Last Updated 23 August, 2021
Introduction and Who We Are
In some situations, Workshop acts as the data processor of Personally Identifiable Information collected by Partners. When Partners are the owners of content that they upload, submit, or otherwise provide to the Platform (“Partner Content”), then they are the data controller with respect to any personal information included in their Partner Content. Workshop acts as a processor when it processes Partner Content on behalf of the Partner.
Some of our Services functionality can be used without revealing any Personally Identifiable Information, though for features or services related to courses, Personally Identifiable Information is required. “Personally Identifiable Information” (i.e., information that can be used to identify you) can include information such as your name and email address, among other things. You are responsible for ensuring the accuracy of the Personally Identifiable Information you submit to Workshop. Inaccurate information may affect your ability to use the Services, the information you receive when using the Services, and our ability to contact you. For example, your email address should be kept current because that is one of the primary manners in which we communicate with you.
Broadly speaking, there are two categories of information we collect: 1) information that we must have in order for you to use Workshop; and 2) information that we can use to provide additional features and improved experiences if you choose to share that information.
The first category includes:
- Registration information, including your name, email, and other information you provide when you sign up for Workshop.
- The courses you sign up to and your interactions with the Services. This allows us to make recommendations to you and suggest relevant content.
- Technical information necessary to operate Workshop. This includes the type of browser and device you use.
The second category includes information that enables us to offer you additional features. We never receive any of the following information unless you expressly choose to share it with us. It’s as simple as that. Here are some examples:
- Your photos: We will only access images that you specifically choose to share, and we will never scan or import your photo library or camera roll. This allows you to choose individual pictures to change your profile picture or upload as a challenge submission. You can stop sharing photos and revoke access at any time.
We will be clear with you about how and when we might share information.
In some situations, we will share certain information with third parties. For example, like most services, if you sign up for Workshop through a third party like Facebook or a mobile provider, we share some information with them and they share some information with us in order to enable your account. For the purposes of course delivery, we also share some information about you with our Partners (see ‘Sharing Your Data’ below).
What data we collect
We collect certain data from you directly, like information you enter yourself, data about your participation in courses, and data from third-party platforms you connect with Workshop (such as Facebook). We also collect some data automatically, like information about your device and what parts of the Services you interact with or spend time using.
Data you provide to us
When you create an account and use the Services, including through a third-party platform or from a Partner, or fill in a form on our websites, we collect any data you provide directly, including:
|Account Data||In order to use certain features (such as purchasing a course), you need to create a user account. When you create or update your account, we collect and store the data you provide, including Personally Identifiable Information such as your name and email address as well as your password. We also assign you a unique identifying number. We may use the Personally Identifiable Information that you provide when responding to your questions, or to send you updates about new courses offered by Workshop, and to send you email messages about maintenance or updates to the Services.|
|Profile Data||You can also choose to provide profile information such as your country of residence or preferred currency. Your Profile Data is private to you.|
We may provide features that rely on the use of additional information on your mobile device or require access to certain services on your mobile device that will enhance your Workshop experience but are not required to use the Services. (In other words, information that falls in the second category described in the Introduction to this Policy.)
|Shared Content||Parts of the Services let you interact with other users or share content publicly, including by posting questions and/or answers on a course page, sending messages to students or mentors, or posting photos or other work you upload. Such shared content may be publicly viewable by others depending on where it is posted. You should not include any Personally Identifiable Information or other information of a personal or sensitive nature, whether relating to you or another person.|
|Workshop Data||When you purchase and take part in courses, we collect certain data including which courses and assessments you’ve started and completed; your exchanges with mentors and other students; and questions and answers related to particular courses.|
|Payment Data||If you make purchases, we collect certain data as necessary to process your order. You must provide certain payment and billing data directly to our payment processing partners, including your name, credit/debit card information and billing address. For security, Workshop does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.|
|Data About Your Accounts on Other Services|
We may obtain certain information, including Personally Identifiable Information, through your social media or other online accounts if they are connected to your Workshop account. If you login to Workshop via Facebook or another third-party platform or service, we ask for your permission to access certain information about that other account. For example, depending on the platform or service we may collect your name, profile picture, account ID number, and login email address. We do not collect information on your gender or a list of friends and contacts.
