1. We (St. Mary’s Catholic Academy) are committed to safeguarding the privacy of our website visitors; in this policy we explain how we will treat your personal information.
2. We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website. / By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.

1. We may collect, store and use the following kinds of personal information:
   1. information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths)
   2. information that you provide when completing our Sixth Form online application form on our website (including your name, date of birth, address, telephone numbers, health and special needs, interests and hobbies, educational details and employment details)
   3. information that you provide to us when using the services on our website, or that is generated in the course of the use of those services (including the timing, frequency and pattern of service use)
   4. information contained in or relating to any communications that you send to us or send through our website (including the communication content and meta data associated with the communication)
   5. any other personal information that you choose to send to us
2. Before you disclose to us the personal information of another person, you must obtain that person's consent to both the disclosure and the processing of that personal information in accordance with this policy.

1. Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.
2. We may use your personal information to:
   1. send you email notifications that you have specifically requested;
   2. deal with enquiries made by you relating to our website;
   3. keep our website secure and prevent fraud;
   4. verify compliance with the terms and conditions governing the use of our website.
3. We will not supply your personal information to any third party for the purpose of their or any other third party's direct marketing.

1. We may disclose your personal information:
   1. to the extent that we are required to do so by law;
   2. in connection with any ongoing or prospective legal proceedings;
   3. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
2. Except as provided in this policy, we will not provide your personal information to third parties.

1. Personal information that we process for any purpose shall not be kept for longer than is necessary for that purpose.
2. Without prejudice to Section 5a, we will usually delete personal data falling within the categories set out below at the date/time set out below:
   1. Personal information submitted through the Online Sixth Form Application Form will be deleted as soon as the applicant expresses their intent not to continue their application to St. Mary’s Catholic Academy Sixth Form.
   2. Other applicant information will be retained for up to 12 months or up to the start of the next academic year at which point unsuccessful applicant information will be deleted.
   3. Successful applicant personal information will be added to the School Information Management System as per St Mary’s Privacy Notice - How we use your information.

1. We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
2. We will store all the personal information you provide on our secure servers.
3. You acknowledge that the transmission of information over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet.

We may update this policy from time to time by publishing a new version on our website.

1. Our website includes hyperlinks to, and details of, third party websites.
2. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

Please let us know if the personal information that we hold about you needs to be corrected or updated.

1. Our website uses cookies.
2. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
3. Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
4. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
5. We use both session and persistent cookies on our website.
6. The names of the cookies that we use on our website, and the purposes for which they are used, are set out below:

   1. Our Cookies

      Set by	Details
      Moodle	MOODLEID1_, MoodleSession. Required cookies to provide continuity and maintain your login from page to page within Moodle. MoodleSession is a session cookie which expires when the browsing session ends. MoodleID1_ expires after 2 months.
      Insight	ASP.NET_SessionId. Required cookie set when using Insight to provide continuity and maintain your login within Insight. This is a session cookie which expires when the browsing session ends.
      Spiceworks	ntlmctxt, spiceworks_session. Required cookies set when using the helpdesk to provide continuity and maintain your login within the helpdesk. These are session cookies which expire when the browsing session ends.
      HAP	ASPXAUTH, ASP.NET_SessionId, token. Required cookies to provide continuity and maintain your login to the file access section of the website. The cookies expire when the sessions ends.
      PaperCut	JSESSIONID, org.apache.tapestry.locale, _ga, _gat, _gid. Required cookies set by papercut to provide continuity and maintain your login within the papercut webprint. Both cookies expire when the browsing session ends.
      Joomla	Joomla_User_State. Required to maintain staff login. Expires at the end of the session.

   2. Third Party Cookies

      Moodle (Google OAuth) - The academy allows users to upload files directly from your Google Drive account within Moodle, if you consent with this access please login using your academy Gmail account during the file upload process. During this process your email and profile details will be accessed, this is solely to allow you to upload directly from Google drive. None of this data is stored. 
      

      Set by	Details
      Google	NID, OTZ, PREF, GAPS. Cookies created by Google through our site are because of a Google Map or Google calendar being displayed. All session cookies expire when the browsing session ends. Persistant cookies expire from between 6 months to 2 years.
      Twitter	__utma, __utmc, __utmv, __utmz, guest_id, pid. Cookies created by Twitter are because of the use of Twitter feeds and social media buttons used on our site. __utmc expires when the browsing session ends, the rest expire from between 6 months to 2 years.

7. Most browsers allow you to refuse to accept cookies; see your browsers help section for more information on refusing cookies.
8. Blocking all cookies will have a negative impact upon the usability of many websites.
9. If you block cookies, you will not be able to use all the features on our website.
10. You can delete cookies already stored on your computer; see your browsers help section for more information about deleting cookies.
11. Deleting cookies will have a negative impact on the usability of many websites.

This document was created using a template from SEQ Legal (http://www.seqlegal.com).