Who we are
We are Equin Limited, established 2007. Sig+ is a school data service from Equin Limited, offering consultancy, support and training.
Company Number: 06347232
ICO data protection reference: Z1904040
Name of Data Protection Officer (DPO): Michael Cooper
Email address of DPO: [email protected]
Telephone Number: 020 3393 4005
Postal Address: Unit 6482, PO Box 6945, London, W1A 6US
Registered Office Address: Unit G Pattern Shop, Trevoarn, Hayle, Cornwall, TR27 4EZ
Sig+ aims to be the complete school data company. Our services help equip schools with the knowledge, skills and systems required to make the best use of their data. Our aim is to help you understand your school’s data better than anyone else and to ensure there are no surprises.
Sig+ provides expert consultancy for Insight Tracking. Schools that use Insight can utilise these consultancy services as part of their subscription.
Our Data Protection Philosophy
Your data is yours. At all times we aim to respect any personal data you share with us, or that we receive from other organisations, and keep it safe.
We never sell personal information, and we’re committed to treating your data only in ways you’d expect. When we use third parties to help us deliver our services and products, we take care to ensure those third parties are equally committed to safeguarding your privacy.
We aim at all times to promote a positive culture around data protection and security. Our policies and processes are under constant review.
About this Privacy Notice
This Privacy Notice (“Notice”), together with our Terms of Service and any other documents referred to within, sets out our data collection and processing practices and your options regarding the ways in which your personal information is used. It applies to information we collect about:
Visitors to our website at https://www.sigplus.co.uk
People who attend events or webinars hosted by Sig+.
From time to time, Equin Limited may develop new products or offer additional services and may update this Notice accordingly. If we need to make changes to how we process and use your personal information, we will update this Notice and keep you informed where appropriate.
Visitors to our Website
We use Google Analytics, a third party service, to monitor anonymised data about visitors to https://www.sigplus.co.uk. This helps us understand how visitors find and use our website, in order to make improvements to how we deliver our services in line with our purpose defined above, and to assess the effectiveness of our marketing. This information is only processed in a way which does not identify anyone.
Information we collect as a Data Controller
We collect certain personal information in our capacity as a Data Controller, in order to run our business. We collect information:
When you give it to us directly
When you get in touch with us, for example to make an enquiry about Sig+ services, subscribe to the mailing list, or register for an event, we store personal information which may include your name, phone number and email address. Your means of contacting us may be via email, telephone, post or through an online social media service such as Twitter.
We may also collect non-personally identifiable information about you, your school, and any trusts or other groups that your school may belong to. This may include your position at your school, the school’s and/or trust’s name, contact and DfE details. Non-personally identifiable information by itself cannot be used to identify or contact you. However, this information may be combined with other identifiers in a way that enables you to be identified.
Purpose: We use this information to address and keep track of enquiries, notify subscribers of new content or manage event attendee lists, in line with our general purpose outlined above.
Lawful basis for processing: “Consent”. Your express consent to use your information is required to make a booking.
Right to Withdraw Consent: You have a right to withdraw your consent for us to use information collected in this way for this purpose and can do so by emailing [email protected].
Purpose: We may occasionally use this information for direct marketing purposes, to let you know about new products, tools and services we offer, where these are similar in scope to those of our products, tools and services you currently use. Any such contact will be made in line with applicable law, including the Privacy and Electronic Communications Regulations (PECR) , and in line with our general purpose outlined above.
Lawful basis for processing: “Legitimate Interests”. This processing is necessary as part of our efforts to grow our business. We take the same care over personal information collected this way as over any personal information we store. If we do contact you, we’ll always give you an upfront opportunity to opt out from future contact.
Right to Object: You have the right to object to the processing of your personal information collected under this lawful basis. Please see the ICO’s guidance for more information.Retention: We retain personal information collected this way for up to 12 months following any enquiries, or for as long as you are subscribed to the mailing list, or indefinitely as required to keep track of requests not to be contacted.
Sharing and Access to Personal Information
We use carefully selected processors and sub-processors to deliver our services and to operate our business. These third parties supply the infrastructure, storage and associated services necessary for us to provide our services. We have entered into GDPR-compliant, written contracts with all of our processors and sub-processors. Where our use of these third parties entails the transfer of personal information outside the European Economic Area (“EEA”) to the United States, we have also chosen sub-processors which are certified under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks or that use Standard Contractual Clauses (SCCs). Although it has been decided that the Privacy Shield is no longer a valid way to transfer personal data outside of the EEA, a company’s subscription to the framework indicates a commitment to upholding privacy which compliments the written contracts we have in place.
Where we see a need to add a new sub-processor to those specified, we will first notify you in writing to explain our purposes, and you will have the opportunity to object.
You can see the specific third parties used for the purpose of processing your data below:
- Twilio SendGrid (mailing list)
Location: United States
- Zoom (webinars)
Location: Europe (EEA)
- Eventbrite (events)
Location: United States
Third Parties as Legally Required
We may disclose personal information to third parties in order to:
- comply with any legal obligation
- prevent fraud
- resolve disputes
- protect the rights or safety of ourselves or our customers
Third Parties in the Event of a Sale of Business
If Equin Limited or substantially all of its assets are sold, whether through merger, acquisition, bankruptcy, dissolution, reorganisation, or other transaction or proceeding, your personal information may be shared with any acquiring organisation and their representatives, and your personal information may be one of the transferred assets. In this event you will be notified.
Sig+ is a website, accessible only over a secure (HTTPS) connection. This ensures all data is encrypted while in transit.
Changes to this Privacy Notice
We reserve the right to change this Notice from time to time as we add new services or features or in response to changes in the law or our commercial arrangements.
If you have any questions about this Notice, or require any further information, please contact our Data Protection Officer via email at [email protected].