Isca School of English is the data controller under data protection legislation and makes sure that everyone managing and handling personal information in our organisation understands that they are responsible for following good data protection principles and that deliberate misuse or reckless use of personal information may result in disciplinary action being taken. Methods of handling personal information are regularly assessed and evaluated
What data we will collect
In becoming a student, host family or staff member of the Isca school, we will collect certain information about you which will include your name, date of birth, gender, Passport/ID number, email address, address, telephone number, DBS licences, safeguarding course attendance dates you have (if applicable). In the cases of students and staff we will also collect the full name, address and telephone numbers of an emergency contacts nominated by you.
Why we will collect it
We will collect and process your Data for the purposes of registering you as a student, host family or staff member of the Isca School of English and administering your involvement. We will process it on the basis of legitimate interests. The legitimate interests are the interests of registering you as a student, host family or staff member.
How long we will keep it
We will retain your Data for such time as you are a student registered with us or a host family or staff member involved with us and will then delete your information on a staged basis as follows:
Type of Info Date of Deletion
- Student registration information after 6 years (HMRC Legislation)
- Host family data 4 years after a host family has not played an active part in hosting student or immediately if you request this.
- Staff Information registration information after 6 years (HMRC Legislation)
- Registration lists, entry forms and results for ISCA open after 6 years (HMRC Legislation)
- Records Held indefinitely for historical archive purposes.
You have the following rights under data protection legislation:
- to access a copy of the information comprised in your personal data;
- to object to processing of your personal data that is likely to cause or is causing damage or distress
- to prevent processing for direct marketing
- to object to decisions being taken by automated means;
- in certain circumstances, to have inaccurate personal data rectified, blocked, erased or destroyed; and
- to claim compensation for damages caused by a breach of data protection legislation.
Sharing your data
We may share your Data with partners such as British Council and English UK, and third- party data managers that we appoint as data processors as part of administering your involvement in the school (Oxford University Placement test, DBS). We will not transfer your data to any other third parties without obtaining your consent and, where possible, will anonymise your data before sharing. We will also not share any other personal data you provide to us.
We may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your interests.
We may disclose your personal data as reasonably necessary for the purposes of managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in
court proceedings or in an administrative or out-of-court procedure. We do not share personal information with anyone without consent unless the law and our policies
allow us to do so.
If you have any concerns or complaints in relation to how ISCA collects and/or processes your personal data, you should contact ISCA’s data protection officer in the first instance by emailing firstname.lastname@example.org . If you are dissatisfied with how your concern/complaint is dealt with by ISCA, you have the right to report your concern/complaint to the Information Commissioners Office