Smart Stationery is a trading name of MSE Ltd.
- How we collect data and what types of data we collect.
- How we use the data we collect and for what purposes.
- When and to whom the data we collect may be disclosed.
- How we safeguard and protect Personal Data (defined below) you provide.
- The choices available to you regarding our collection and use of Personal Data.
- How you may access, review, and change Personal Data you provide.
The data we collect, and how we use it
The data we collect from you falls into two main categories: data provided voluntarily by you, and data that we collect automatically.
Automatically collected data
When you access or use our websites we may automatically collect and store the following types of non- personally identifiable data (data that is compiled in anonymous and aggregate form and is not used to locate, contact, or identify you specifically):
- data from server logs found on your browser
- click-through statistics
- your IP address
- the type of application (e.g. web browser) you are using to access our websites
- the type of operating system you are using
- the name of the domain and host from which you access the Internet
- the date and time you access parts of the websites
- the Internet address of the site from which you linked directly to our websites
We may aggregate and use certain non-personally identifiable data for research or marketing purposes and may share, sell and rent or trade that data and statistical data derived from such data with our marketing partners, advertisers, or other third parties for research or marketing purposes.
Data provided to us
You may be asked to provide or otherwise voluntarily provide Personal Data when you use services available through our websites, and when you contact us via phone, email, social media, or otherwise. Though you may access our website without providing any Personal Data, in order to book and pay for our services, you must provide certain Personal Data. We collect the minimum amount of personal data necessary to operate our services:
- Communications data, including: name, email address, and phone number
- Payment data, including: PayPal ID
In addition, whilst using MSE’s services, you may disclose information to a member of MSE staff including but not limited to:
- School performance and exam results
- Career and education plans and aspirations
- Interests and aptitudes
- UCAS personal statement draft
We use your data for business purposes and to provide the best possible services to you. This may include, but is not limited to:
- Supplying our services to you
- Responding to communications from you
- Gathering feedback and usage statistics to enable us to improve our services
We will never pass on your details to any third parties, with the following exceptions:
- With your explicit consent, we may email you with offers and information that we believe may be beneficial to you.
- With your explicit consent, pass information on to your school or parents/guardians.
- We may provide the Personal Data you provide to us to a third party if we are required by law or litigation so to disclose such Personal Data.
- If any data you disclose while using one or our services suggests that you are at risk, then we may contact your parents/guardians or school or other body as appropriate.
- The Personal Data you provide to us may be transferred as an asset in connection with a merger or sale involving all or part of MSE or as part of a corporate reorganisation, stock sale or other change of control.
Storing your data
MSE will not hold your data for any longer than is necessary for the uses described above, or any longer than we have permission to. We will conduct an annual review to identify what data we must continue to hold.
Data security is of paramount importance, and we employ reasonable measures, including administrative, technical, and physical measures, to protect Personal Data from unauthorized access, loss, alteration, use or disclosure. Such steps include, but are not limited to:
- The use of firewalls
- The use of antivirus and antimalware software
- Regular security reviews
- Encrypted data storage
- Restricting access to data to those that need it
- Encrypted data transfer, using https
- Secure destruction of paper records
Notwithstanding the security measures put in place by MSE, it is important to remember that the transmission of data via the internet may not be completely secure. You are advised to take suitable precautions when transmitting data to us via the internet, such as using a secure web browser, and frequently changing passwords.
Managing your data
MSE will strive to keep all Personal Data we hold accurate and up to date. Data that is inaccurate or out of date will be erased or destroyed. You should notify the MSE if your details change or if you become aware of any inaccuracies in the Personal Data we hold about you. You may opt out of receiving certain types of communications from us. However, you will not be able to opt out of receiving other types of communications, such as service announcements and administrative messages, as these types of communications are necessary for the running of our business. You may opt out of receiving optional communications by contacting us directly.
Our services are not aimed at people under the age of 13 – if you are younger than 13, please do not share any personal data with us. If you are the parent or guardian of a child under the age of 13 who has provided Personal Data to us, please contact us using the details below, and we will delete that Personal Data.
Our cookies will never be used to track your activity on any third party websites or to send spam. You can configure your browser to accept all Cookies, reject all Cookies, or notify you when a Cookie is received. (Each browser is different, so check the Help menu of your browser to learn how to change your Cookie preferences). You may reject, delete or otherwise disable Cookies at any time. However, by deleting, rejecting or otherwise disabling Cookies, you may inhibit your user experience on our websites. For example, if you disable or reject cookies you be restricted in using some services. In addition, if you disable or disallow Cookies, some multimedia images and graphics may not display properly, you may not be able to view custom features, and/or you may have more difficulty navigating through our websites.
Some of our email communications to you may include a “click-through URL” linked to a particular page on one of our websites. By clicking on one of these URLs, you will automatically enter our website. Our systems track this data to gauge the effectiveness of our email communications and your level of interest in particular areas. You may avoid having this data collected by avoiding clicking on URL links in our email communications. Please note, that we will never send you an email with an embedded link that asks for your password or any financial or account data; passwords are for your protection. If you ever receive such an email, please contact us immediately using the details provided on this page.
We use pixel tags to identify what pages of our website are visited most frequently and to evaluate the effectiveness of the search functions on our website.
If a Data Subject believes that MSE has not followed the data protection principles, or wishes to submit a complaint; the Data Subject should contact the Chairman in the first instance, or the local Data Protection Authority within their jurisdiction. In the event of a Data Breach MSE will initiate an investigation and inform the local Data Protection Authority within 72 hours if it is believed that there has been a breach affecting personal data. All affected Data Subjects will be informed, in the event that the breach presents a risk to their respective personal data.
Right to complain
You have a right to complain about the processing of data by MSE, and this can be done by contacting the Office of the Data Protection Authority in Guernsey at email@example.com, on 01481 742074 or in writing to St Martin’s House, Le Bordage, St Peter Port, Guernsey GY1 1BR.
Changes to this policy
Subject access requests
If you wish to know what personal data MSE holds about you, you should contact us using this form or by emailing firstname.lastname@example.org. Subject access requests will be processed free of charge; but repetitive requests may be subject to a fee. We will respond to requests within 30 days, and we retain the right to verify your identity prior to disclosing any Personal Data.