Please read this privacy noice carefully before using the www.moneyheroes.org.uk website or downloading any Money Heroes resources
Last Updated: September 2020
Money Heroes is an initiative of Young Money, which is part of Young Enterprise. Young Enterprise is the UK’s leading enterprise and financial education charity supporting children and young people to successfully earn and manage money. Young Money supports all educators in developing the financial capability of the young people they work with. We are a trusted and valued provider of knowledge, resources and training to anyone teaching children and young people how to manage money.
If you are participating in the Money Heroes programme (the “Programme”), browsing or logging on to https://www.moneyheroes.org.uk (the "Website"), or if you access or download any materials on the Website (the "Resources"), then this privacy notice (the "Notice") applies to you. This Notice also applies to anybody else we interact with and collect information about with respect to the Programme, including volunteers, alumni, donors, funders, business partners, service providers, representatives of trusts & foundations and members of any parliamentary groups which we support.
Note that there is a separate Notice in relation to the Young Enterprise and Young Money website (www.young-enterprise.org.uk), available at https://www.young-enterprise.org.uk/policies, and other Young Enterprise or Young Money programmes may have their own separate privacy policies.
The Website is provided by Young Enterprise. If we refer to "we", "us" or "our" in this Notice, we mean Young Enterprise (incorporating both the Young Money and Money Heroes brands). There is more information about us at section 11 (at the bottom of this Notice).
Please read this Notice carefully as it explains how we collect and use information about you and any young people you work with in relation to the Programme ("personal information"), what we do with that personal information, who we share it with (and why), where it may be processed and the choices we provide to allow people to control, access and update that personal information.
If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided under "Contact us ".
2. What personal information do we collect and why is it collected
When you use the Website, or you participate in the Programme, there are two ways that we collect personal information: Directly collected information, which is information you have submitted to us yourself and indirectly collected information, which is information that you do not provide to us but which we have collected by other means.
Information provided to us: The information that you provide to us may include, for example:
- your name, address, email address, and telephone number;
- the name and address of the school, college or other organisation you are associated with (or that your child or children attend);
- your job title and/or role; and/or
- the age of the children and/young people you work with.
You may, for example, provide personal information to us about yourself when you:
- register your details on the Website and/or register the school/organisation or children/young people you work with to participate in the Programme, receive updates or newsletters from us, or use our Website;
- download or order any of the Resources available on the Website;
- report a problem with the Website, Resources or the Programme, or ask a question in respect of the Programme or other Young Enterprise or Young Money programmes and services;
- share information via the Website or social media functions (such as your social media profiles);
- contact us (for example, by telephone or email);
- give us feedback; or
- complete a survey.
You may choose whether or not to give some information to us. However, not providing certain information may mean you cannot enjoy all or parts of the Website and may affect your participation in the Programme or that of the young people you work with.
Information that is automatically collected When you use the Website, we automatically record information about your visit from your web browser or the device you are using to access the Website (such as your phone, laptop or home computer). The information that might be automatically collected in this way includes:
- the IP address of your device, device information such as whether it is a phone or laptop, the unique device identifier (which is a specific number that your devices will have) and the software your device is using;
- how you use the Website such as what pages you look at, the Resources you download and how long you are on a Website page;
- Website traffic data;
- cookie information (as explained in our Cookies Notice); and
- location information (e.g. what country or city you are in when you access our Website, but this information is only seen by us if your device settings allow this).
Some of this information may be collected using cookies and similar tracking technology, as explained further at section 9 of this Notice.
Information from others: We also collect some information from other organisations and public sources but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. For example where you are a member of staff at a school or college, we may use information available from gov.uk or your school’s website to find out more about your school and the demographics of the children or young people who attend.
3. Legal basis for processing personal information
Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information about you only where:
- we have the relevant person's permission (or that of their parent or guardian);
- we need the personal information to perform a contract with the relevant person, or;
- it is in our legitimate interests and not overridden by the data protection interests or fundamental rights and freedoms of the relevant person.
