Who we are

This website is operated by Kimichi School.

Our main website address is: www.kimichischool.co.uk

Where the website is being developed or tested, temporary development addresses may also be used, including:

http://www.kimichischool.co.uk

Kimichi School is the data controller for personal data collected through this website.

What personal data we collect through the website

We may collect personal data when visitors:

  • complete contact forms;
  • submit enquiry forms;
  • apply for admissions information;
  • upload files or documents;
  • leave comments, where comments are enabled;
  • subscribe to newsletters or updates;
  • access restricted areas of the website;
  • interact with embedded content;
  • use the website generally.

This may include:

  • name;
  • email address;
  • telephone number;
  • postal address;
  • IP address;
  • browser type;
  • device information;
  • information submitted through online forms;
  • uploaded documents;
  • cookie data;
  • technical usage information.

Comments

Where comments are enabled, we collect the information shown in the comments form, together with the visitor’s IP address and browser user agent string to assist with spam detection.

An anonymised string created from an email address, sometimes called a hash, may be provided to the Gravatar service to determine whether the visitor uses that service. The Gravatar privacy policy is available from Automattic. After approval of a comment, a profile picture may be visible publicly in the context of that comment.

Media uploads

If users upload images to the website, they should avoid uploading images containing embedded location data, such as EXIF GPS information. Visitors may be able to download and extract location data from images published on the website.

Cookies

The website may use cookies to support functionality, security, performance and user experience.

If visitors leave comments, they may opt in to saving their name, email address and website in cookies. These cookies are for convenience and may last for one year.

If users visit a login page, the website may set a temporary cookie to determine whether the browser accepts cookies. This cookie contains no personal data and is discarded when the browser is closed.

When users log in, the website may set cookies to save login information and screen display choices. Login cookies usually last for two days, and screen option cookies may last for one year. If “Remember Me” is selected, login may persist for two weeks. Logging out removes login cookies.

If a user edits or publishes an article, an additional cookie may be saved in the browser. This cookie contains no personal data and simply indicates the post ID of the article edited. It expires after one day.

Embedded content from other websites

Pages on this website may include embedded content such as videos, images, maps, forms, documents or articles.

Embedded content from other websites behaves in the same way as if the visitor had visited that external website directly. These external websites may collect data, use cookies, embed third-party tracking and monitor interaction with the embedded content.

Who we share website data with

We do not sell personal data.

We may share website data with:

  • website hosting providers;
  • IT support providers;
  • spam detection services;
  • security monitoring services;
  • form-processing providers;
  • email providers;
  • legal or regulatory bodies where required.

If a password reset is requested, the visitor’s IP address may be included in the reset email.

How long we retain website data

If comments are enabled and a visitor leaves a comment, the comment and its metadata may be retained indefinitely so that follow-up comments can be recognised and approved automatically.

For registered users, where applicable, personal information provided in user profiles may be stored. Users can usually see, edit or delete their personal information at any time, except for usernames. Website administrators can also see and edit this information.

Website enquiry information is retained only for as long as necessary to respond to the enquiry, manage admissions or administration, comply with legal obligations, or protect the school’s legitimate interests.

Where website data is sent

Visitor comments and form submissions may be checked through automated spam detection or security services.

Website users’ rights

Website users have rights under data protection law, including the right to request access to personal data held about them, to request correction of inaccurate data, to request deletion in certain circumstances, and to object to or restrict processing where applicable. ICO guidance confirms that privacy notices should explain these rights clearly. (Information Commissioner’s Office)

Requests should be sent to:

Sally Alexander
s.alexander@kimichischool.co.uk