Privacy Policy
Privacy Policy
In the following Privacy, we will inform you in detail about what data is collected when you use our website (www.11pluscentre.co.uk) and what happens to it.
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in our contact form. Also, certain data may be collected automatically by our IT systems when you simply browse the website. Finally, some data is collected with your consent.
Name And Address Of The Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and the UK’s Data Protection Act (DPA) is 11+ Centre of 1 Royal Terrace, SS1 1EA.
General Information
This privacy policy informs users about the nature, scope and purpose of the collection and use of personal data by 11+ Centre. The legal basis for data protection can be found in the General Data Protection Regulation (GDPR), and the UK’s Data Protection Act (DPA). By using this website, you consent to the collection, processing and use of data as described below. Our website can generally be visited without registration.
Our Principles:
11+ Centre respects your right to privacy and is committed to the following key principles:
- We protect your privacy and aim to provide you with a service that is tailored to your needs.
- Personal data is collected for specific purposes based on your consent or a legitimate interest when you contact us.
- You have the right to information and access to your personal data at any time and may request its correction or deletion.
- We do not sell your personal data to third parties. However, if necessary and if explicitly mentioned afterwards or if you have consented, we may share your data with group companies, brand licensees, partners and other service providers. In this case, their individual privacy policies may also apply.
- We take all reasonable measures to ensure the security and protection of your data from misuse.
Children Data
Although, we are offering our services to Children, it should be noted that we are not:
- selling our services to Children,
- actively targeting Children in our marketing activities or otherwise,
- collecting, publishing or distributing personal data of children.
As set out in our Terms and Conditions, we require that parents or legal guardians must register and that any youngster under the age of 18 wishing to register must do so only through their Parents or legal guardians.
Further, we believe parents should participate in their children’s exploration of the internet and as children need particular protection online parents or legal guardians must be involved, supervise and be able to respond to the risks involved.
Compliance with the data protection principles and in particular fairness is central to all our processing of children’s personal data. In the unlikely event that we process a child’s personal data, consent from whoever holds parental responsibility for the child is obtained. Children have the same rights as adults over their personal data. These include the rights to access their personal data; request rectification; object to processing and have their personal data erased.
Rights of users and persons concerned and the legal bases of processing
With regard to the data processing described in more detail below, users and data subjects have the right to
- to confirmation as to whether data relating to them is being processed,
- to information about the data processed, to further information about the data processing and to copies of the data;
- to correction or completion of incorrect or incomplete data;
- to immediate erasure of the data concerning them;
- to receive the data concerning them and provided by them and to transfer this data to other providers/controllers;
- to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions.
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider, of any correction, or deletion of data, or restriction of processing that takes place. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, users and data subjects have the right to object to the future processing of data concerning them, insofar as the provider processes the data. In particular, an objection to data processing for the purpose of direct advertising is permissible.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information, which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.
We encourage you to get in touch if you have any concerns with how we collect or use your personal information.
The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:
- Consent: the individual has given clear consent to process personal data for a specific purpose.
- Contract: the processing is necessary for a contract or because you have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary to protect someone’s life.
- Public task: the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
Collection And Storage Of Personal Data As Well As Type And Purpose Of Their Use
When visiting the website
When you visit our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- name and URL of the file accessed,
- website from which access was made (referrer URL),
- the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection set-up of the website,
- Ensuring a comfortable use of our website,
- Evaluating system security and stability, and
- For other administrative purposes.
The legal basis for the data processing is our legitimate interest. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when you visit our website.
Use of cookies
In addition to the data mentioned above, cookies are stored on your device when you use our website. Cookies are small text files that are stored by the browser you are using and through which certain information to the party setting the cookie. Cookies cannot not execute programs or transmit viruses to your device. For more general information on cookies, please visit www.allaboutcookies.org and for more specific information on the cookies we use please refer to our Cookie Policy.
User account & registration
A user account is necessary for the comprehensive use of 11+ Centre. For this purpose, your first and last name, your display name, an email address and a password must be provided during registration and we can store additional detailed personal information. The legal basis for this processing is contract.
Contract & payment data
When concluding a contract, we collect personal data such as your billing address, as well as payment data for the purpose of processing the contract on the basis of contract and our legitimate interest.
