Privacy Policy

Who we are

Our website address is: https://www.oldyorkist.com. This site is a free alumni service to the Duke of York/Lenana School old students and staff.

What personal data we collect and why we collect it

We have placed student information behind a login section and only passed students will have login user accounts. In that area we will hold name, optional approximate location, years starting and leaving the schools, comments and email address.

Analytics

We do have a Google Analytics account which captures anonymised information about the use of the site. We use that to help us improve the site, the visitor journeys and make sure the hosting is sufficient and responsive.  We capture information about where in the world the visitor comes from (city level) and the type of browser and equipment they use (mobile, desktop, screen size etc). Please read about our cookies.

Who we share your data with

No one unless required to do so by law.

How long we retain your data

At the moment the personal data in the closed area, as it is an alumni service, is retained up until we are asked to remove it by the person or their lawful representative.

If you leave a comment (registered users can comment on posts in the News), the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Your contact information

If you are recorded on the site as an ex-student we will hold your email address. We have obfuscated that in the closed user area and any registered user wishing to get in touch with you can complete a contact form on the site and we will email that out. Visitors to the site can no longer see a simple list with contact details.

How we protect your data

The site is hosted on Free Rein’s secondary data centre in the UK. Access to the administration side of the website is restricted to Free Rein, Bill Hillier and, shortly we hope, Dave Lichenstein to help coordinate the annual newsletter contacts. The hosting is managed by a small, restricted technical team in Free Rein.

Back ups are taken regularly and are encrypted and then stored initially in Amazon S3 and later on to Amazon Glacier – both held in the UK. All Free Rein staff are security vetted for their work on public sector and government projects.

What data breach procedures we have in place

Free Rein and Bill Hillier work together on data security. If a data breach is detected, the management of it will follow Free Rein’s process which can be read here https://www.free-rein.net/legal/privacy-policy/.

If you suspect that a breach may have occurred you may email contact@oldyorkist.com and/or gdpr@free-rein.net.

Free Rein GDPR contact details

Our full details are: