Privacy Policy

Last Updated 23 May, 2018

1 Introduction and Who We Are

Thanks for choosing Workshop. At Workshop Ltd (“Workshop”, “We”, “Us” or “Our”) we respect your privacy and want you to understand how we collect, use, and share data about you through our mobile services, web site, and any software provided on or in connection with Workshop services (collectively, the “Services”). Please read this notice carefully to understand what we do. If you do not understand any aspects of our Privacy Policy, please feel free to contact us at [email protected]. Your use of our Services is also governed by our Terms of Service.

If you reside in the European Economic Area (“EEA”) Workshop is the data controller of all Personally Identifiable Information (as defined below) collected via the Services and of certain Personally Identifiable Information collected from third parties, as set out in this Privacy Policy.

2 What Information this Privacy Policy Covers

This Privacy Policy covers our data collection practices and describes your rights to access, correct, or restrict our use of your personal data. It also serves to help you understand what data we collect with your permission, and what we do — and do not do — with it.

This Privacy Policy applies to your use of Workshop Services. As used herein the term “use” shall mean use, access, install, sign into, connect with, download, visit or browse the Services.

Some of our Services functionality can be used without revealing any Personally Identifiable Information, though for features or services related to workshops, Personally Identifiable Information is required. “Personally Identifiable Information” (i.e., information that can be used to identify you) can include information such as your name and email address, among other things. You are responsible for ensuring the accuracy of the Personally Identifiable Information you submit to Workshop. Inaccurate information may affect your ability to use the Services, the information you receive when using the Services, and our ability to contact you. For example, your email address should be kept current because that is one of the primary manners in which we communicate with you.

Broadly speaking, there are two categories of information we collect: 1) information that we must have in order for you to use Workshop; and 2) information that we can use to provide additional features and improved experiences if you choose to share that information.

The first category includes:

  • Registration information, including your name, email, and other information you provide when you sign up for Workshop.
  • The workshops you sign up to and your interactions with the Services. This allows us to make recommendations to you and suggest relevant content.
  • Technical information necessary to operate Workshop. This includes the type of browser and device you use.

The second category includes information that enables us to offer you additional features. We never receive any of the following information unless you expressly choose to share it with us. It’s as simple as that. Here are some examples:

  • Your photos: We will only access images that you specifically choose, and we will never scan or import your photo library or camera roll. This allows you to choose individual pictures to change your profile picture or upload as a challenge submission. You can stop sharing photos and revoke access at any time.

The distinction between these two categories is important. Information in the first category is information you must provide in order to use Workshop. When you agree to our Privacy Policy, you give us the right to collect this information and use it for the purposes described. Information in the second category is information we will only collect if you explicitly give us permission to do so in the future. For this second category of information, we will ask for your permission before first accessing it, we will describe how we will use it if you give us permission, we will only use the information for the purpose we described, and you will always have the ability to change your mind and revoke that permission. Acceptance of our Privacy Policy does not mean you have granted us permission to access or use information in the second category; we’re just explaining to you that one day we might ask you for that permission.

We will be clear with you about how and when we might share information.

In some situations we will share certain information with third parties. For example, like most services, if you sign up for Workshop through a third party like Facebook or a mobile provider, we share some information with them and they share some information with us in order to enable your account.

We hope this helps you to understand our privacy commitments to you. Now, the details await you below, but please remember that this Introduction is part of the Privacy Policy itself — it’s our promise to you. If you ever have any questions or concerns, then please let us know at [email protected].

3 What Data We Collect

We collect certain data from you directly, like information you enter yourself, data about your participation in workshops, and data from third-party platforms you connect with Workshop (such as Facebook). We also collect some data automatically, like information about your device and what parts of the Services you interact with or spend time using.

3.1 Data You Provide to Us

When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:

Account DataIn order to use certain features (such as purchasing a workshop), you need to create a user account. When you create or update your account, we collect and store the data you provide, including Personally Identifiable Information such as your name and email address as well as your password. We also assign you a unique identifying number. We may use the Personally Identifiable Information that you provide when responding to your questions, or to send you updates about new workshops offered by Workshop, and to send you email messages about maintenance or updates to the Services.
Profile DataYou can also choose to provide profile information such as your country of residence or preferred currency. Your Profile Data is private to you.
Device DataWe may provide features that rely on the use of additional information on your mobile device or require access to certain services on your mobile device that will enhance your Workshop experience but are not required to use the Services. (In other words, information that falls in the second category described in the Introduction to this Policy.)

