Privacy Policy

Maya Archaeologist Limited provides educational services to primary schools. The business was established in 2022.

Introduction

The EU General Data Protection Regulatons (GDPR) require all companies to treat personal information collected or handled securely and maintain accurate records as to how this information is stored and used. This privacy notice provides you with details of how we collect and process your personal data through use of our services.

Consent

By continuing to use the services of Maya Archaeologist Limited you are consenting to this privacy notice and are giving us permission to process your personal data specifically for the purposes identified in accordance to EU law.

You may withdraw consent at any time by emailing info@mayaarchaeologist.co.uk

Dr Diane Davies is the data controller and is responsible for your personal data.

Contact details

Email: info@mayaarchaeologist.co.uk

Telephone: 01745 284862

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk)

4. The data we collect from you

We only hold information about you that has been freely given through direct interactions. You may provide data by filling in our booking form, other forms or by communicating with us by post, phone, email, SMS, facebook or twitter.

Identity data: includes first name, last name,

Contact Data: includes billing address and email address

Transaction data: information of money collected and owed to us, however no financial data will ever be stored. We may hold records of services provided including, times, duration and location of services provided.

5. Use of your personal data

We will only use your personal data when legally permitted:

To perform the contract between us
To contact you directly in relation to a booking relevant to you.
To send updates related to your booking
To contact you in response to a specific enquiry or request
To collect payments and send invoices.
To supply services
To notify you of any changes to our policies

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and we will explain the legal ground of processing.

6. Legal basis for processing personal information.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we need the personal information to perform a contract with you and where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

7. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review: in the event that Organisation Name refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined above.

8. Third parties

We will never sell your data to third parties. Your data will not be used for marketing purposes.

If using our facebook page or twitter, you should also be aware that they both have use of their own cookies and tracking technology and it is advisable to take a look at their own privacy policy. Again, we cannot be held responsible for any data collected by facebook or twitter.

If any occurrence happens where data needs to be shared, you will be contacted for your explicit consent.

We may process your personal data without your knowledge or consent where this is required or permitted by law.

9. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Some details may be held for 6 years after our contract has terminated due to tax purposes. In some circumstances you can ask us to delete your data. Paper documents are shredded and electronic data permanently deleted.

11. Sensitive data

We do not collect any sensitive data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic biometric data. We do not collect any information about criminal convictions and offences.

12. Email links

If you email us directly, via email, the email is transmitted to us via the Simple Mail Transfer Protocol (SMTP). Depending on your email provider, the email contents may or may not be encrypted from the point at which it leaves your computer, until it reaches your email provider or in some cases until it reaches us. We have no control over this but use names.uk as our email provider which provides end-to-end encryption.

13. Use of service by children

We do not knowingly collect data about children.

14. International Transfer

While Maya Archaeologist Limited is registered in the UK we may use third party services that are located in other countries. We ensure that we only use third party companies that comply to EU General Data Protection Regulations.

15. Review

We keep this policy under regular review. This policy was last updated 17 April 2023. Clients will be notified of any changes to this policy.