When paying by direct debit, the payment data you enter is transmitted to the payment service provider Stripe Technology Europe Limited (Ireland). When paying by credit card, Stripe collects the data directly. 11+ Centre does not have direct access to the credit card data you enter, but receives the credit card number shortened to the last four digits and the card verification number. The payment service providers use the data transmitted to you on behalf of 11+ Centre to have the price of your subscription collected by your bank or debited by your credit card company.
When paying via Paypal, your email address and invoice data are transmitted to us after your corresponding authorisation from Paypal. 11+ Centre does not have any access to your payment data deposited with Paypal.
The transmission of payment data only takes place via encrypted connections.
Tuition, resources, papers and workshops
When you use our additional services and offerings, we store various details about your usage behaviour and learning activities. This data is used, among other things, to provide you with recommendations and similar functionality. The processing is based on contract and our legitimate interest. 11+ Centre has a legitimate interest in collecting the usage data of the platform and providing the aforementioned functionalities to our users
Communication, Support & Chats
We use various communication channels to be available to you or to contact you. In particular, you can contact us by telephone or e-mail. In each case, the data you provide and, if applicable, your telephone number, e-mail address or IP address are stored by us in order to be able to process your enquiries. The legal basis for this processing is contract as well as our legitimate interest and our legitimate interest in a structured processing and administration of customer enquiries.
Customer surveys & ratings
11+ Centre may use third party services to survey customers through a pop-up after the purchase process. In doing so, your browser communicates directly with the services. As a matter of principle, 11+ Centre does not transmit any further data and receives a statistical evaluation of the answers without personal reference.
The use of third party service providers to obtain customer feedback and determine customer satisfaction is based on our legitimate interest and our interest in the continuous development and improvement of our offers for you.
When using our contact form
If you have any questions, we offer you the possibility of contacting us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know whom the enquiry is from and so that we can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with your consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
Zoom
The “Zoom” tool is used to conduct learning sessions, online meetings and/or webinars (hereinafter: “online meetings”). “Zoom” is a service provided by Zoom Video Communications, Inc., which is based in the USA.
Insofar as you call up the website of “Zoom”, the provider of “Zoom” is responsible for data processing. However, accessing the website is only necessary to use “Zoom” in order to download the software for using “Zoom”. You can also use “Zoom” if you enter the respective meeting ID and, if applicable, further access data for the meeting directly in the “Zoom” app. If you do not want to or cannot use the “Zoom” app, the basic functions can also be used via a browser version, which you can find on the “Zoom” website.
When using Zoom, the user information listed below may be collected. The scope of the data also depends on the data you provide before or during participation in an “online meeting”.
The following personal data are subject to processing:
- User information: first name, last name, telephone (optional), e-mail address, password (if “single sign-on” is not used), profile picture (optional), department (optional).
- Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information.
- For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
- For dial-in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be stored.
- Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an “online meeting”. In this respect, the text entries you make are processed in order to display them in the “online meeting” and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the meeting. You can switch off or mute the camera or microphone yourself at any time via the “Zoom” applications.
To participate in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name. If you are registered as a user at “Zoom”, then reports on “online meetings” can be stored at “Zoom” for up to one month.
E-mail communication and advertising
We use the email address you provide when creating a user account or when taking out a 11+ Centre subscription, on the one hand, to contact you regarding our respective contractual relationship and to be able to send you all important and further information that is of interest to you. The legal basis for this is contract.
On the other hand, we use your email address to inform you about products and other offers from 11+ Centre in which you have a presumed interest. This also applies to the advertising of our fee-based offer. The legal basis for this use is found in our legitimate interest. You can object to this use at any time by sending a message to the e-mail address below or by clicking on the unsubscribe link in the e-mail without giving any reasons, without incurring any costs other than the transmission costs according to the basic rates.
We may also use your contact details, which we have collected in the course of entering into a contractual relationship with you, to be able to inform you by post about offers, for example if the term of your subscription is coming to an end or has already expired or you have cancelled or revoked your subscription. This is done on the basis of our legitimate interest. The processing of personal data for the purpose of direct advertising constitutes a legitimate interest.
In addition, we carry out general analyses of existing customers in order to obtain a better picture of our customer base and, if necessary, to be able to potentially approach new, similar customers based on this. In some cases, we use external providers for this purpose, with each of whom we conclude an order processing agreement for the protection of the data. The legal basis for the aforementioned processing is our legitimate interest. The processing of existing customer data in this way for our own advertising purposes is to be regarded as a legitimate interest.
You can object to the use of your personal data for the aforementioned marketing purposes at any time free of charge with effect for the future by sending an e-mail to info@11pluscentre.co.uk.