Granting us access does not mean you are granting us unlimited access to that information or that we will access specific information without your permission. You do not have to give us such permission in order to use Workshop, and acceptance of this Privacy Policy does not mean you have granted us permission to access this information.

In particular:

  • Photos and Camera: We will not access your photos or camera without first getting your explicit permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us. (You may use our application to select the photo or photos you choose to share, but we will never import the photos you review except those you explicitly share).
Workshop DataWhen you purchase and take part in workshops, we collect certain data including which workshops and challenges you’ve started and completed
Payment DataIf you make purchases, we collect certain data as necessary to process your order. You must provide certain payment and billing data directly to our payment processing partners, including your name, credit/debit card information and billing address. For security, Workshop does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.
Data About Your Accounts on Other ServicesWe may obtain certain information, including Personally Identifiable Information, through your social media or other online accounts if they are connected to your Workshop account. If you login to Workshop via Facebook or another third-party platform or service, we ask for your permission to access certain information about that other account. For example, depending on the platform or service we may collect your name, profile picture, account ID number, and login email address.

Those platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service decide to give us.

If you access or use our Services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.

Sweepstakes, Promotions, and SurveysWe may invite you to complete a survey or participate in a promotion (such as a contest, sweepstake, or challenge), either through the Services or a third-party platform. If you participate we will collect Personally Identifiable Information and store the data you provide as part of the participating, such as your name, email address, date of birth, or phone number. That data is subject to this Privacy Policy unless otherwise stated in the official rules of the promotion or in another privacy policy. The data collected will be used to administer the promotion or survey, including for notifying winners and distributing rewards. To receive a reward, you may be required to allow us to post some of your information publicly (like on a winner’s page). Where we use a third-party platform to administer a survey or promotion, the third party’s privacy policy will apply.
Communications and SupportIf you contact us for support or to report a problem or concern (regardless of whether you have created an account), we collect and store your contact information, messages, and other dat about you such as your name, email address, location, operating system, IP address, and any other data you provide or that we collect through automated means (covered below). We use this data to respond to you and research your question or concern, in accordance with this Privacy Policy.

The data listed above is stored by us and associated with your account.

3.2 Data We Collect Automatically

When you access the Services (including browsing workshops), we collect certain data by automated means, including:

System DataTechnical data about your computer or device, like your IP address, device type, operating system type and version, unique device identifiers, network connection type (e.g., WiFi, 3G, LTE) and provider, network and device performance, browser
type, language, and other systems data, and platform types.
Usage DataUsage statistic about your interactions with the Services, including workshops accessed, interaction with workshops, time spent on pages or the Services, pages visited, features used, your search queries, click data, date and time and other
data regarding your use of the Services.
Approximate Geographic DataAn approximate geographic location, including information such as country, city, and geographic coordinates, calculated based on your IP address.

The data listed above is collected through the user or server log files and tracking technologies, as detailed in the Cookies and Data Collection Tools section below. It is stored by us and associated with your account.

4 How We Get Data About You

We use tools like cookies, web beacons, analytics services, and advertising providers to gather the data listed above. Some of these tools offer you the ability to opt out of data collection.

4.1 Cookies and Data Collection Tools

As detailed in our Cookie Policy, Workshop and service providers acting on our behalf (like Google Analytics and third party advertisers) use server log files and automated data collection tools like cookies, tags, scripts, customized links, device or browser fingerprints, and web beacons (together, “Data Collection Tools”) when you access and use the Services. These Data Collection Tools automatically track and collect certain System Data and Usage Data when you use the Services. In some cases, we tie data gathered through those Data Collection Tools to other data that we collect as described in this Privacy Policy.

We use cookies (small files that websites send to your device to uniquely identify your browser or device or to store data in your browser) for things like analyzing your use of the Services, personalizing your experience, making it easier to log into the Services, and recognizing you when you return. We use web beacons (small objects that allow us to measure the actions of visitors and users using the Services) for things like identifying whether a page was visited, identifying whether an email was opened, and advertising more efficiently by excluding current users from certain promotional messages or identifying the source of a new mobile app download.

