Privacy Policy

Privacy Policy

This Linguastay privacy policy explains the kinds of information we may obtain from or about you as a visitor to our website or as a user or provider of our educational services; how we may use that information (together with information provided offline or via other means); and who we may share that information with. It must be read in conjunction with our Privacy Notices, which are directed towards each type of User, and explain in more detail how and why we use your information. 
Each time you access, browse and/or use our website you agree to the terms of our Privacy Policy and Privacy Notices. If you do not agree you must cease to use our website. We are not responsible for the content or privacy practices of other websites.

If you have any questions about the privacy practices outlined in this Privacy Policy, please contact Susan Jones, who is the data protection officer for Linguastay. If not resident of the UK, please contact our EU representative. Contact details for both can be found at the bottom of this document. 

GENERAL STATEMENT
  • Linguastay is committed to protecting the safety and security of our Users’ data, including students, parents, staff, activity providers, host families (including people who contact us to enquire about becoming a host family), group leaders, and agents (including people who contact us about becoming a travel agent).
  • We are committed to handling all personal data collected in line with the data protection principles and the Data Protection Act (DPA 2018) and the UK General Data Protection Regulation.
  • Changes to data protection legislation shall be monitored and implemented in order to remain compliant with all requirements.
  • We are also committed to ensuring that staff are aware of data protection policies, legal requirements and adequate training is provided to them.
  • The requirements of this policy are mandatory for all staff employed by Linguastay and any third party contracted to provide services to the organisation.

COLLECTION & USE OF YOUR PERSONAL INFORMATION
We may collect and process the following data through our website (and combine this with data provided offline through your interactions with us). Through the website, we collect two types of data and information from Users:

The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site (“Non-personal Information”). We are not aware of the identity of a User from which the Non-personal Information was collected. Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information on your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).

The second type of information Personal Information which is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual. Such information includes:
  • Device Information: We collect Personal Information from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information which relates to your activity through the Site.
If you contact us via phone, email, post, through the information our website or by any other means, we may keep a record of, and process information about you in order to:
  • respond to initial enquiries from you about acting as a Host Family
  • provide you with information about our services.

For more information about how your personal data, provided offline through your interactions with us, is used please see the relevant Privacy Notice.


DATA PROCESSING
All data within Linguastay’s control is handled in compliance with the legal requirements of the Data Protection Act and the UK General Data Protection Regulation.

This means data will be:
  1. Processed fairly and lawfully
  2. Obtained only for lawful purposes, and is not further used in any manner incompatible with those original purposes
  3. Accurate and, where necessary, kept up to date,
  4. Adequate, relevant and not excessive in relation to the purposes for which it is processed
  5. Not kept for longer than is necessary for those purposes
  6. Processed in accordance with the rights of data subjects under the DPA
  7. Protected by appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage
  8. Not transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection of the personal information

DISCLOSURE OF DATA
To fulfil our commitment to you, we work with several third-party organisations that perform certain tasks on our behalf. For example, we use several other organisations to assist us in operating our website, conducting our business, so long as these organisations agree to keep your information confidential and provide evidence of the competence in the security of shared data.

We share your personal information with these third parties only to the extent necessary in order to enable them to provide the service you require on our behalf. These third parties act on our instructions and are “processors” of your personal information.

For more information about how your personal data is shared with third parties, please see the relevant Privacy Notice. 

In addition, we may disclose your personal information:
  • if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to protect the rights, property or safety of our organisation, our customers or others; and
  • to successors in title or replacement operators of all or part of our organisation, subject to the data being used for the same purposes as originally specified.

SAFE STORAGE AND DISPOSAL OF YOUR DATA
In order to assure the protection of all data being processed and inform decisions on processing activities, we shall undertake an assessment of the associated risks of proposed processing and equally the impact on an individual’s privacy in holding data related to them.

Risk and impact assessments shall be conducted in accordance with guidance given by the ICO.

Security of data shall be achieved through the implementation of proportionate physical and technical measures. This is achieved through restricted access, password protection and staff training. Nominated staff shall be responsible for the effectiveness of the controls implemented and reporting of their performance.


DATA DISPOSAL
Linguastay recognises that the secure disposal of redundant data is an integral element to compliance with legal requirements and an area of increased risk.

All data shall be destroyed or eradicated to agreed levels meeting recognised national standards, with confirmation at completion of the disposal process. 

Disposal of IT assets holding data shall be in compliance with ICO guidance.


USER RIGHTS AND ACCESS TO YOUR PERSONAL INFORMATION
Under Data Protection Law you have the right to access, erase or correct information held about you in certain circumstances, and to have some of that data (if held by Linguastay) provided to you in a portable form. You have the right to request a copy of any personal information we hold about you.

We will endeavour to comply with such requests within one month, but where any such request is unusually onerous, we may extend that time by a further two months. In fulfilling such a request, we may request a copy of ID to confirm your identity. To make such a request, please use the contact details below.

If you have any concerns about our use of your personal information, you can make a complaint to us at info@linguastay.uk or on 07830 096 900. Alternatively, you can send a letter addressed to:
Susan Jones, 
Riverside Innovation Centre,
Castle Drive, 
CH1 1SL

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow Cheshire,
SK9 5AF

Linguastay is a trading name of Deva English Ltd: Company Reg 09032487

Share by: