Privacy Notice for Studio
1. Who we are
Anna Freud (‘AF’, 'we', 'our', 'us') is a registered mental health charity. Studio is a membership community where mental health professionals can learn, connect and reflect together and AF is the data Controller for this data processing.
This notice informs you how we may use the personal data we collect about users of the Studio ('you'). If you have any questions about the content of this notice you can contact us at:
Named person, email address, Anna Freud, 4-8 Rodney Street, London N1 9JH.
Contact phone number: 020 7794 2313
Our Data Protection Officer is Rachel Hart, [email protected], 020 7794 2313
2. What personal data we collect
We may collect and process the following categories of personal data about you:
Personal Data: e.g. full name
Contact data: e.g. email address
Studio user specific data: e.g.County/Region, primary professional role and organisation name
Usage data: e.g. how you interact with our website, training platform, or services
Special category data: e.g. non mandatory equality and diversity data will be collected anonymously
We are collecting your personal data to enable us to create and manage your Studio account, provide you with access to Studio and its learning features, support your use of the platform, and help us understand who is using Studio so we can improve our content, accessibility and reach. The information you provide will be used to set up your account, provide you with access to Studio, and enable you to participate in Studio community spaces.
Our lawful bases for processing this data are:
Art 6 1(f) Legitimate interests: the processing is necessary for our legitimate interests.
4. How we get information
We use information collected directly from you via the sign-up form.
5. Who we share your data with
We do not routinely share your personal data with other organisations for their own purposes. We use third-party service providers, including Thinkific, to host and operate Studio and process personal data on our behalf. These providers are required to process the data only in accordance with our instructions and the appropriate contractual and data protection requirements that we have in place.
We do not share your data for any other purposes. Generally, we will ask your permission before we share your data, but in some circumstances, we are legally obliged to share information, for example under a court order. Where we do share, we satisfy ourselves that we have a lawful basis on which to share the information and document our decision making.
Where we believe a child or young person is at risk of harm, we may share personal data with statutory agencies — such as the local authority or the police — without your consent, where this is necessary to protect their vital interests or is in the public interest. This is done in line with our Safeguarding Policy. Where possible, we will inform you that a disclosure has been made, unless doing so would itself increase risk to the child or young person.
6. International transfers
Data in Thinkific is held in the US. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as an adequacy regulation covering the destination country, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. Further detail on the safeguards used for a specific transfer is available on request from DPO.
7. How long we retain your data
We will retain your personal information for as long as your Studio account remains active and for as long as it is necessary to provide the service. When your account is closed, personal information that is no longer required will be deleted or anonymised as soon as reasonably practicable. We may retain certain information for longer where this is necessary to meet legal, financial, regulatory or other legitimate requirements.
8. Your data rights
Under data protection law, you have rights we want to make you aware of. The rights available to you depend on our reason for processing your information and may only apply in certain circumstances. You can check the Information Commissioner's website (ico.org.uk/your-data-matters) for more detail or contact the DPO.
Your right to be informed — this notice informs you what data we collect and how we use it.
Your right of access — You have the right to ask us for a copy of your personal information.
Your right to rectification — You have the right to ask us to correct information which you think is inaccurate or incomplete.
Your right to erasure — This is known as the 'right to be forgotten' and you have the right to ask us to erase your personal information in certain circumstances, such as where it is no longer required.
Your right to restriction of processing — You have the right to ask us to limit the processing of your information in certain circumstances.
Your right to object to processing — You have the right to request we stop processing some or all of your data.
Your right to data portability — This only applies to information you have given us and where we rely upon your consent to process the data.
Rights around automated decision making and profiling
You are not required to pay a charge for exercising your rights. We generally have one month within which to respond to your request. Please contact us at [email protected] if you wish to make a request with regard to any of your rights.
10. Making a complaint
If you feel we may not be handling your data appropriately or if you have any queries or concerns about this you can contact us at [email protected]
You can also, at any time, make a complaint about our processing of your data to the Information Commissioner's Office (ico.org.uk/global/contact-us). You can also contact the ICO by phone on 0303 123 1113.
12. Changes to this notice
We may update this notice from time to time to reflect changes in our processing activities or legal requirements. The current version will always be available at Privacy Policy | Anna Freud, and we will let you know of any significant changes where appropriate.