or make other enquiries, apply for a course of study or register for an event that we are organising or hosting, subscribe to one or more of our newsletters, place an order on our website, make a donation to us or make a booking. The data you give us may include your name, address, e-mail address and telephone number, areas of interest, qualifications, financial and credit card information.

Data we collect about you: on each visit to this website we may automatically collect the following data:

technical data, including the internet protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

data about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from this website (including date and time); products and resources you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any telephone number used to contact us.

Data we receive from other sources: as some of our services are delivered by sub-contractors in technical, payment and delivery services, SagePay and Merac. We may receive data about you from search information providers Google Analytics, also social media analytics from Facebook, Twitter, Instagram, YouTube, Pinterest and LinkedIn. 

Read more in our Cookie policy

2. What we do with your data

We process data held about you in the following ways:

to carry out our contractual obligations arising from any agreements entered into between you and us and to provide you with the information, products and services that you request from us;

to provide you with information about other courses, events, products and services we offer that are similar to those that you have already applied or registered for or enquired about. This data is processed on the basis of legitimate interest.

to notify you about changes to our courses and events on the basis of legitimate interest.

to ensure that content from this website is presented in the most effective manner for you and for your device.

to provide you with details of fundraising appeals or campaigns that support our work, and to process any Gift Aid donations and reclaim appropriate tax reliefs, on the basis of legitimate interest

Data we collect about you: we will use this data:

to administer this website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

to improve this website to ensure that content is presented in the most effective manner for you and for your device;

to allow you to participate in interactive features of this website, when you choose to do so; and

as part of our efforts to keep this website safe and secure.

3. Disclosure of your data

Except as set out below and unless otherwise stated on the relevant form collecting your data, we will not disclose your data to third parties.

Your data may be disclosed to third parties:

where we are under a duty to disclose or share your personal data in order to comply with any legal obligation or are legally permitted to disclose or share it;

in order to enforce or apply any contractual agreements entered into between us or the terms of any student or staff policies;

to protect our rights, property, or safety, and those of our staff, students and other users of this website, or our services or resources or any other person (including but not limited to third parties who claim that you have infringed their intellectual property rights and/or privacy rights). This data sharing includes the legal basis for exchanging information with other companies and organisations for the purposes of fraud protection,

to any third parties who accredit our courses and/or provide part of their delivery and assessment, on the basis of legitimate interest;

to analytics and search engine providers that assist us in the improvement and optimisation of this website, on the basis of legitimate interest;

to subcontractors who assist us in the delivery and administration of this website and our courses, events, products and services, on the basis of legitimate interest;

4. Where we store your personal data

All data you provide to us is stored on our secure services in the UK or with our chosen system providers who are Privacy Shield Certified. Any payment transactions will be encrypted [using SSL technology]. Where we have given you (or where you have chosen) a password which enables you to access certain parts of this website, you are responsible for keeping this password confidential and not sharing it with anyone else.

We will do our best to protect your personal data, but we cannot guarantee the security of data transmitted to this website as transfer via the internet is not completely secure; any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.

5. Your rights: to withdraw consent, be informed, be forgotten, rectification

You have the right to withdraw your consent for processing of your data at any time by contacting us (details below).

The GDPR gives you the right to access data held about you. Your right of access can be exercised by contacting us. We will provide you with details of the data we hold about you within 30 days.

Right to be forgotten: An unsubscribe option is automatically included in the footer of every email newsletter you receive, should you wish to remove yourself from our eNewsletter list.

Upon request we will also permanently delete your record and all data associated with it.

Right to rectification: You may update your data at any time to correct information we hold about

Right to Object: if you have any concerns or objections then contact us at the email or address below.

Please direct any of the above requests to email: [email protected] Or Attn: Data Controller, The Edward James Foundation Limited, Estate Office, West Dean, Chichester, West Sussex, PO18 0QZ,

6. Data retention policy

We normally retain contact data for three years unless there is a legal/contractual requirement to retain beyond this.

Some student data is retained for the lifetime of the student to reflect the ongoing relationship with the College and some Alumni records are retained indefinitely as there is an expectation that Higher Education Colleges should retain a permanent core record of students and courses studied (see Data Protection Guidance for Students).

7. Changes to our privacy policy

Any changes we may make to our privacy statement in the future will be posted on this page and, where appropriate, notified to you by e-mail.

8. Links

This website may, from time to time, contain links to and from the websites of our partner organisations, affiliated bodies and other third parties. If you follow any of these links, please be aware that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

9. Contact

Questions, comments and requests regarding this privacy statement should be addressed to email: [email protected]