Privacy Notice last updated on 31-05-2024.
Updates to vendor and international transfers sections.
Satchel (‘Satchel’, ‘we’, ‘us’) takes the protection of privacy very seriously. This notice describes how we collect, use, and handle your personal data. It also describes your data protection rights, including a right to object to some of the processing which Satchel carries out. More information about your rights, and how to exercise them, is set out in the ‘Your rights?’ section below.
This notice applies to the information Satchel collect from parents, teachers and students when they use our Satchel Pulse tool. It also covers personal information collected on the website https://www.satchelpulse.com/, and Satchel apps in the US are run by Satchel.
Your school will be the data controller for the personal data which is hosted in Satchel Pulse. For more information on how this personal data is processed, please speak to your school or refer to their privacy notice.
We are Satchel, our flagship product, Show My Homework, was launched in 2011 by former assistant head teacher, Naimish Gohil, who had a vision to transform the way homework and technology was approached in schools. Our software is now used in over 1 in 3 secondary schools in the UK and in 23 countries across the world, making a difference to the lives of millions of students and parents.
The website https://www.satchelpulse.com/, and Satchel apps in the UK are run by Satchel.
We collect and process the following information:
Sometimes, we receive information about you from third parties. This includes information from your school, but also in the case of teachers or other school staff, information from publicly available sources such as LinkedIn and in some cases obtaining information (such as email contact lists) from data suppliers. In particular we obtain information for students, teachers or other school staff through SIS.
We process this data for the following purposes:
To fulfil a contract, or take steps linked to a contract including:
As required by Satchel to conduct our business and pursue our legitimate interests, in particular:
Where you give us consent:
In accordance with the Student Privacy Pledge (‘Pledge’) we do not collect, maintain, use, or share student personal information beyond that needed for authorized educational/school purposes, or as authorized by the parent/student.
For purposes which are required by law:
Vendors and service providers. We will share your personal information with third party service providers who support our business, who will process it on behalf of Satchel for the purposes identified above. Such third parties include providers of hosting services and technical infrastructure CRM services, customer support services, and marketing services. Some of our key service providers are listed below:
Vendor | Purpose |
Hubspot / based in the United States | Marketing automation / company updates / product information |
Odoo / based in Belgium | Marketing automation / company updates / product information |
EmailOctopus / based in England | Marketing automation / company updates / product information |
Amazon Web Services (AWS) / based in Ireland | Product Database (including personal data from school MIS) |
Salesforce / based in Ireland | Key school contact database / support ticketing system (including user contact information) / product information / marketing database |
Natterbox / United Kingdom & EU | Call recording software for training and quality purposes |
Stripe / Ireland | Online payment provider |
Zapier / United States | Marketing automation |
Intercom / United States | Customer engagement and support tool |
Get Accept / United States | Customer quotes, contracts and SLAs tool |
Legal reasons. We may be required to share personal data with third parties when (i) required by law (ii) requested by a regulator and (iii) necessary for fraud and data error investigations.
Group companies. We may share your information with our group of companies for the purposes of business administration, maintaining security and regulatory compliance, providing support services to end users (including IT support, where relevant), marketing and analytics.
Your school. When you access or use our services in the course of working for your school, we may share your information with such organisation in certain circumstances.
Business transfers. In the event that Satchel undergoes any reorganisation, restructuring, merger, sale, or other transfer of assets your information will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to any new owners of the business.
In accordance with the Pledge we will request that third parties and companies operate in a manner consistent with Pledge principles or allow users a choice for information to not be disclosed to that specific entity.
In connection with the purposes identified above, your personal information may be transferred outside the United States including to the UK and the European Economic Area (‘EEA’).
For data which is hosted in Satchel Pulse: As noted above, Satchel is not a Data Controller for personal data hosted in Satchel Pulse. Therefore as a Data Processor, we delete this data on the instruction of your school.
Satchel will, pursuant to the school instructions, process and store personal data for students, parents, teachers and school staff members for the duration of the schools license with Satchel. If you leave the school during an active license with your school we will delete/anonymise your personal data within 28 days of your account being deleted by your school.
If you are a parent of children at two different schools which use Satchel, if one school requests that Satchel delete its data your details will still be held by Satchel for the second school.
For data which is listed in section 3 above:
For non-Satchel users (such as prospects and business contacts) we will process and store personal data while we are in contact with you with relevant information on our services. If we have not contacted you for a period of 1 year your data will then be removed from our system automatically.
If you have opted out to your data being processed we will delete your data within 28 days of your opt out being received. Sometimes business and legal requirements oblige us to retain certain information, for specific purposes, for an extended period of time. Reasons we might retain some information for longer periods of time include security, fraud prevention, financial record-keeping, complying with legal or regulatory requirements.
Where required by applicable law or regulation, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this information to another controller.
In addition, you can object to the processing of your personal information in some circumstances (in particular, where we don’t have to process the information to meet a contractual or other legal requirement, or where we are using the information for direct marketing). These rights may be limited, for example if fulfilling your request would reveal personal information about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights - or get a copy of our legitimate interest balancing tests - you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an information protection authority where you live, work or where you believe a breach may have occurred.
For the provision of information marked as mandatory when you register to use Satchel Pulse, if such information is not provided, then you will not be able to use the service. All other provision of your information is optional. If you do not provide such information, our provision of certain services to you may be detracted from.
Our Data Protection Officer and data protection representatives can be contacted directly here:
By email: | DPO@teamsatchel.com |
By Mail: | Data Protection Officer, 111 8th Ave, Fl13, New York, NY 10011, United States of America |