Our privacy policy is based on the principle that your data is your property - not ours. You have trusted us to hold it and we will protect it to the best of our ability, but we will not use, sell or give it to anyone else without your express permission.
- We collect the minimum amount of personal information needed to operate our service,
consisting of the following:
- Parent name (so teachers know who to expect)
- Parent email (so we can send you information about your booking)
- Parent phone (so the event organiser can contact you in an emergency)
- Student name (so teachers know who the meeting is about)
- Browser IP address (only used in case of abuse)
- All personal information is entered by you, except for your IP address which we collect from your browser.
- We share this information with your school, but no-one else.
- We do not cross-reference your information with any other source of data.
- School Interviews allows you to view and correct your information at any time, by returning to the website. You can also ask your school to update or delete your information.
- School Interviews uses a single cookie containing coded configuration settings for the sole purpose of maintaining your session as you interact with our service. We do not share this cookie with anyone else, so it cannot be used to identify or track you on any other web site.
- School Interviews uses best-practise encryption of data in transit and in storage.
- School Interviews runs on servers based in the USA. See below for more information.
- We will notify our customers of any material changes to this privacy policy.
- If you feel we have breached your privacy, or that we could improve our privacy policy, please contact us.
Privacy Legislation
We believe our privacy policy meets the requirements of all major privacy legislation in the countries we operate in. This includes:
- Australia's Privacy Act 1988, Privacy Amendment (Enhancing Privacy Protection) Bill 2012 and the Australian Privacy Principles.
- The Canadian Personal Information Protection and Electronic Documents Act ("PIPEDA").
- The European Union General Data Protection Regulation ("GDPR").
- The United Kingdom Data Protection, Privacy and Electronic Communications (Amendments) Regulations ("GDPR" and "DPA 2018").
We have been independantly assessed for security, privacy and online safety by Safer Technology 4 Schools (ST4S).
Cookie Consent Exemption
EU users may notice that despite using a cookie, we do not ask you to accept it. This is because our cookie is strictly necessary to provide our service - we could not provide a secure personalised service without it. This means we satisfy Criterion B of Article 5.3 of Directive 2002/58/EC as amended by Directive 2009/136/EC, and are exempt from providing the right to refuse a cookie.
Server Location
Our services are used by customers in over thirty counties. It would be impractical and expensive to set up and manage servers in each country, so we use centralised servers based in the USA.
Subprocessors
Google Cloud Platform
Our only subprocessor is Google Cloud Platform, which provides the Appengine platform that School Interviews runs on. Appengine stores and processes all School Interviews data, which is encrypted in transit and at rest. In-depth analysis here.
Our use of Google Cloud Platform does not give Google Search any access to School Interviews data. We don't use Google authentication or analytics, so there is no way Google can use School Interviews data to identify or track you.
Google offers Data Processing and Security Terms (DPST) that incorporate Standard Contract Clauses (SCC) that meet the security, contracting, and data transfer requirements under EU, UK, and Swiss GDPR data protection laws.
Google's security and privacy arrangements have been independently certified:
Google has many other certifications, which you can view here.
We have no other subprocessors. In particular, We do not use any third-party analytics.