Workshop uses the following types of cookies:

  • Preferences: cookies that remember data about your browser and preferred settings that affect the appearance and behaviour of the Services (like whether you have dismissed an announcement)
  • Security: cookies used to enable you to log in and access the Services; protect against fraudulent logins; and help detect and prevent abuse or unauthenticated use of your account.
  • Session State: cookies that track your interactions with the Services to help us improve the Services and your browsing experience, remember your login details, and enabled processing of your workshop purchases. These are strictly necessary for the Services to work properly. If these are disabled then certain functionalities will break or become unavailable.

You can set your web browser to alert you about attempts to place cookies on your computer, limit the types of cookies you allow, or refuse cookies altogether. If you do, you may not be able to use some or all features of the Services, and your experience may be different or less functional.

Some of the third-party partners who provide certain features on our site may also use Local Storage Objects (also known as flash cookies or LSOs) to collect and store data.

4.2 Analytics

We use third-party browser and mobile analytics services including Google Analytics, Sumo, and Drift on the Services. These services use Data Collection Tools to help us analyze your use of the Services, including information such as the third-party website you arrive from, how often you visit, events within the Services, usage and performance data, and where the application was downloaded from. We use this data to improve the Services, better understand how the Services perform on different devices, and provide information that may be of interest to you.

4.3 Online Advertising

We use third-party advertising services like Facebook, Google’s ad services, and other ad networks and ad servers to deliver advertising about our Services on other websites and applications you use. The ads may be based on things we know about you, like your Usage Data and System Data, and things that these ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services, and may be tailored to your interests.

Depending on the types of advertising services we use, they may place cookies or other tracking technologies on your computer, phone, or other device to collect data about your use of our Services, and may access those tracking technologies in order to serve these tailored advertisements to you. To help deliver tailored advertising, we may provide these service providers with an anonymised identifier representing you (in a non-human-readable form).

When using mobile applications you may also receive tailored in-app advertisements. Apple iOS, and Android each provide their own instructions on how to control in-app tailored advertising. For other devices and operating systems, you should review your privacy settings or contact your platform operator.

5 What We Do With Your Data

We use your data to provide our Services, communicate with you, troubleshoot issues, secure against fraud and abuse, improve and update our Services, analyze how people use our Services, serve personalised advertising and content, and as required by law or necessary for safety and integrity.

In addition to some of the specific uses of information we describe in this Privacy Policy, we may use information that we collect to:

  • help you efficiently access your information after you sign in
  • remember information so you will not have to re-enter it during your visit or the next time you visit the Services;
  • provide personalized content and information to you and others, which could include online ads or other forms of marketing
  • provide, improve, test, and monitor the effectiveness of our Services
  • develop and test new products and features
  • to communicate with you for Service-related or research purposes including via emails, notifications, text messages, or other messages, which you agree to receive
  • monitor metrics such as total number of visitors, traffic, and demographic patterns
  • diagnose or fix technology problems
  • as otherwise stated in this Privacy Policy.

6 Sharing Your Data

We share certain data about you with mentors, other students, companies performing services for us, our business partners, analytics and data enrichment providers, your social media providers, companies helping us run promotions and surveys, and advertising companies who help us promote our Services. We may share data in other ways if it is aggregated or anonymised or if we get your consent. We will never disclose any of your Personally Identifiable Information.

6.1 Sharing By You

6.1.1 Third Party Applications

  • Workshop enables you to share particular items of content that you have created or completed, on an individual basis, or to Third Party Applications. Please note that if you share content to a Third Party Application or a third party service, it may be viewable by others within the Workshop Services.
  • You understand and agree that a Third Party Application’s use of information collected from you (or as authorised by you) is governed by the Third Party Application’s privacy policies and your settings on the relevant service, and Workshop’s use of such information is governed by this Privacy Policy.

6.2 Sharing By Workshop

We may share your data with third parties under the following circumstances or as otherwise described in this Privacy Policy:

6.2.1 With Your Mentors

We share aggregate data with mentors for workshops which you have purchased or interacted with. This data may include things like location, device, the site that brought you to Workshop, but it will not contain any Personally Identifiable Information. We will never share your email address with mentors.

