Last Updated 23 May, 2018
1 Introduction and Who We Are
Some of our Services functionality can be used without revealing any Personally Identifiable Information, though for features or services related to workshops, Personally Identifiable Information is required. “Personally Identifiable Information” (i.e., information that can be used to identify you) can include information such as your name and email address, among other things. You are responsible for ensuring the accuracy of the Personally Identifiable Information you submit to Workshop. Inaccurate information may affect your ability to use the Services, the information you receive when using the Services, and our ability to contact you. For example, your email address should be kept current because that is one of the primary manners in which we communicate with you.
Broadly speaking, there are two categories of information we collect: 1) information that we must have in order for you to use Workshop; and 2) information that we can use to provide additional features and improved experiences if you choose to share that information.
The first category includes:
- Registration information, including your name, email, and other information you provide when you sign up for Workshop.
- The workshops you sign up to and your interactions with the Services. This allows us to make recommendations to you and suggest relevant content.
- Technical information necessary to operate Workshop. This includes the type of browser and device you use.
The second category includes information that enables us to offer you additional features. We never receive any of the following information unless you expressly choose to share it with us. It’s as simple as that. Here are some examples:
- Your photos: We will only access images that you specifically choose, and we will never scan or import your photo library or camera roll. This allows you to choose individual pictures to change your profile picture or upload as a challenge submission. You can stop sharing photos and revoke access at any time.
We will be clear with you about how and when we might share information.
In some situations we will share certain information with third parties. For example, like most services, if you sign up for Workshop through a third party like Facebook or a mobile provider, we share some information with them and they share some information with us in order to enable your account.
3 What Data We Collect
3.1 Data You Provide to Us
When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:
|Account Data||In order to use certain features (such as purchasing a workshop), you need to create a user account. When you create or update your account, we collect and store the data you provide, including Personally Identifiable Information such as your name and email address as well as your password. We also assign you a unique identifying number. We may use the Personally Identifiable Information that you provide when responding to your questions, or to send you updates about new workshops offered by Workshop, and to send you email messages about maintenance or updates to the Services.|
|Profile Data||You can also choose to provide profile information such as your country of residence or preferred currency. Your Profile Data is private to you.|
|Device Data||We may provide features that rely on the use of additional information on your mobile device or require access to certain services on your mobile device that will enhance your Workshop experience but are not required to use the Services. (In other words, information that falls in the second category described in the Introduction to this Policy.)|
|Workshop Data||When you purchase and take part in workshops, we collect certain data including which workshops and challenges you’ve started and completed|
|Payment Data||If you make purchases, we collect certain data as necessary to process your order. You must provide certain payment and billing data directly to our payment processing partners, including your name, credit/debit card information and billing address. For security, Workshop does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.|
|Data About Your Accounts on Other Services||We may obtain certain information, including Personally Identifiable Information, through your social media or other online accounts if they are connected to your Workshop account. If you login to Workshop via Facebook or another third-party platform or service, we ask for your permission to access certain information about that other account. For example, depending on the platform or service we may collect your name, profile picture, account ID number, and login email address.|
Those platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service decide to give us.
If you access or use our Services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.
The data listed above is stored by us and associated with your account.
3.2 Data We Collect Automatically
When you access the Services (including browsing workshops), we collect certain data by automated means, including:
|System Data||Technical data about your computer or device, like your IP address, device type, operating system type and version, unique device identifiers, network connection type (e.g., WiFi, 3G, LTE) and provider, network and device performance, browser|
type, language, and other systems data, and platform types.
|Usage Data||Usage statistic about your interactions with the Services, including workshops accessed, interaction with workshops, time spent on pages or the Services, pages visited, features used, your search queries, click data, date and time and other|
data regarding your use of the Services.
|Approximate Geographic Data||An approximate geographic location, including information such as country, city, and geographic coordinates, calculated based on your IP address.|
The data listed above is collected through the user or server log files and tracking technologies, as detailed in the Cookies and Data Collection Tools section below. It is stored by us and associated with your account.
4 How We Get Data About You
4.1 Cookies and Data Collection Tools
Workshop uses the following types of cookies:
- Preferences: cookies that remember data about your browser and preferred settings that affect the appearance and behaviour of the Services (like whether you have dismissed an announcement)
- Security: cookies used to enable you to log in and access the Services; protect against fraudulent logins; and help detect and prevent abuse or unauthenticated use of your account.
