Privacy Policy

We are committed to protecting and respecting the privacy of your personal data. This privacy notice explains how your data is collected, used, transferred and disclosed by us. It applies to data collected when you use our website, products or services. It also applies when you interact with us through social media, email, post, text or phone.

The legal basis for processing your personal data

The law requires us to inform you of the legal basis for collecting and processing your personal data, where we are the Data Controller, or Joint Data Controller. The basis on which we process data is:

Performance of contract

This occurs when we have a contract with you to either provide a product or service to you.

What Personal information does Monstats collect?

School Users

The School name, address and email (for billing, posting cards and creating accounts)
Individual teachers’ name, address and email, (for billing, posting cards and creating accounts)

Personal Tutors/ Parents

The School name, address and email (for billing, posting cards and creating accounts)

What do we do with it?

Personal data, such as School, teacher, tutor, parent or any other individual’s names, addresses and email addresses are maintained in a secure Client Management System to keep track of orders and where individuals need support, as a point of reference of their original order.

How long do we keep it?

We retain personal information we collect from Users where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process User’s personal information, or where you ask us to delete Users’ information, we take reasonable steps to either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store Users’ personal information and isolate it from any further processing until deletion is possible. We may have to retain and use personal information as necessary to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our terms and conditions.

How do we keep your information secure?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The data that we collect from you is stored on secure servers in England. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. All traffic and passwords are encrypted. As part of our privacy compliance processes we review these security procedures to consider appropriate new technology and methods.

We use a third party payment processor, Stripe, to process credit card payments made to us. Transactions are encrypted using SSL technology. We do not retain any credit card numbers ourselves. Stripe's use of your personal information is governed by their privacy policy.

You are responsible for keeping your passwords secure and you should not share these with anyone.

Users should be aware that unfortunately the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Monstats’ Cookie Policy

A cookie is a little piece of information handed to a web browser from a web server that contains information that can be retrieved from the server later. When you visit the Site the server may attach a cookie to your computer’s memory. We use cookies only to remember what language is set, which school last logged into the machine and the session cookie for knowing who is logged in. You should be able to configure your browser so that it disables cookies.

To help us better understand your needs, we also use analytical software. This software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the Site, but will not store, save or collect personal information. You can read Google’s privacy policy regarding use of cookies for further information.

What are your rights?

Users have the following data protection rights:

If a User wishes to access, correct, update or request deletion of their personal information, or that of their school (in the case of teachers), they can do so at any time by contacting us using the contact details provided under the how to contact us heading below.
In addition, Users can object to processing of their personal information, ask us to restrict processing of their personal information or request portability of their personal information. Again, Users can exercise these rights by contacting us using the contact details provided under the How to contact us heading below.
Similarly, if we have collected and process Users’ personal information with their consent, then Users can withdraw their consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to withdrawal, nor will it affect processing of personal information conducted in reliance on lawful processing grounds other than consent.
Users have the right to complain to a data protection authority about our collection and use of their personal information. For more information, please contact your local data protection authority. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

How to Contact Us

If you have any questions or concerns about our use of your personal information, please contact us.

The data controller of your personal information is Bill Parker and can be contacted at [email protected].