6.2.2 With Service Providers, Contractors, and Agents

We may share your data with third-party companies who perform services on our behalf, such as payment processing, data analysis, marketing and advertising services (including retargeted advertising), email and hosting services, and customer services and support. These service providers may access your Personally Identifiable Information and are required to use it solely as we direct, to provide our requested service.

6.2.3 With Analytics Services

As part of our use of third-party analytics tools, such as Google Analytics, we share certain contact information, Account Data, System Data, Usage Data, or anonymised data as required. Anonymised data means data which does not contain any Personally Identifiable Information, replacing this with an anonymous token or ID. This allows these providers to provide analytics services.

6.2.4 To Enable Social Media Features

The social media features in the Services (like the Facebook Share button) may allow the third-party social media provider to collect data such as your IP address and which page of the Services you’re visiting, and to set a cookie to enable the feature. Your interactions with these features are governed by the third-party company’s privacy policy.

6.2.5 For Promotions and Surveys

We may share your data as necessary to administer, market, or sponsor promotions and surveys you choose to participate in, as required by applicable law (like to provide a winners list or make required filings), or in accordance with the rules of the promotion or survey.

6.2.6 For Security and Legal Compliance

We may disclose your data to third parties if we (in our sole discretion) have a good faith belief that the disclosure is:

  • Permitted or required by law
  • Requested as part of a judicial, governmental, or legal inquiry, order, or proceeding
  • Reasonably necessary to enforce our Terms of Use, and Privacy Policy
  • Required to detect, prevent, or address fraud, abuse, misuse, potential violations of law (or rule or regulation), or security or technical issues; or
  • Reasonably necessary in our discretion to protect against imminent harm to the rights, property, or safety of Workshop, our users, employees, members of the public, or our Services.

We may also disclose data about you to our auditors and legal advisors in order to assess our disclosure obligations and rights under this Privacy Policy.

6.2.7 During a Change In Control

If Workshop undergoes a business transaction like a merger, acquisition, corporate divestiture, or dissolution (including bankruptcy), or a sale of all or some of its assets, we may share, disclose, or transfer all of your data to the successor organization during such transition or in contemplation of a transition (including during due diligence).

6.2.8 After Aggregation/Anonymisation

We can disclose or use aggregate or anonymised data for any purpose.

6.2.9 With Your Permission

With your consent, we may share data to third parties outside the scope of this Privacy Policy. This is unlikely to happen and you’ll be contacted directly in this case.

7 Retention

If you reside or are located in the EEA, we keep your Personally Identifiable Information for no longer than necessary for the purposes for which the Personally Identifiable Information is processed. The length of time we retain Personally Identifiable Information for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.

8 Security

We use appropriate security based on the type and sensitivity of data being stored. As with any internet-enabled system, there is always a risk of unauthorised access, so it’s important to protect your password and contact us if you suspect any unauthorised access to your account.

Workshop takes appropriate security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal data that we collect and store. These measures vary based on the type and sensitivity of the data. Unfortunately, however, no system can be 100% secured, so we cannot guarantee that communications between you and Workshop, the Services, or any information provided to us in connection with the data we collect through the Services will be free from unauthorised access by third parties. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact [email protected] with any concerns.

9 Your Preferences and Rights

You have certain rights around the use of your data, including the ability to opt out of promotional emails, cookies, and collection of your data by certain analytics providers. You can update or terminate your account from within our Services, and can also contact us for individual rights requests about your personal data. Parents who believe we’ve unintentionally collected personal data about their underage child should contact us for help deleting that information.

If you have any questions about your data, our use of it, or your rights, contact us at [email protected]

9.1 Your Choices About the Use of Your Data

You can choose not to provide certain data to us, but you may not be able to use certain features of the Services.

9.1.1 Opt-out from Promotional Emails

To stop receiving promotional communications from us, you can opt out by using the unsubscribe mechanism in the promotional communication you receive or by changing the email preferences in your account. Note that regardless of your email preference settings, we will send you transactional and relationship messages regarding the Services, which may include administrative confirmations, order confirmations, important updates about the Services, and notices about our policies.