- Session State: cookies that track your interactions with the Services to help us improve the Services and your browsing experience, remember your login details, and enabled processing of your workshop purchases. These are strictly necessary for the Services to work properly. If these are disabled then certain functionalities will break or become unavailable.
Some of the third-party partners who provide certain features on our site may also use Local Storage Objects (also known as flash cookies or LSOs) to collect and store data.
We use third-party browser and mobile analytics services including Google Analytics, Sumo, and Drift on the Services. These services use Data Collection Tools to help us analyze your use of the Services, including information such as the third-party website you arrive from, how often you visit, events within the Services, usage and performance data, and where the application was downloaded from. We use this data to improve the Services, better understand how the Services perform on different devices, and provide information that may be of interest to you.
4.3 Online Advertising
We use third-party advertising services like Facebook, Google’s ad services, and other ad networks and ad servers to deliver advertising about our Services on other websites and applications you use. The ads may be based on things we know about you, like your Usage Data and System Data, and things that these ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services, and may be tailored to your interests.
Depending on the types of advertising services we use, they may place cookies or other tracking technologies on your computer, phone, or other device to collect data about your use of our Services, and may access those tracking technologies in order to serve these tailored advertisements to you. To help deliver tailored advertising, we may provide these service providers with an anonymised identifier representing you (in a non-human-readable form).
When using mobile applications you may also receive tailored in-app advertisements. Apple iOS, and Android each provide their own instructions on how to control in-app tailored advertising. For other devices and operating systems, you should review your privacy settings or contact your platform operator.
5 What We Do With Your Data
- help you efficiently access your information after you sign in
- remember information so you will not have to re-enter it during your visit or the next time you visit the Services;
- provide personalized content and information to you and others, which could include online ads or other forms of marketing
- provide, improve, test, and monitor the effectiveness of our Services
- develop and test new products and features
- to communicate with you for Service-related or research purposes including via emails, notifications, text messages, or other messages, which you agree to receive
- monitor metrics such as total number of visitors, traffic, and demographic patterns
- diagnose or fix technology problems
6 Sharing Your Data
6.1 Sharing By You
6.1.1 Third Party Applications
- Workshop enables you to share particular items of content that you have created or completed, on an individual basis, or to Third Party Applications. Please note that if you share content to a Third Party Application or a third party service, it may be viewable by others within the Workshop Services.
6.2 Sharing By Workshop
6.2.1 With Your Mentors
We share aggregate data with mentors for workshops which you have purchased or interacted with. This data may include things like location, device, the site that brought you to Workshop, but it will not contain any Personally Identifiable Information. We will never share your email address with mentors.
6.2.2 With Service Providers, Contractors, and Agents
We may share your data with third-party companies who perform services on our behalf, such as payment processing, data analysis, marketing and advertising services (including retargeted advertising), email and hosting services, and customer services and support. These service providers may access your Personally Identifiable Information and are required to use it solely as we direct, to provide our requested service.
6.2.3 With Analytics Services
As part of our use of third-party analytics tools, such as Google Analytics, we share certain contact information, Account Data, System Data, Usage Data, or anonymised data as required. Anonymised data means data which does not contain any Personally Identifiable Information, replacing this with an anonymous token or ID. This allows these providers to provide analytics services.
6.2.4 To Enable Social Media Features
6.2.5 For Promotions and Surveys
We may share your data as necessary to administer, market, or sponsor promotions and surveys you choose to participate in, as required by applicable law (like to provide a winners list or make required filings), or in accordance with the rules of the promotion or survey.
6.2.6 For Security and Legal Compliance
We may disclose your data to third parties if we (in our sole discretion) have a good faith belief that the disclosure is:
- Permitted or required by law
- Requested as part of a judicial, governmental, or legal inquiry, order, or proceeding
- Required to detect, prevent, or address fraud, abuse, misuse, potential violations of law (or rule or regulation), or security or technical issues; or
- Reasonably necessary in our discretion to protect against imminent harm to the rights, property, or safety of Workshop, our users, employees, members of the public, or our Services.
6.2.7 During a Change In Control
If Workshop undergoes a business transaction like a merger, acquisition, corporate divestiture, or dissolution (including bankruptcy), or a sale of all or some of its assets, we may share, disclose, or transfer all of your data to the successor organization during such transition or in contemplation of a transition (including during due diligence).
