Here at ibgeographypods we collect the minimum data necessary to activate subscriptions, and delete records after use.
Information we hold
Customer and accounts information (but not credit card information) is only accessible to the named company director - Matthew Podbury through the MemberSpace and Stripe dashboards.
This consists of email address, contact name (for credit card payments) or email address, contact name, institution name and address (for invoice payments).
Any further information necessary (e.g. for online payment processing) is held by reputable online providers (Stripe & MemberSpace) and is protected by them - see above.
None of the personal data we hold about customers is shared outside of the company.
Once logged in, customers are able to see for their benefit a record of their subscriptions and when their current subscription expires. This is accessible by clicking on the small black 'Your Account' tab located in the bottom right hand corner of the screen.
We collect the minimum data necessary and delete records after use.
Two weeks after an account expires, personal data is deleted from the servers.
A two week window allows schools to reapply and pay to avoid a disruption in service (e.g. over a holiday period).
Subject access requests
Customers can request a reminder of the data we hold and how we protect it at any point.
Lawful basis for processing personal data
Personal data is required to allow subscribers to make online or invoice payments, and to subsequently log in to the site.
All customers have to agree to the existing terms and conditions of the website (which focus on not sharing the password / resources from the site outside of the subscribers' rights) before they can proceed to obtain their first subscription. These terms continue to apply when the subscription is renewed.
Access to the site is by paid subscription, covered either through an online payment or an invoice paid by bank transfer.
As such children are unlikely to gain access to the subscription area except after being given a password by a consenting adult for educational purposes.
We state a preference for students to use their institutional email addresses to register to ensure that each membership package is populated by teachers and students from that institution.
Upon being informed of any potential data breaches, the website administrator will immediately alert the server hosts and the website security platform which is also provided.