Personal data refers to any information capable of identifying an individual. It does not include anonymised data.

1. How we obtain personal data
We may collect data about you by you providing the data directly to us (for example by filling in forms on our site or by sending us emails). We may automatically collect certain data from you as you use our website by using cookies and similar technologies. Please see our Cookie Policy in this document for more details about this.

We may receive data from third parties such as event organising or ticketing platforms or data collection specialists or search and analytics providers such as Google based outside the EU, advertising networks such as Facebook based outside the EU, providers of technical, payment and delivery services, such as data brokers or aggregators.
We may also receive data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.
Types of personal data we collect directly
When you use our website, or buy from us, we ask you to provide personal data. This can be categorised into the following groups:
• personal identifiers, such as your first and last names, your title and your date of birth.
• contact information, such as your email address, your telephone number and your postal addresses for billing, delivery and communication.
• account information, including your username and password, as appropriate.
• payment information, such as a debit or credit card number and expiry date and bank account details.
• records of communication between us including messages sent through our website, email messages and telephone conversations.
• marketing preferences that tell us what types of marketing you would like to receive.

2. Types of personal data we collect from your use of our services
By using our website and our services, we process:

• your username and password and other information used to access our website and our services.
• information you contribute to our community, including reviews.
• your replies to polls and surveys.
• technical information about the hardware and the software you use to access our website and use our services, including your Internet Protocol (IP) address, your browser type and version and your device’s operating system.
• usage information, including the frequency you use our services, the pages of our website that you visit, whether you receive messages from us and whether you reply to those messages.
• transaction information that includes the details of the products services you have bought from us, and payments made to us for those services.
• your preferences to receive marketing from us; how you wish to communicate with us; and responses and actions in relation to your use of our services.
We may process the following categories of personal data about you:
• Customer Data:
This type of data includes any data relating to any purchases of Products / or services, such as your title, name, billing address, delivery address, email address, phone number, other contact details, purchase details and your credit or debit card details. We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
• User Data:
This type of data includes any data about how you use our website and any online services together with any data that you may post for publication on our website or through other online services. We process this data to operate our website and ensure relevant content is provided to you, to ensure the security of our website, to maintain back-ups of our website and/or databases and to enable publication and administration of our website, other online services and business. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business.
User data includes data about your name, address, the results of any tests or quiz on one of our websites and any details of any files that you downloaded or requested. We process this data to deliver relevant newsletters and other information about our business and services, as well as emails related to the downloaded or requested information. Our lawful ground of processing is consent.
• Technical Data:
This type of data includes data about your use of our website and online services such as your internet service provider, IP address, your login data, details about your browser, length of visit to pages on our website, page views and navigation paths, details about the number of times you use our website, geographical or time zone settings and other technology on the devices you use to access our website. The source of this data is from our analytics tracking system. We process this data to analyse your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our advertising. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business and to grow our business and to decide our marketing strategy.
• Communication or Contact Data:
This type of data includes any communication that you send to us whether through email, text message, social media message posting or the contact form on our website or any other type of communication that you may send us. We may keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high-quality service.
We process this type of data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend any legal claims, as appropriate.
• Marketing Data:
This type of data includes data about your preferences in receiving marketing from us and our third parties and your communication preferences. We process this data to enable you to participate in our promotions such as competitions, prize draws and free give-aways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising. Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business and to decide our marketing strategy.
In addition, we may use Customer Data, User Data, Technical Data and Marketing Data to deliver relevant website content and advertisements to you (including Instagram / Facebook advertisements or other display advertisements) and to measure or understand the effectiveness of the advertising we serve you. Our lawful ground for this processing is legitimate interests which is to grow our business. We may also use such data to send other marketing communications to you. Our lawful ground for this processing is either consent or legitimate interests (namely to grow our business).
The bases on which we process information about you
The law requires us to determine under which of six defined bases (consent, performance of a contract, a legitimate interest, a vital interest, a legal requirement, and a public interest) we process different categories of your personal data, and to notify you of the basis for each category. If a basis on which we process your personal data is no longer relevant, then we shall immediately stop processing your data. If the basis changes, then if required by law, we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.
We will only use your personal data for a purpose it was collected for or a reasonably compatible purpose, if necessary. For more information on this please email us at support@educopoly.com
In case we need to use your details for an unrelated new purpose we will let you know and explain the legal grounds for processing. We may process your personal data without your knowledge or consent where this is required or permitted by law.
We do not carry out automated decision making or any type of automated profiling.
3. Types of personal data we collect from third parties
We may confirm some of the information you provide to us directly using data from other sources. We could also add to the information we hold about you, sometimes to remove the need for you to provide it to us and sometimes in order to be able to assess the quality of the services you offer. You may also receive data from our publishing arm of the company or from other domains but they are all owned by the Company.
The additional information we may collect can be categorised as follows:
• information that confirms your identity.
• business information, including your business trading name and address, your company number (if incorporated), and your VAT number (if registered).
• information that confirms your contact information.
• reviews and feedback about your business on other websites through which you sell your services.
• unsolicited complaints by other users.
4. Our use of aggregated information
We may aggregate anonymous information such as statistical or demographic data for any purpose. Anonymous information is that which does not identify you as an individual. Aggregated information may be derived from your personal data but is not considered as such in law because it does not reveal your identity.
For example, we may aggregate usage information to assess whether a feature of our website is useful. However, if we combine or connect aggregated information with your personal data so that it can identify you in any way, we treat the combined information as personal data, and it will be used in accordance with this Privacy notice.
5. Sensitive or Special personal data
Sensitive or Special personal data is data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. It also includes information about criminal convictions and offences. We do not collect any special personal data about you.
6. If you do not provide personal data we need
Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver Products or services to you).
If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered but if we do, we will notify you at the time.
7. Information we process because we have a contractual obligation with you
When you create an account on our website, buy a product or service from us, or otherwise agree to our terms and conditions, a contract is formed between you and us. In order to carry out our obligations under that contract we must process the information you give us. Some of this information may be personal data. We may use it in order to:
• verify your identity for security purposes when you use our services
• sell products to you
• provide you with our services
• provide you with suggestions and advice on products, services and how to obtain the most from using our website
We process this information on the basis there is a contract between us, or that you have requested we use the information before we enter into a legal contract. We shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.
8. Information we process with your consent
Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website or ask us to provide you more information about our business, including job opportunities our products and services, you provide your consent to us to process information that may be personal data.
Wherever possible, we aim to obtain your explicit consent to process this information, for example, we ask you to agree to our use of non-essential cookies when you access our website. If you have given us explicit permission to do so, we may from time to time pass your name and contact information to selected associates whom we consider may provide services or products you would find useful.
We continue to process your information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists. You may withdraw your consent at any time by instructing us at support@educopoly.com.
We aim to obtain and keep your consent to process your information. However, while we take your consent into account in decisions about whether or not to process your personal data, the withdrawal of your consent does not necessarily prevent us from continuing to process it. The law may allow us to continue to process your personal data, provided that there is another basis on which we may do so. For example, we may have a legal obligation to do so.
9. Information we process for the purposes of legitimate interests
We may process information on the basis there is a legitimate interest, either to you or to us, of doing so.
Where we process your information on this basis, we do after having given careful consideration to:
• whether the same objective could be achieved through other means
• whether processing (or not processing) might cause you harm
• whether you would expect us to process your data, and whether you would, in the round, consider it reasonable to do so
For example, we may process your data on this basis for the purposes of:
• improving our services
• record-keeping for the proper and necessary administration of our business.
• responding to unsolicited communication from you to which we believe you would expect a response
• preventing fraudulent use of our services
• exercising our legal rights, including to detect and prevent fraud and to protect our intellectual property
• insuring against or obtaining professional advice that is required to manage business risk
• protecting your interests where we believe we have a duty to do so

