Privacy Notice.

1. Introduction

This privacy notice explains how we use any personal data we collect about you when you use this website or enquire about any of our services via another method, such as telephone, email or in person.

2. Data Controller and contact details

Spirit Studios is the trading name of Spirit SSR Ltd. Spirit SSR Ltd is the data controller of any personal data collected from an enquiry or by this website. Please use the following contact details if you have any questions about our privacy notice or the personal data we hold about you:

  • By email: dpo@spiritstudios.ac.uk
  • Or write to us at: Data Protection Officer, Spirit SSR Ltd, 65-69 Downing Street, Manchester, M1 7JE, UK

If you wish to opt-out of all marketing, please click here or email opt-out@spiritstudios.ac.uk

3. Your personal data

Personal data refers to any data which relates to or identifies you as an individual.  We collect personal data about you when you subscribe to our newsletter.  We only collect the personal data necessary to provide the services that you request.

Our website server can log limited data about you, such as date/time of visit, IP address, browser and operating system.  Logging is disabled by default and only enabled for troubleshooting purposes or ascertaining the performance of our systems.

We also use technologies, such as cookies, to personalise content and advertising, to provide social media features and to analyse traffic to our website. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. 

When visiting our site, you have the choice to opt-in and allow the use of these cookies or reject them.  You can change your choice at any time.  Please note that certain features of our website will only function if you opt-in to using cookies, such as embedded audio and video players. Some cookies are necessary for the operation of our website, and it is not possible to opt-out of these.

It is possible to adjust your browser or device controls to block cookies or limit ad tracking.  It is also possible to browse websites, including our website, anonymously.  Please consult the documentation of your web browser and/or device for more information.  The cookies used on our site are:

Analytics

Functional

Necessary

  • GDPR Cookie Consent is a plug-in that is used to store whether or not a user has consented to the use of cookies.

How will we use your personal data?

We collect personal data about you when you subscribe to our newsletter. Our lawful basis for such processing is by consent.  Consent means you have given clear consent for us to process your personal data for a specific purpose.  You have the right to withdraw consent for such processing.

Our website server can log personal data about you purely for technical purposes, such as troubleshooting and ascertaining performance of our systems.  The lawful basis for this processing is by legitimate interests.  The processing is for a legitimate purpose, is necessary and has been balanced against your interests, rights and freedoms.

The information logged during your visit to our website by cookies is used to learn about our visitors as a group, not about you as an individual. This information helps us identify overall usage patterns and trends.  The lawful basis for such processing is by consent. Consent means you have given clear consent for us to process your personal data.  You have the right to withdraw consent for such processing.

We also backup email, files and documents, calendars, contacts and more on a daily basis.  Our lawful basis for such processing is by legal obligation.

How long do we keep your personal data?

Personal data collected when subscribing to our E-Newsletter will be processed until you unsubscribe from the service or we receive notification that you wish us to erase your data.

Any personal data logged by our website server will be stored for 30 days.

Personal data logged from your visits to our website by cookies will be stored for 38 months.

4. Your rights

  • Right to be informed – This privacy notice outlines how we process your personal data.
  • Right of access – You have the right to obtain confirmation that your personal data is being processed by us, as well as request a copy of the personal data we have on you. We may make a small charge for requests that are considered unfounded or excessive.
  • Right to rectification – We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
  • Right to erasure – You can request that the deletion or removal of personal data where there is no compelling reason for its continued processing.
  • Right to restrict processing – You have the right to block the processing of personal data under certain circumstances. This would allow us to continue to store your personal data but not further process it.
  • Right to data portability – You have the right to obtain and reuse the personal data we store on you for your own purposes across different services.
  • Right to object – You have the right to object to us processing your personal data for direct marketing and we will stop such processing when receive an objection from you.  You also have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority. You must have an objection on grounds relating to your particular situation. We will stop such processing unless we can demonstrate legitimate grounds for the processing, or that the processing is for the establishment, exercise or defence of legal claims.
  • Rights related to automated decision making – We do not process any of your personal data with any wholly automated decision-making systems, nor do we carry out any profiling.

5. International transfers

We use external providers, including cloud service providers, to process, store and backup data. Usually, data is stored at data centres located in the UK or EU but in exceptional circumstances may be processed in other countries. Your personal data will only be transferred to countries whose data protection laws have been deemed adequate by the European Commission, or where safeguards are in place to protect your personal data. Such safeguards include the EU-US Privacy Shield framework and Standard Contractual Clauses.

6. Children’s personal data

Consent needs to be obtained from a parent or guardian to process the personal data of a child aged 16 or under for any information society service or for the purposes of marketing.

7. Changes to our privacy notice

We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated in January 2023.

8. Supervisory Authority

If you believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).