Smart Revise is a product provided by CRAIGNDAVE Ltd; a private company registered in England and Wales. Company number 10442992. Our registered office is:
12 Tweenbrook Avenue
Gloucester
Gloucestershire
GL1 5JY
The Directors of CRAIGNDAVE and employees are the only people with access to
your personal data and are all fully aware of their responsibilities for security, privacy and confidentiality.
The Directors are:
David Hillyard
Craig Sargent
Mark Plowman
Samuel Sargent
Employees are:
Andrew Fenn
If you have any questions about how we look after your personal data, you can contact us:
Smart Revise is a web-based course companion and revision tool provided by CRAIGNDAVE Lts to educational establishments and private subscribers. Customers take subscriptions to the service, no additional personal data is held on customers beyond that which is asked for the purpose of account registration. We delete all your data when you cancel the service with us after we have confirmed with you that we will not be able to recover it.
CRAIGNDAVE Ltd is a Data Controller with respect to personal data which we collect and process for our own purposes to provide our products and services to customers. CRAIGNDAVE Ltd is a Data Processor when processing personal data on behalf of our customers, for example, educational establishments, teachers and parents etc.
When you purchase access to a Smart Revise course, we collect and store only the necessary data to be able to process your order.
As a controller we make decisions abour processing activities. These are limited to the processing necessary for our legitimate interests. This includes the product storing and analysing the answers students give to questions to determine which questions to ask students in the future. This data is also used to automatically mark answers to questions and allow us to make improvements to the product.
Our lawful basis for data processing as a controller is by consent.
Students can choose to join a class a teacher has created by consent. In doing so they give teachers of the class the right to determine the means of processing their data. This includes inviting other students and teachers to join the class, setting questions, assessing answers and viewing data reports.
In the teacher-student data relationship described above, CRAIGNDAVE Ltd are processors of student data for the educational establishment because we are not determining the purpose and means of the data processing by the teacher, we are facilitating it.
Our lawful basis for data processing as a processor is public task and legitimate interests of a third party (the teacher).
We are registered with the Information Commissioner’s Office.https://ico.org.uk
The full details of the Data Controller are:
CRAIGNDAVE LTD
12 Tweenbrook Avenue
Gloucester
Gloucestershire
GL1 5JY
ICO registration number: ZA462469
When a Trust, Academy or school invests in a new product, service or project that requires the handling of personal data, the Data Protection Officer at the Trust, Academy or school should undertake a data protection impact assessment.
A Data Protection Impact Assessment (DPIA) is a process to help you identify and minimise the data protection risks of a project. To complete this assessment the Trust, Academy or school may choose to enlist the help of other people within their own organisation.
To assist Data Protection Officers in conducting this assessment, CraignDave Ltd supply this privacy policy.
CraignDave Ltd is a limited company within the UK and complies with all legal responsibilities under the Data Protection Act 2018, incorporating EU GDPR.
It is not the position of CraignDave Ltd to complete a Trust, Academy or school's internal paperwork for impact assessments because we should not be judging ourselves, this is often referred to as 'poacher turned gamekeeper'.
All the information required for a Data Protection Officer to complete an impact assessment can be found within our privacy policies.
Microsoft – We use the Azure network to securely hold data on student's smart revise sessions (such as their name, email address, answers to questions, feedback from a teacher and calculated attainment), any classes they are associated with and the teachers associated with those classes. Their privacy policy can be viewed at: https://privacy.microsoft.com/en-gb/privacystatement
Zoho.eu - We use this company as our support centre, this includes handling telephone call, emails and interactions on social media. Their GDPR Policy can be viewed at: https://www.zoho.com/gdpr.html. Their privacy policy can be viewed at: https://www.zoho.com/privacy.html
Stripe - We use Stripe INC to process the payments you make though our store. Their privacy policy can be viewed at https://stripe.com/gb/privacy
Intuit QuickBooks - Your details will be process by our online invoicing, credit control and order processing provider in order to complete and process any order from you. Their privacy policy can be viewed at https://quickbooks.intuit.com/uk/privacy-policy/.
Cloudflare - We use this company to provide an extra layer of cyber attack and bot protection between our servers and the internet. Their privacy policy can be viewed at https://www.cloudflare.com/en-gb/privacypolicy/.