Those platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service decide to give us.
If you access or use our Services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.
The data listed above is stored by us and associated with your account.
Data we collect through automated means
When you access the Services (including browsing courses), we collect certain data by automated means, including:
|System Data||Technical data about your computer or device, like your IP address, device type, operating system type and version, unique device identifiers, network connection type (e.g., WiFi, 3G, LTE) and provider, network and device performance, browser type, language, and other systems data, and platform types.|
|Usage Data||Usage statistic about your interactions with the Services, including courses accessed, interaction with courses, time spent on pages or the Services, pages visited, features used, your search queries, click data, date and time and other data regarding your use of the Services|
|Approximate Geographic Data||An approximate geographic location, including information such as country, city, and geographic coordinates, calculated based on your IP address.|
The data listed above is collected through the user or server log files and tracking technologies, as detailed in the Cookies and Data Collection Tools section below. It is stored by us and associated with your account.
How We Get Data About You
We use tools like cookies, web beacons, analytics services, and advertising providers to gather the data listed above. Some of these tools offer you the ability to opt out of data collection.
Cookies and data collection tools
Workshop uses the following types of cookies:
- Preferences: cookies that remember data about your browser and preferred settings that affect the appearance and behaviour of the Services (like whether you have dismissed an announcement)
- Security: cookies used to enable you to log in and access the Services; protect against fraudulent logins; and help detect and prevent abuse or unauthenticated use of your account.
- Functional: cookies that store functional settings (like the volume you set for video playback).
- Session State: cookies that track your interactions with the Services to help us improve the Services and your browsing experience, remember your login details, and enabled processing of your course purchases. These are strictly necessary for the Services to work properly. If these are disabled then certain functionalities will break or become unavailable.
Some of the third-party partners who provide certain features on our site may also use Local Storage Objects (also known as flash cookies or LSOs) to collect and store data.
We use third-party browser and mobile analytics services, such as Google Analytics and Firebase, on the Services. These services use Data Collection Tools to help us analyze your use of the Services, including information such as the third-party website you arrive from, how often you visit, events within the Services, usage and performance data, and where the application was downloaded from. We use this data to improve the Services, better understand how the Services perform on different devices, and provide information that may be of interest to you.
We use third-party advertising services like Facebook, Google’s ad services, and other ad networks and ad servers to deliver advertising about our Services on other websites and applications you use. The ads may be based on things we know about you, like your Usage Data and System Data, and things that these ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services, and may be tailored to your interests.
Depending on the types of advertising services we use, they may place cookies or other tracking technologies on your computer, phone, or other device to collect data about your use of our Services, and may access those tracking technologies in order to serve these tailored advertisements to you. To help deliver tailored advertising, we may provide these service providers with an anonymised identifier representing you (in a non-human-readable form) and content that you share publicly on the Services.
When using mobile applications you may also receive tailored in-app advertisements. Apple iOS, and Android each provide their own instructions on how to control in-app tailored advertising. For other devices and operating systems, you should review your privacy settings or contact your platform operator.
What We Do With Your Data
We use your data to provide our Services, communicate with you, troubleshoot issues, secure against fraud and abuse, improve and update our Services, analyse how people use our Services, serve personalised advertising and content, and as required by law or necessary for safety and integrity.
- help you efficiently access your information after you sign in
- remember information so you will not have to re-enter it during your visit or the next time you visit the Services;
- provide personalised content and information to you and others, which could include online ads or other forms of marketing
- provide, improve, test, and monitor the effectiveness of our Services
- develop and test new products and features
- to communicate with you for Service-related or research purposes including via emails, notifications, text messages, or other messages, which you agree to receive
- monitor metrics such as total number of visitors, traffic, and demographic patterns
- diagnose or fix technology problems
Sharing your data
We share certain data about you with Partners, course providers, mentors, other students, companies performing services for us, our business partners, analytics and data enrichment providers, your social media providers, companies helping us run promotions and surveys, and advertising companies who help us promote our Services. We may share data in other ways if it is aggregated or anonymised or if we get your consent. We will only share the minimum data required for any purpose. For example, although we will share your name with your course mentor, we will not share your date of birth because it is not required to deliver course content.