6.2.8 After Aggregation/Anonymisation
We can disclose or use aggregate or anonymised data for any purpose.
6.2.9 With Your Permission
If you reside or are located in the EEA, we keep your Personally Identifiable Information for no longer than necessary for the purposes for which the Personally Identifiable Information is processed. The length of time we retain Personally Identifiable Information for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.
Workshop takes appropriate security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal data that we collect and store. These measures vary based on the type and sensitivity of the data. Unfortunately, however, no system can be 100% secured, so we cannot guarantee that communications between you and Workshop, the Services, or any information provided to us in connection with the data we collect through the Services will be free from unauthorised access by third parties. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact [email protected] with any concerns.
9 Your Preferences and Rights
You have certain rights around the use of your data, including the ability to opt out of promotional emails, cookies, and collection of your data by certain analytics providers. You can update or terminate your account from within our Services, and can also contact us for individual rights requests about your personal data. Parents who believe we’ve unintentionally collected personal data about their underage child should contact us for help deleting that information.
If you have any questions about your data, our use of it, or your rights, contact us at [email protected]
9.1 Your Choices About the Use of Your Data
You can choose not to provide certain data to us, but you may not be able to use certain features of the Services.
9.1.1 Opt-out from Promotional Emails
To stop receiving promotional communications from us, you can opt out by using the unsubscribe mechanism in the promotional communication you receive or by changing the email preferences in your account. Note that regardless of your email preference settings, we will send you transactional and relationship messages regarding the Services, which may include administrative confirmations, order confirmations, important updates about the Services, and notices about our policies.
9.1.2 Opt-out from Cookies/Web Beacons
The browser or device you use may allow you to control cookies and other types of local data storage. Your wireless device may also allow you to control whether location or other data is collected and shared.
9.1.3 Third Party Tools/Analytics on the Website
To get information and control cookies used for tailored advertising from participating companies, see the consumer opt-out pages for the Network Advertising Initiative and Digital Advertising Alliance, or if you’re located in the European Union, visit the Your Online Choices site. To opt out of Google’s display advertising or customise Google Display Network ads, visit the Google Ads Settings page.
To opt out of allowing Google Analytics to use your data for analytics, see the Google Analytics Opt-out Browser Add-on.
9.2 Accessing, Updating, and Deleting Your Personally Identifiable Information
If you reside or are located in the EEA, you have the right to request that we:
- provide access to any Personally Identifiable Information we hold about you;
- prevent the processing of your Personally Identifiable Information for direct-marketing purposes;
- update any Personally Identifiable Information which is out of date or incorrect;
- delete any Personally Identifiable Information which we are holding about you;
- restrict the way that we process your Personally Identifiable Information;
- provide your Personally Identifiable Information to a third party provider of services; or
- provide you with a copy of any Personally Identifiable Information which we hold about you.
You can access and update your personal data that Workshop collects and maintains as follows:
- To update data you provide directly, log in to your account and update your account at any time.
- To terminate your account:
- Visit your profile advanced settings page and follow the instructions for deleting your account.
- If you have any issues terminating your account, email us at [email protected].
To request access, correct, or delete your personal data, email [email protected] or write to us at Workshop Tech Solutions Ltd, Stag House, Old London Road, Hertford, United Kingdom, SG13 7LA. Please allow up to 30 days for a response. For your protection, we may require that the request be sent through the email address associated with your account, and we may need to verify your identity before implementing your request. Please note that we retain certain data where we have a lawful basis to do so, including for mandatory record-keeping and to complete transactions.
9.3 Our Policy Concerning Children
We recognise the privacy interests of children and encourage parents and guardians to take an active role in their children’s online activities and interests. Children under 13 (or under 16 in the European Economic Area) should not use the Services. If we learn that we’ve collected personal data from a child under those ages, we will take reasonable steps to delete it.
Parents who believe that Workshop may have collected personal data from a child under those ages can submit a request that it be removed to [email protected].
10 Storage and Processing
- Your information collected through the Services may be stored and processed in the United Kingdom or any other country in which Workshop or its Service Providers maintain facilities.
- Workshop or its Service Providers may transfer information that we collect about you, including personal information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. Information collected within the European Economic Area (“EEA”) may, for example, be transferred to and processed by third parties identified above, located in a country outside of the EEA, where you may have fewer legal rights in relation to your information. Please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.