We collect, use and store your personal data so that we can offer you the products and services you expect from us. We see your personal data as just that: it’s yours. So we will always be clear and upfront with you about what we do with your personal data, and (of course) you have control over it.
We collect your personal data for three main reasons:
We promise:
That you can control the personal data you provide us with and that we will always be transparent about how we collect and use it.
We will always tell you what personal data we are collecting from you, the means by which we will collect it and how we will use it. We will only use your personal data for the purposes we originally told you about.
We will only send you marketing communications if you have agreed that we can do so and we will always offer you a clear and simple means of changing your preferences whenever you want to.
We collect your personal data in two main ways:
We may collect the following information about you:
Smart Revise is an online question based revision tool. Data is collected on registration via HTTPS and placed into an encrypted database, and secured by password on the Microsoft Azure network.
Invoices will be stored for tax purposes.
Occasionally we may need to share data with the police, for the purposes of preventing and investigating fraud.
We use your peronal data:
So that we can provide you with our products and services, we have to share some of your personal data with certain third parties.
When we share your personal data, we make sure that it remains secure:
We will not keep your personal data for longer than is necessary for the purposes described in this policy.
As a guide:
You have a number of rights under data protection laws; these are summarised below.
We need to be clear with you about how we process your personal data. We do this through our Contact Promise and this Privacy Policy, which we will keep as up to date as possible.
You can access the personal data we hold on you by contacting us at: [email protected] To process your request, we may ask you for proof of identity so
that we can be sure we are releasing your personal data to the right person.
We will process your request within one month.
We can provide you with a copy of your personal data in electronic format or hard copy.
If we consider the frequency of your requests is unreasonable, we may refuse to comply with your request.
In those circumstances, we would notify you of your right to complain to the Information Commissioner’s Office.
We welcome feedback from you to ensure our records are as accurate and up-to-date as possible. If you think that the information we hold about you is inaccurate or incomplete, please ask us to correct it by contacting us at: [email protected] or by updating your details at any time through the My Account section in your online account. We will process your request as soon as we receive it or within one month of receipt at the latest.
You can ask us to delete your personal data; however, this is not an absolute right. We can refuse to erase personal data which we need to keep (i) to comply with a legal obligation (for instance, we are required by HMRC to keep certain personal data for up to 6 years for VAT reporting purposes); and (ii) in relation to the exercise or defence of any legal claims.
When you ask us to delete your personal data, we assume that you do not want to hear from us again. To ensure that we do not send you any special offers in the future, we will retain just enough of your personal data solely for suppression purposes.
Other than as described above, we will always comply with your request and do so promptly. We would also notify any third parties with whom we have shared your personal data about your request so that they could also comply.
You have the right to move, copy or transfer your personal data from one organisation to another. If you do wish to transfer your personal data, we would be happy to help.
If you ask for a data transfer, we will give you a copy of your personal data in a structured, commonly used and machine-readable form (for instance, in a CSV file format). We can provide the personal data to you directly or, if you request, to another organisation.
Please note that we are not required to adopt processing systems that are compatible with another organisation, so it may be that the recipient organisation cannot automatically use the personal data we provide.
When making a transfer request, it would be helpful if you can identify exactly what personal data you wish us to transfer.
We will comply with your request within one month or, if the request is complex or there are a number of requests from you, within two months.
If you would like us to stop processing your personal data for marketing purposes simply change your marketing preferences from your account or just let us know by contacting us at: [email protected]
Cookies are tiny text files stored on your computer when you visit certain web pages. At smartrevise.online and all its sub domains we use cookies for security purposes and to analyse system usage, health and performance.
To order products and for the operation of our products, you need to have cookies enabled.
Please note that cookies can’t harm your computer. We don’t store personally identifiable information such as credit card details in cookies we create, but we do use encrypted information gathered from them to help improve your experience of the site. For example, they help us to identify and resolve errors.
We’re giving you this information as part of our initiative to comply with the General Data Protection Regulation (GDPR), and to make sure we’re honest and clear about your privacy when using our products and services. We know you’d expect nothing less from us as an education provider.
For more information on cookies, visit the official ICO website at https://ico.org.uk or http://www.whatarecookies.com.
We may update this policy from time to time to take account of any new business activity or to reflect any changes in law or best practice in relation to data protection. We will notify you if we do so. This policy was last updated on 6th January 2022.