Sharing by you
The Workshop Services are a collaborative learning service that offers many ways to find, learn, enjoy and share content. We encourage you to take advantage of these social features with others on the Services.
- Any information or content that you voluntarily disclose for posting to the Services, such as User Content, becomes available to the public, as controlled by any applicable privacy settings that you set. Once you have shared User Content or made it public, that User Content may be re-shared by others.
- If you remove information that you posted to the Services, copies may remain viewable in cached and archived pages of the Services, or if other Users or third parties using the Workshop API have copied or saved that information.
Third party applications
- Workshop enables you to share particular items of content that you have created or completed, on an individual basis, or to Third Party Applications, other Workshop users, and others. Please note that if you share content to a Third Party Application or a third party service, it may be viewable by others within the Workshop Services.
Sharing by Workshop
With course delivery Partners and your mentor
We actively share aggregated data with our course providers as part of our service to them, such as which courses our users have purchased or interacted with. This data may include things like location, device, the site that brought them to Workshop, but it will not contain any Personally Identifiable Information.
Further than this, we will only share your Personally Identifiable Information with Partners with your permission or if you request it.
With other students and mentors
Depending on your settings, your shared content and profile data may be publicly viewable to other students and mentors on your course. If you choose to use the social features, engage in class discussion or ask a question to a mentor, your information (including your name) may also be publicly viewable by other users depending on your settings.
With service providers, contractors, and agents
We may share your data with third-party companies who perform services on our behalf, such as payment processing, data analysis, marketing and advertising services (including retargeted advertising and customer management databases), email and hosting services, and customer services and support. These service providers may access your Personally Identifiable Information and are required to use it solely as we direct, to provide our requested service.
With analytics services
As part of our use of third-party analytics tools, such as Google Analytics, we share certain contact information, Account Data, System Data, Usage Data, or anonymised data as required. Anonymised data means data which does not contain any Personally Identifiable Information, replacing this with an anonymous token or ID. This allows these providers to provide analytics services.
To power social media features
For promotions and surveys
We may share your data as necessary to administer, market, or sponsor promotions and surveys you choose to participate in, as required by applicable law (like to provide a winners list or make required filings), or in accordance with the rules of the promotion or survey.
For security and legal compliance
We may disclose your data to third parties if we (in our sole discretion) have a good faith belief that the disclosure is:
- Permitted or required by law
- Requested as part of a judicial, governmental, or legal inquiry, order, or proceeding
- Required to detect, prevent, or address fraud, abuse, misuse, potential violations of law (or rule or regulation), or security, or customer service, or technical issues; or
- Reasonably necessary in our discretion to protect against imminent harm to the rights, property, or safety of Workshop, our users, employees, members of the public, or our Services.
During a change in control
If Workshop undergoes a business transaction like a merger, acquisition, corporate divestiture, or dissolution (including bankruptcy), or a sale of all or some of its assets, we may share, disclose, or transfer all of your data to the successor organisation during such transition or in contemplation of a transition (including during due diligence). If, in such instances, there are any changes in the terms of this policy, then these will be communicated publicly.
We can disclose or use aggregate or anonymised data for any purpose.
With your permission
If you reside or are located in the UK or the EEA, we keep your Personally Identifiable Information for no longer than necessary for the purposes for which the Personally Identifiable Information is processed. The length of time we retain Personally Identifiable Information for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.
We use appropriate security based on the type and sensitivity of data being stored. As with any internet-enabled system, there is always a risk of unauthorised access, so it’s important to protect your password and contact us if you suspect any unauthorised access to your account.
Workshop takes appropriate security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal data that we collect and store. These measures vary based on the type and sensitivity of the data. Unfortunately, however, no system can be 100% secured, so we cannot guarantee that communications between you and Workshop, the Services, or any information provided to us in connection with the data we collect through the Services will be free from unauthorised access by third parties. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact [email protected] with any concerns. If you believe Workshop has been subject to a data breach, report it to [email protected].
