Privacy Policy for Harris Technology Practice

1. Introduction

Welcome to the Privacy Policy of Harris Technology Practice (operated by Rich Harris). This policy explains how we collect, use, store, and protect your personal data when you visit our website www.harristechnologypractice.co.uk (the "Website"), use our services, or interact with us.

We are committed to protecting your privacy and handling your data in a lawful and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purpose of the UK GDPR, Richard Harris is the data controller responsible for your personal data.

2. What Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: includes first name, last name, title, and potentially your organisation (e.g., school or college name).
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
• Usage Data: includes information about how you use our Website, services, and online sessions.
• Marketing and Communications Data: includes your preferences in receiving marketing from us and your communication preferences.
• Inquiry Data: Information you provide when contacting us through forms or email, which may include details about your AI and EdTech needs or interests.
• Registration Data: Information you provide when registering for online sessions, which may include Identity Data and Contact Data.

3. How We Collect Your Data

We use different methods to collect data from and about you, including through:

• Direct interactions: You may give us your Identity, Contact, Inquiry, and Registration Data by filling in forms on our Website (such as the Contact Us form or online session registration forms) or by corresponding with us by email or phone.
• Automated technologies or interactions: As you interact with our Website, we may automatically collect Technical Data and Usage Data. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third parties: We may receive Technical Data and Usage Data from third parties, such as analytics providers (e.g., Google Analytics) or services embedded on our website (e.g., Google Maps).

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To respond to your inquiries and provide you with the information or services you have requested.
• To manage your registration for and participation in our online sessions.
• To provide and maintain the functionality of our Website.
• To improve our Website and services based on how users interact with them (using Usage and Technical Data).
• To send you relevant communications if you have opted in to receive marketing from us.
• To comply with legal obligations.

5. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Consent: Where you have given us clear consent for specific processing purposes (e.g., subscribing to a mailing list, accepting certain cookies, or providing data via a contact form where the purpose is clearly stated).
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., to provide consulting or training services you have agreed to).
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This might include improving our services, marketing our business (where consent is not required), or ensuring the security of our Website.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation that we are subject to.

6. How We Store Your Data

Your data may be stored on secure servers located within the European Economic Area (EEA). We take reasonable steps to ensure your data is treated securely and in accordance with this privacy policy and the UK GDPR.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Sharing Your Data

We may share your personal data with trusted third parties in certain circumstances:

• Service Providers: We may share data with third-party service providers who perform functions on our behalf, such as website hosting, analytics providers (e.g., Google Analytics), email communication services, and online meeting platforms (e.g., Google Meet for session hosting and registration). These third parties will only process your personal data on our instructions and are subject to a duty of confidentiality.
• Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: If we sell or transfer all or a portion of our business or assets, your personal data may be transferred to the buyer or the receiving entity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

9. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. However, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of your data transmitted to our Website.

10. Your Data Protection Rights

Under the UK GDPR, you have certain rights regarding your personal data. These include the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us using the contact details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

11. Cookies

Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Website may not function properly or become inaccessible.

12. Third-Party Websites

Our Website may include links to third-party websites, plug-ins, and applications (e.g., links to AI tools, EdTech platforms, or social media). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Effective Date" at the top of this policy. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

14. How to Contact Us

If you have any questions about this privacy policy or our data protection practices, please contact us at:

Email: richard@harristechnologypractice.co.uk

15. How to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.