OUR STATEMENT OF COMPLIANCE
One Goal Ltd and One Goal UK Ltd ( One Goal or ‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and law. This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data.
One Goal Ltd and One Goal UK Ltd registered office is 4 Longmeadow, Cheadle, Stockport, SK8 7ER and we are a company registered in England and Wales under company number 07356869 (ONE GOAL LTD) and 13623600 (ONE GOAL UK LTD).
We are registered on the Information Commissioner’s Office Register of Data Controllers under registration number C1239465 (ONE GOAL LTD) and C1239502 (ONE GOAL UK LTD) and act as the data controller.
Our website address is: www.onegoal.co.uk
Our commitment to user privacy and data protection
One Goal is committed to meeting the highest standards of data protection to provide the best service to our contacts. We will tell our contacts exactly how we will use and store their data; not use it for any purpose other than the ones for which we have a lawful basis; and use appropriate security measures in relation to the data.
One Goal is committed to respecting the personal data you supply us with. The details we store enable us to personalise the service we provide and, with your express consent, to keep you updated with details of our services that may be of interest to you. With your consent, we may contact you by post, telephone or email to provide information to you about other services and products that we think might be of interest to you.
You have the right to opt out of receiving promotions from us and/or our chosen third parties at any time. This can be done by emailing us at www.onegoal.co.uk www.onegoal.co.uk
We process all personal data, including that collected via this website in accordance with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA). GDPR/DPA outline how organisations must collect, handle and store personal information. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed to any unauthorised parties.
Users who entrust their personal data to companies like One Goal have the following rights under
The right to be forgotten (you can request for your data to be deleted)
The right to see all the data we hold on you (by submitting a Subject Access Request)
The right to data portability (if you ask for a copy of all of your data, we’ll give it to you in a commonly used format, like a pdf)
The right to correct inaccurate information we hold on you
The right to opt-out of marketing communications as easily as you opted in
The right to restrict or object to processing (although we may still need to hold on to your data, for example to fulfill a contract
Personal Information that our website collects & why we collect it
Site visitation tracking
As with most websites, we use Google Analytics to measure how visitors move through and engage with the website. We use this data to improve our services, for example by measuring which pages people visit before making a purchase and ensuring those pages are optimised to make relevant information easy to find. To opt out of google analytics please click here: https://tools.google.com/dlpage/gaoptout
Google Analytics records information such as your location, and the device, browser and operating system you are using to view the website (“usage data”). None of this information can be used to identify you. Google Analytics records - but does not grant us access - to your computer’s IP address. For this reason, we treat Google as a third-party data processor.
We use this data to improve our services, for example by measuring which pages people visit before making a purchase and ensuring those pages are optimised to make relevant information easy to find. The legal basis for this processing is our legitimate interests. Disabling cookies on your internet browser will stop Google Analytics from tracking any aspect of your journey through our website.
Contact forms and email links
You will only ever receive correspondence from us directly or via a sender authorised by One Goal, based on the notification settings in your account.
Where you give consent, we contact you via email periodically with additional communications around educational content and specific promotions. Please note that you will need to email us using the email account you want to have removed from our records
School’s and Pupil Data
What information we will hold on schools:
We hold email addresses, contact names and telephone numbers of school staff (both named and generic addresses) who have registered their information with One Goal.
How we will use it
We hold school contact information (email addresses, postal addresses and phone numbers) for billing Purposes. We also retain email addresses in order to contact schools with marketing information which we think will be of interest to them.
In most cases we would only ever require pupil data for providing pupils individual access to online courses and resources. In this case we recommend using the pupil’s school-email address. We also do not require the full names of pupils to be disclosed (Initials can be used in place of first and last names).
Where we hold pupil data we will only retain pupil data for the lifetime of the school’s contract with us. If a school ends their contract with us, we will delete all pupil data for that school within three months of the end of the current academic year
We will not contact pupils directly via email for any reason and pupil data is not shared with any third parties.
Other data such as taking photographs and videos of pupils will only be obtained where we have already been given permission to do so.
How long we’ll keep your data
One Goal only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. For online purchases we are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed. Where we are using your details for direct marketing, we will keep such data until you notify us to delete the data or withdraw your consent. We have the right to retain data which is in the public domain, including school names, addresses, phone numbers and generic email addresses.
How we store your personal information
If you create an account through our website, enquire via our website or you ask us to add you manually into our database your information is held and stored securely solely for us on either Close CRM or Kajabi servers.
If you create an account through our website, enquire via our website or you ask us to add you manually into our database your information is held and stored securely solely for us on either Close CRM or Kajabi servers
Sharing or transferring your data
We do not share or transfer your data with any third parties. If we did want to do this we will only do this once we have your consent and permission to do so.
In the event of an unlawful data breach of our website or any of our data held on third-party data processors, we will inform the Information Commissioner’s Officer within 72 hours of the breach, if the rights and freedoms of those individuals whose data has been compromised is at risk. We will inform those individuals of the breach if the data compromised could have a significant negative impact on the individuals concerned (e.g. if it affects their financial or medical data).
Information Commissioner’s Office (ICO)
If you need to contact the ICO to report any issues with the way we have handled your personal data, you contact them through the following channels:
Call the helpline: 0303 123 1113
Visit their website: https://ico.org.uk/