Your preferences and rights
You have certain rights around the use of your data, including the ability to opt out of promotional emails, cookies, and collection of your data by certain analytics providers. You can update or terminate your account from within our Services, and can also contact us for individual rights requests about your personal data. Parents who believe we’ve unintentionally collected personal data about their underage child should contact us for help deleting that information.
If you have any questions about your data, our use of it, or your rights, contact us at [email protected].
Your choices about the use of your data
You can choose not to provide certain data to us, but you may not be able to use certain features of the Services.
Opt-out from Promotional Emails
To stop receiving promotional communications from us, you can opt out by using the unsubscribe mechanism in the promotional communication you receive or by changing the email preferences in your account. Note that regardless of your email preference settings, we will send you transactional and relationship messages regarding the Services, which may include administrative confirmations, order confirmations, important updates about the Services, and notices about our policies.
Opt-out from Cookies/Web Beacons
The browser or device you use may allow you to control cookies and other types of local data storage. Your device may also allow you to control whether location or other data is collected and shared.
- Click on “Cookie Consent” at the bottom right-hand corner of our homepage, and click on the opt-out link.
Third-Party Tools/Analytics on the Website
To get information and control cookies used for tailored advertising from participating companies, see the consumer opt-out pages for theNetwork Advertising Initiative and Digital Advertising Alliance, or if you’re located in the European Union, visit the Your Online Choices site. To opt out of Google’s display advertising or customise Google Display Network ads, visit the Google Ads Settings page.
To opt out of allowing Google Analytics to use your data for analytics, see the Google Analytics Opt-out Browser Add-on.
Accessing, updating, and deleting your personally identifiable information
If you reside or are located in theUK or the EEA, you have the right to request that we:
- provide access to any Personally Identifiable Information we hold about you;
- prevent the processing of your Personally Identifiable Information for direct-marketing purposes;
- update any Personally Identifiable Information which is out of date or incorrect;
- delete any Personally Identifiable Information which we are holding about you;
- restrict the way that we process your Personally Identifiable Information;
- provide your Personally Identifiable Information to a third party provider of services; or
- provide you with a copy of any Personally Identifiable Information which we hold about you.
You can access and update your personal data that Workshop collects and maintains as follows:
- To update data you provide directly, log in to your account and update your account at any time.
- To terminate your account:
- Visit your profile advanced settings page and follow the instructions for deleting your account.
- If you have any issues terminating your account, email us at support@workshop,ws or via our Support Center.
- To request access, correct, or delete your personal data, email [email protected] or write to us at Workshop Tech Solutions Ltd, 15 Dock Street, London, Greater London, E1 8JN. Please allow up to 30 days for a response. For your protection, we may require that the request be sent through the email address associated with your account, and we may need to verify your identity before implementing your request. Please note that we retain certain data where we have a lawful basis to do so, including for mandatory record-keeping and to complete transactions.
Our policy concerning children
We recognise the privacy interests of children and encourage parents and guardians to take an active role in their children’s online activities and interests. Children under 13 (or under 16 in the UK or the European Economic Area except for those over 13 who have parental consent to undertake courses specifically labelled for teenagers) should not use the Services. If we learn that we’ve collected personal data from a child under those ages, we will take reasonable steps to delete it.
Parents who believe that Workshop may have collected personal data from a child under those ages can submit a request that it be removed to [email protected].
Storage and processing
- Your information collected through the Services may be stored and processed in the United Kingdom or any other country in which Workshop or its Service Providers maintain facilities.
- Workshop or its Service Providers may transfer information that we collect about you, including personal information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. Information collected within the UK or the EEA may, for example, be transferred to and processed by third parties identified above, located in a country outside of these areas of jurisdiction, where you may have fewer legal rights in relation to your information. Please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.
When we make a material change to this policy, we’ll notify users via email, in-product notice, or another mechanism required by law. Changes become effective the day they’re posted. Please contact us via email or postal mail with any questions, concerns, or disputes.