Newsletter / Mailings
If you would like to receive the newsletter offered on the website or our mailings with regular information about our offers and products, we require your e-mail address or postal address as mandatory information. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, would like to receive future newsletters. With the confirmation, you give us your consent that we may use your personal data for the purpose of sending you the newsletter.
When you register for the newsletter, in addition to the email address required for sending the newsletter, we store the IP address used to register for the newsletter as well as the date and time of registration and confirmation in order to be able to track possible misuse at a later date.
You can unsubscribe from the newsletter at any time via the link included in each newsletter or by sending an e-mail to the responsible person named above, or activate and deactivate the newsletter after logging in on your personal page. The same applies to postal deliveries. After unsubscribing, your e-mail or postal address will be deleted from our mailing list immediately, unless you have expressly consented to the continued use of the data collected or if the continued processing is otherwise permitted by law.
Transfer of data
Your personal data will not be passed on to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
- you have given your express consent to this,
- the disclosure is necessary to protect our legitimate interests or the legitimate interests of third parties in accordance with our legitimate interest and there is no reason to assume that you have an overriding interest worthy of protection in not having your data disclosed,
- in the event that a legal obligation exists for the disclosure, and
- this is legally permissible and necessary for the processing of contractual relationships with you according to contract.
Duration of storage and routine deletion of personal data
We process and store your personal data only for the period of time required to fulfil the purpose of storage or if this has been provided for, in laws or regulations. After the purpose has ceased to exist or has been fulfilled, your personal data will be deleted or blocked.
In the case of blocking, deletion will take place as soon as legal, statutory or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause a disproportionately high expense due to the special nature of the storage.
Data security
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Disclosure of personal data to third parties
Your personal data will only be passed on if there is a legal obligation to do so or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law.
- a) Disclosure within affiliated companies
We pass on your personal data for the conclusion and processing of contracts for offers on our website to affiliated companies. This is particularly necessary so that you can use all our offers. If you contact a store or our customer hotline with questions, complaints or returns as well as other complaints, they will also receive access to your order data in order to be able to process your request.
- b) Disclosure to service providers
For the operation and optimisation of our website and our services and for the processing of contracts, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products or for the dispatch of newsletters, to whom we pass on the data required for the fulfilment of the task (e.g. name, address).
Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We therefore agree on specific data security measures with these companies and monitor them regularly.
In contrast to order processing, in the following cases we transmit data to third parties for their own use in order to process the contract in the case of payment for services to the payment service provider specified when the order was placed. We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider.
- c) Disclosure to other third parties
We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g. due to official or court orders, or if we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights and claims.
Data processing for the purpose of fraud prevention and optimisation of our payment processes
Where applicable, we provide our service providers with further data, which they use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and optimisation of our payment processes (e.g. invoicing, processing of contested payments, accounting support). This serves to protect our legitimate interests in our protection against fraud or in efficient payment management, which outweigh our interests in the context of a balancing of interests.
When you send a data subject access request
The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of t data subject access request is both our legitimate interest and our legal obligation.
The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process.
You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.
Legal defence and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest.
The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights. Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.
Social media
We use social plugins from the social networks Facebook, Twitter and Instagram on our website on the basis of our legitimate interest in order to raise awareness about. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DPA and the GDPR.
We integrate these plugins using the so-called two-click method in order to protect visitors to our web site as best as possible. A contact between the site visitor and the social network is only established when the sharing links are actively clicked. The responsibility for data protection-compliant operation is then to be ensured by their respective providers. You can find out about their data protection regulations here:
We maintain online presences on Facebook, Twitter and Instagram. User data is typically processed outside the UK and the EEA, where enforcement on the basis of the DPA and the GDPR is not possible. You can find out more about the forms of processing in detail and the options to object in the Privacy Policies of Facebook, Twitter and Instagram.
Links to websites of other providers
The website may contain links to websites of other providers. This privacy policy applies exclusively to the website of 11+ Centre. 11+ Centre has no influence on and does not control whether other providers comply with the applicable data protection provisions.
Automated decision-making
We do not use automated decision-making or profiling.
Do Not Sell My Personal Information
We do not sell information that directly identifies you, like your name, address or phone records.
Accuracy
It is important that the data we hold about you is accurate and current; therefore please keep us informed of any changes to your personal data.
Changes And Updates To The Privacy Policy
We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.
Queries and Complaints
Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.