9.1.2 Opt-out from Cookies/Web Beacons

The browser or device you use may allow you to control cookies and other types of local data storage. Your wireless device may also allow you to control whether location or other data is collected and shared.

9.1.3 Third Party Tools/Analytics on the Website

To get information and control cookies used for tailored advertising from participating companies, see the consumer opt-out pages for the Network Advertising Initiative and Digital Advertising Alliance, or if you’re located in the European Union, visit the Your Online Choices site. To opt out of Google’s display advertising or customise Google Display Network ads, visit the Google Ads Settings page.

To opt out of allowing Google Analytics to use your data for analytics, see the Google Analytics Opt-out Browser Add-on.

9.2 Accessing, Updating, and Deleting Your Personally Identifiable Information

If you reside or are located in the EEA, you have the right to request that we:

  • provide access to any Personally Identifiable Information we hold about you;
  • prevent the processing of your Personally Identifiable Information for direct-marketing purposes;
  • update any Personally Identifiable Information which is out of date or incorrect;
  • delete any Personally Identifiable Information which we are holding about you;
  • restrict the way that we process your Personally Identifiable Information;
  • provide your Personally Identifiable Information to a third party provider of services; or
  • provide you with a copy of any Personally Identifiable Information which we hold about you.

You can access and update your personal data that Workshop collects and maintains as follows:

  • To update data you provide directly, log in to your account and update your account at any time.
  • To terminate your account:
    • Visit your profile advanced settings page and follow the instructions for deleting your account.
    • If you have any issues terminating your account, email us at [email protected].
    • Please note: even after your account is terminated, some or all of your data may still be visible to others, including without limitation any data that has been (a) copied, stored, or disseminated by other users (including in course comment); (b) shared or disseminated by you or others (including in your shared content); or (c) posted to a third-party platform. Even after your account is terminated, we retain your data for as long as we have a legitimate purpose to do so (and in accordance with applicable law), including to assist with legal obligations, resolve disputes, and enforce our agreements. We may retain and disclose such data pursuant to this Privacy Policy after your account has been terminated.

To request access, correct, or delete your personal data, email [email protected] or write to us at Workshop Tech Solutions Ltd, Stag House, Old London Road, Hertford, United Kingdom, SG13 7LA. Please allow up to 30 days for a response. For your protection, we may require that the request be sent through the email address associated with your account, and we may need to verify your identity before implementing your request. Please note that we retain certain data where we have a lawful basis to do so, including for mandatory record-keeping and to complete transactions.

9.3 Our Policy Concerning Children

We recognise the privacy interests of children and encourage parents and guardians to take an active role in their children’s online activities and interests. Children under 13 (or under 16 in the European Economic Area) should not use the Services. If we learn that we’ve collected personal data from a child under those ages, we will take reasonable steps to delete it.

Parents who believe that Workshop may have collected personal data from a child under those ages can submit a request that it be removed to [email protected].

10 Storage and Processing

  • Your information collected through the Services may be stored and processed in the United Kingdom or any other country in which Workshop or its Service Providers maintain facilities.
  • Workshop or its Service Providers may transfer information that we collect about you, including personal information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. Information collected within the European Economic Area (“EEA”) may, for example, be transferred to and processed by third parties identified above, located in a country outside of the EEA, where you may have fewer legal rights in relation to your information. Please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.
  • By registering for and using the Services you consent to the transfer of information to the United Kingdom or to any other country in which Workshop, or its Service Providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.

11 Changes to Privacy Policy

When we make a material change to this policy, we’ll notify users via email, in-product notice, or another mechanism required by law. Changes become effective the day they’re posted. Please contact us via email or postal mail with any questions, concerns, or disputes.

From time to time, we may update this Privacy Policy. If we make any material change to it, we will notify you via email, through a notification posted on the Services, or as required by applicable law. We will also include a summary of the key changes. Unless stated otherwise, modifications will become effective on the day they are posted.

As permitted by applicable law, if you continue to use the Services after the effective date of any change, then your access and/or use will be deemed an acceptance of (and agreement to follow and be bound by) the revised Privacy Policy. The revised Privacy Policy supersedes all previous Privacy Policies.