Skip to main content
English | Cymraeg
Contact

Privacy Policy

This privacy notice sets out how the National Academy for Educational Leadership (we or us) collects and uses information about you. We have third party assurance of our information security systems via the Cyber Essentials Plus certification.

Please read this privacy notice carefully to understand how we will use your personal information. If you have any questions or queries in relation to this privacy notice, you can contact our Data Protection Officer in the following ways:

Kirsty.payne@agaa.cymru
National Academy for Educational Leadership
post@agaa.cymru

This privacy notice explains:

  1. Information we may collect about you
  2. How we use your information
  3. Contacting you
  4. Sharing your information
  5. Our legal basis for collecting, holding and using your information
  6. Security and storage of your information
  7. Your rights  
  1. Information we may collect about you

We may collect the following information about you: 

  • Information you give to us

You may give us information about you by registering to attend our events, applying to become an Academy Associate, joining our mailing list, filling in forms or contacting us by phone, e-mail or letter.

The information you give us may include your name, home address, school/setting details, job title, time in post, e-mail address and phone number. We will also ask Academy Associates to provide information about their qualifications and experience. 

  • Information we automatically collect about you

We automatically collect the following information when you visit our website:

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work efficiently, as well as to provide information to the owners of the site.

We use cookies to help gather anonymous information on how our website is used. This information helps us to improve our website and provide a better service for our visitors. Additionally, the social media functionality that we use sets cookies. The information collected by us includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally.

We use Google Analytics cookies on our website. These cookies are used to find out how visitors use our site. We use the information to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, whether they have visited before and the pages they visit.

You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if cookies are disabled, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

  • Information we receive from others

We work closely with other organisations, including local authorities, schools, colleges, universities, Welsh Government and other middle tier organisations and we may receive information about you from them.

The information we receive from these sources includes name, ages, school/setting details, job title, time in post, email address.

  1. How we use your information

We need to obtain, store and use information about you so that we can provide our services.  We may use information we hold about you in the following ways: 

  • to confirm your identity
  • to let you know about relevant services, events and courses; both ours and those of other parties (including endorsed programmes) whose services we have agreed should be made available to you (see the section below on ‘Contacting you’ for more information about this)
  • to keep you informed and updated about our work
  • to carry out statistical and market analyses, including benchmarking exercises, to enable us to understand you better and improve our services
  • to develop, test and improve our systems
  • to notify you about changes to our services
  • to ensure that the content of our website is presented in the most effective manner for you and for your computer
  • to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
  • to improve our website to ensure that content is presented in the most effective manner for you and for your computer

We may combine information we receive from other sources with information you give to us for the purposes set out above (depending on the types of information we receive).

  1. Contacting you

We will use your contact information to send you important information by letters, emails, text messages, or otherwise to telephone you.  We may record telephone calls for security and training purposes.

We may use the information we hold about you in order to provide you with information about services we feel may interest you.  If you do not want us to use your information in this way, please tick the relevant box situated on the form on which we collect your information.

If you have changed your mind about being contacted for marketing purposes, please contact post@agaa.cymru to update your preferences.

  1. Sharing your information

We may share your information with selected third parties including:

local authorities, schools, colleges, universities, Welsh Government and other middle tier organisations.

We may also share your personal information with third parties if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety of our customers, or others. 

  1. Our legal basis for collecting, holding and using your information

Data protection law sets out various lawful legal bases (or ‘conditions’) which allow us to collect, hold and use your personal information:

  • We will sometimes use your personal information based upon your consent. We will always tell you where this is the case and ask you to agree before we process your information.  An example of using your personal information with your consent is sending you our newsletter or details of events that we think may interest you.
  • Where we have entered into a contract or contracts with you, we may need to use your information to provide you with services.
  • Where it is necessary for us to perform our public functions in the exercise of official authority.
  • Finally, sometimes it is necessary to process your personal information for the purposes of our own legitimate interests. We will only do so where these interests are not overridden by the interests and fundamental rights, or the freedoms of the individuals concerned.

Data protection law recognises certain “special categories” of personal information, which is information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information for uniquely identifying a person, information concerning health, and information concerning a person’s sex life or sexual orientation.  These special categories are considered particularly sensitive and so we will only collect and use this information where you have given us your explicit consent or where we consider it necessary to do so.  

  1. Security and storage of your personal information

The information about you that we collect may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by our suppliers outside the EEA.

We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this privacy notice.

We will generally keep personal information about you no longer than is needed to fulfil the purposes outlined in section 2.

  1. Your rights

You have the right under data protection law to:

  • Request access to your personal information
  • Request correction of your personal information if it is inaccurate
  • Request deletion of your personal information
  • Object to processing of your personal information
  • Request restriction of processing your personal information
  • Request transfer of your personal information in a structured, machine-readable format
  • Not be subject to a decision based solely on automated processing

Many of the rights listed above are limited to certain defined circumstances and we may not be able to comply with your request. We will tell you if this is the case.

If you choose to make a request to us, we will aim to respond to you within one month.  We will not charge a fee for dealing with your request.

If you are dissatisfied with how we are using your personal information or if you wish to complain about how we have handled a request, then please contact our Data Protection Officer and we will try to resolve any issues you may have. You can contact us via:

Data Protection Officer
National Academy for Educational Leadership
post@agaa.cymru
01792 304971

You also have the right to complain to the Information Commissioner’s Office, which is the statutory regulator for data protection law. Details of how to complain to the ICO can be found at https://ico.org.uk/make-a-complaint/