Privacy policy
How we collect, use, and protect your personal data.
1. Introduction
We are committed to protecting the privacy of those who visit this website. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have in relation to it.
In this policy, the words "we", "us", and "our" refer to Claire AM Guillon, trading as Digited Atelier, the owner of secondary.digited.net. Digited Atelier is operated as a sole proprietorship, working online. This website is informational: it shares free study and wellbeing resources, and it offers a way to contact us about one-to-one support.
We act as the data controller for the personal data described here, which means that we decide the purposes and the means of its processing. You can find our contact details in Section 14.
2. The law that applies
We work with students and families in many countries, including the United Kingdom and the European Union. For that reason we have chosen to follow the General Data Protection Regulation of the European Union, known as the GDPR, together with its United Kingdom equivalent, the UK GDPR, as the standard for how we handle personal data. These are among the most protective data protection rules in the world.
Where you are in the United Kingdom or the European Union, these rules apply to our handling of your personal data directly. Where you are elsewhere, we apply the same standard to your data as a matter of policy, so that everyone receives the same protection, wherever they live.
3. The personal data we collect
We collect only the personal data we need in order to respond to you and to operate the website.
- Enquiry and contact data. When you contact us, we collect the details you choose to give us, which may include your name, your email address, the content of your message, and anything you tell us about the student.
- Correspondence. We keep a record of the correspondence between us, so that we can manage our exchanges and answer any questions that arise.
If you go on to work with us, the programme involves further information about the student, which may include academic and wellbeing material. That is handled under the engagement agreement and under our safeguarding and data-protection policies, with consent, and not through this website. Please do not send us another person's personal data unless we have asked you to do so.
4. The lawful bases we rely on
- Your consent, for example when you contact us about support. You can withdraw your consent at any time.
- Our legitimate interests, such as responding to an enquiry, keeping our records in order, and keeping our website and systems secure, provided that these interests do not override your rights.
- Compliance with a legal obligation, where the law requires us to keep or to disclose certain information.
5. Cookies and analytics
We have kept this website deliberately simple. We do not use third-party web analytics, and we do not place advertising or tracking cookies on your device to follow your activity across the internet. If we were to introduce any analytics or non-essential cookies in future, we would update this policy and ask for your consent where the law requires it.
6. How we use your personal data
We use the personal data we hold in order to respond to enquiries and communicate with you, to keep our website and our records secure, and to meet our legal obligations. We do not use your data for purposes that are incompatible with those for which it was collected, and we do not make decisions about you by automated means alone.
7. Sharing your personal data
We do not sell your personal data, and we do not share it for the marketing purposes of others. We share it only where this is necessary: with the service providers who help us operate, such as our email, online-form, and AI-assistant providers, who process data on our behalf, under our instructions, and under a data-processing agreement. In the case of our AI-assistant provider, that agreement includes a commitment that our data is not used to train its models. We also disclose data where we are required to do so to comply with a legal obligation, to protect someone's vital interests, or to establish, exercise, or defend a legal claim.
8. Where your data is processed
This website is hosted on servers located in France, within the European Union. Some of the providers we rely on, including our AI-assistant provider, are based in the United States and process data there, so your personal data may be transferred outside the United Kingdom and the European Union. Where that happens, we rely on the safeguards the law allows, such as the European Union's standard contractual clauses, so that your data continues to be protected to the standard described in this policy.
9. Keeping and deleting your data
We keep personal data only for as long as it is needed for the purposes set out in this policy, or for as long as the law requires. Enquiry and contact data from people we do not go on to work with is kept for a limited period and then deleted. We may keep personal data for longer where this is necessary to comply with the law or to protect someone's vital interests.
10. Your rights
Under the GDPR and the UK GDPR you have a number of rights in relation to your personal data: to ask whether we hold data about you and to obtain a copy; to ask us to correct data that is inaccurate or incomplete; to ask us to erase your data in certain circumstances; to ask us to restrict or to object to certain processing; to ask us to transfer your data in a portable form; and, where our use is based on consent, to withdraw that consent at any time.
To exercise any of these rights, please contact us at privacy [at] digited [dot] net. You also have the right to complain to a data protection authority, such as the Commission Nationale de l'Informatique et des Libertés (the CNIL) in France, or the Information Commissioner's Office (the ICO) in the United Kingdom, or the authority in your own country. We would, however, be grateful for the chance to put things right first.
11. Children and young people
This website is written for students aged 15 to 18 and for their parents. It is informational, and it does not knowingly collect personal data from children through the site. Where a student is under 18, a parent or guardian arranges and agrees to any one-to-one engagement on the student's behalf. If you believe a child has sent us personal data through the site, please contact us and we will delete it.
12. Data security and breaches
We take the security of personal data seriously, and we use reasonable organisational and technical measures to protect it against loss, misuse, and unauthorised access. In the event of a personal data breach that is likely to result in a risk to people's rights, we will act promptly and will make any notification that the law requires.
13. Changes to this policy
We may update this policy from time to time by publishing a new version on this website. Where a change is significant, we will take reasonable steps to bring it to your attention.
14. Our details
This website is owned and operated by Claire AM Guillon, trading as Digited Atelier, working online. You can contact us by email at contact [at] digited [dot] net for general matters, or at privacy [at] digited [dot] net for questions about your personal data or to exercise any of your rights.