Marketing Communications

• Our lawful ground of processing your personal data to send you marketing communications is either your consent or our legitimate interests (namely to grow our business).
  Under the Privacy and Electronic Communications Regulations, we may send you marketing communications from us if (i) you made a purchase or asked for information from us about our goods or services or (ii) you agreed to receive marketing communications, and in each case, you have not opted out of receiving such communications since.
• Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However, you can still opt out of receiving marketing emails from us at any time.
  We will not share your personal data with any third party for their own marketing purposes.
• If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations etc.
  Disclosures of your personal data
  With whom do we divulge your personal data in this manner?
  We may share your personal data with businesses that provide services to us, or with business partners.

As examples, the following categories of third parties will get your personal information:

• We may pass your payment information to our payment service provider to take payments from you, such as credit card firms and other payment providers to confirm card payments and handle refunds. At the point of payment, you are transferred to a secure page on the website of a reputable payment service provider. That page may be branded to look like a page on our website, but it is not controlled by us. We may securely store this payment information [at your request] in order to make repeat purchasing of goods and services easier next time you visit our website.
• Our Logistics provider for delivery and courier services for the purpose of product delivery and return processing where applicable. We consider these logistical companies to be data processors;
  
  • Prize draws and competitions - any relevant third-party co-promoter, such as a book publisher, prize provider, organiser, or publicity platform;
  
  • We may use fraud prevention agencies and credit reference agencies to verify your identity and we may pass your information to those agencies if we strongly suspect fraud on our website;
  
  • We may pass your contact information to marketing and advertising agencies to use to promote our products and services to you.
  
  We may also have to share your personal data with the parties set out below:
  • Service providers, for example, those who provide IT and system administration services.
  
  • Professional advisers including lawyers, bankers, auditors and insurers
  
  • Government bodies that require us to report processing activities.
• Third parties to whom we sell, transfer, or merge parts of our business or our assets.
  
  We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

10. Information we process because we have a legal obligation
Sometimes, we must process your information in order to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal data.