If we ask you to provide personal information that is needed by law or to perform a contract, we will tell you at the time and tell you whether you are able to proceed without providing personal information.
Where we collect and use personal information on the basis of our legitimate interests (or those of any other group), our legitimate interests include the activities in section 3 above. If we process personal information for any other legitimate interests, we will tell you at the time what those legitimate interests are.
If you have questions about or need more information about the legal basis on which we collect and use personal information, please contact us using the contact details provided at section 10 below.
4. Who do we share personal information with?
We may disclose your personal information to the following categories of recipients:
- to our group companies, third party services providers and partners who provide data processing services to us, or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information
- to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
- to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;
- to any other person with your consent to the disclosure.
5. International transfers of personal information
Personal information may be transferred to, and processed in, countries other than where the relevant person lives. Those countries may have data protection laws that are different to the laws of that person's country (and may not be as protective).
We process personal information in the United Kingdom and in some other EEA countries, such as the Republic of Ireland, and some of our service providers will process personal information in the United States. This means that when we collect your personal information we may process it in any of these countries. When we transfer your personal information to any other territories outside of the EEA or the UK, we will take such measures as are appropriate to safeguard your information. For EEA and UK personal information, this may include implementing the European Commission’s Standard Contractual Clauses for any such international transfers.
6. How long do we keep personal information
We retain personal information we collect from you where we have an ongoing organisational need to do so (for example, to provide you with a service you have requested or to comply with the law or tax or accounting requirements or to deal with any claim which you, we or somebody else may have in respect of personal information).
When we no longer have a legitimate organisational need to process personal information, we will either delete or anonymise it or, if this is not possible (for example, because the personal information has been stored in backup archives), then we will securely store the personal information and make sure that it is not processed until we can delete it. We maintain a data retention and deletion policy and we will retain and delete your personal information in accordance with this Notice.
7. Your rights
You have the following data protection rights:
If you wish to access, correct, update or request deletion of personal information, you can do so at any time by contacting us using the contact details at section 10 below. You may also be able to do this within your secure account. Please note that some information cannot be changed once you have entered it. This is to discourage users from engaging in unlawful activities. We may be unable to continue providing the Website or Resources or continue to allow you or the young people you work with to participate in the Programme if you delete certain pieces of personal information we hold – if you have any questions or concerns about this, please get in touch with us (our contact details are in section 10).
You can also object to processing of personal information, ask us to restrict processing of personal information or request portability of personal information. Again, these rights can be exercised by contacting us using the contact details at section 10 below.
You have the right to opt-out of marketing communications we send you at any time.
You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details at section 10 below.
If we process personal information on the basis of consent, then that consent can be withdrawn at any time by contacting us using the contact details at section 10 below. We may still be entitled to use the information on a different legal basis.
You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. In the UK this will be the Information Commissioner’s Office (the "ICO"). The ICO makes a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers, such as Young Enterprise, are available publicly. You can access them at www.ico.org.uk.
We answer all requests from people wanting to exercise their data protection rights in line with the requirements under data protection law.
8. Updates to this Notice
We may need to update or change this Notice from time to time. We will try our best to tell you about any changes by posting on the Money Heroes website www.moneyheroes.org.uk and will ask for your permission where the changes are important and where your permission (or that of the young people you work with) is required under data protection law. That way, you can check to see if you’re still happy.
10. Contact us
Please contact us if you have any questions about information we hold about you or about this Notice:
- Send an email to firstname.lastname@example.org; or
- Write to us at FAO: Head of Programmes and Services, Young Enterprise, Coram Campus, 41 Brunswick Square, London WC1N 1AZ, United Kingdom
11. About us
Young Enterprise is a charity incorporated in England and Wales as a company limited by guarantee, with company number 712260 and registered charity number 313697 and having its registered office at Coram Campus, 41 Brunswick Square, London WC1N 1AZ.
We are the ‘data controller’ for the personal information that we process in accordance with this Notice. This term is a legal phrase used to describe a person or entity that controls the way someone's personal information is used and processed.