Privacy Notice

Section 01

Who we are

Youth Road Safety Education is a company limited by guarantee registered in England and Wales. For the personal information covered by this Privacy Notice, YRSE is generally the data controller.

• Registered company name: Youth Road Safety Education
• Company number: 17327565
• Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

For privacy questions, data protection requests or complaints, email admin@yrse.org.

Section 02

What this Privacy Notice covers

This Notice applies to personal information we process in connection with:

• the public YRSE Website;
• enquiries and requests made to YRSE;
• communications with schools, academy trusts, councils, road safety organisations, partners, funding partners, media and other organisations;
• professional and stakeholder relationships;
• relevant professional outreach and marketing;
• website analytics, visitor insights and lead assessment;
• the administration, operation and security of YRSE; and
• information received through the Website or our communications where a safeguarding concern arises.

Section 03

Personal information we may collect

Depending on how you interact with YRSE, we may collect:

• your name, email address and telephone number;
• your school, academy trust, council, business or other organisation;
• your job title, role or professional responsibilities;
• information contained in an enquiry or other communication;
• correspondence, contact, meeting and follow-up information;
• programme, partnership or professional interests;
• communication preferences; and
• other information you choose to provide.

Where website analytics or visitor-insight technologies operate, we may also collect information about pages viewed, visit dates and times, referring sources, campaign or referral information, browser and device details, interactions with content, clicks, scrolling, visitor journeys, returning visits and cookie or similar identifiers.

We only seek personal information that is reasonably relevant to the purpose for which it is collected.

Section 04

Information obtained from other sources

YRSE may identify schools, organisations and relevant professional contacts who may reasonably have an interest in our programmes, research, partnerships or activities.

We may obtain professional information from school, academy trust, council and organisation websites, publicly available staff directories and professional profiles, government and education sources, conferences and professional events, referrals, introductions, organisations we work with and other legitimate public sources.

This may include a person's name, professional contact details, organisation, role and relevant professional responsibilities.

Section 05

How we use personal information

Responding to enquiries

We may use personal information to respond to requests, provide information, discuss YRSE programmes or activities, consider programme, funding or partnership opportunities, arrange meetings and take steps requested before entering into an agreement.

We generally rely on our legitimate interests in responding to and managing genuine enquiries or, where applicable, processing necessary to take steps at your request before entering into a contract.

Managing professional relationships

We may maintain information about our relationships with schools, academy trusts, councils, road safety organisations, partners, funding partners, media and other stakeholders. This may include correspondence history, areas of interest, previous enquiries, relationship or opportunity status and relevant follow-up information.

We generally rely on our legitimate interests in operating YRSE effectively, maintaining appropriate professional relationships and developing our programmes and partnerships.

Professional outreach and marketing

YRSE may use relevant professional contact information to communicate with schools, academy trusts, councils, public bodies, organisations and professional contacts who may reasonably have an interest in our programmes, road safety education, research and evaluation, partnership opportunities or relevant YRSE news.

Where appropriate, we rely on our legitimate interests in raising awareness of YRSE's work, developing relevant professional relationships, increasing access to road safety education and identifying suitable programme and partnership opportunities. We only send marketing communications where permitted by law, identify YRSE and provide an appropriate means of opting out.

Website analytics and improvement

We may use website analytics and related technologies to understand how visitors find and use the Website, visitor journeys and engagement, the effectiveness of content and campaigns, and how our Website and communications can be improved.

Where consent is required for a technology or purpose, it will only operate after the required consent has been obtained. Where the law permits processing without consent, we may rely on another appropriate lawful basis, including our legitimate interests in understanding and improving the effectiveness, security and performance of the Website.

Visitor insights, profiling and lead assessment

Where lawful, YRSE may analyse Website activity alongside relevant professional relationship information to understand apparent interest in YRSE and its programmes, assess engagement, identify areas of professional interest, prioritise enquiries and potential professional leads, and make follow-up communications more relevant.

This may include visitor or lead scoring, segmentation or similar profiling. Where the underlying Website technology requires consent, this processing only occurs after consent has been obtained. We generally rely on our legitimate interests for the subsequent assessment and management of appropriate professional leads where those interests are not overridden by the person's rights and interests.

YRSE does not use this profiling to make solely automated decisions about individuals that produce legal or similarly significant effects.

Operating and protecting YRSE

We may process personal information to operate and administer YRSE, maintain the security and integrity of our Website and systems, detect or investigate misuse, troubleshoot technical problems, maintain appropriate business records, comply with legal requirements and establish, exercise or defend legal rights.

Depending on the circumstances, we rely on our legitimate interests, legal obligations or another lawful basis available under applicable law.

Safeguarding

The public YRSE Website is not intended as a safeguarding reporting service. If information we receive indicates that a child or another person may be at risk of harm, we may use and share relevant information where necessary and lawful to protect that person or meet our safeguarding or legal responsibilities.

Where sensitive personal information is involved, we only process it where the additional legal requirements applying to that information are satisfied.

Section 06

Sensitive personal information

Our ordinary Website forms are not designed to collect sensitive information such as information about health, ethnicity, beliefs, sexual orientation or criminal offences. Please do not provide this type of information through a general enquiry unless there is a genuine reason for doing so.

If we receive sensitive information unexpectedly, including in connection with a safeguarding concern, we use it only where appropriate and permitted by law.

Section 07

Service providers and other recipients

YRSE uses Zoho services to operate Website forms, manage enquiries and professional relationships and, where consent has been provided, support website analytics and visitor insights through SalesIQ and PageSense.

We may also use appropriately selected service providers for hosting, email, analytics, security, Website administration and IT support.

Where appropriate, we may share personal information with:

• professional advisers, including lawyers, accountants and insurers;
• regulators and government bodies;
• courts or law enforcement;
• safeguarding organisations or emergency services;
• organisations involved in protecting or enforcing YRSE's legal rights; and
• other organisations where disclosure is required or permitted by law.

Service providers acting on our behalf are given access to personal information only as appropriate for the services they provide and are subject to applicable contractual and legal requirements. We do not sell personal information.

Section 08

International processing

Some service providers may process personal information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, YRSE uses an appropriate lawful transfer arrangement.

The safeguards available depend on the recipient and destination and may include a destination recognised as providing an adequate level of protection or appropriate contractual safeguards. You can contact us for further information about safeguards applying to a particular transfer of your personal information.

Section 09

How long we keep personal information

We keep personal information for no longer than is reasonably necessary for the purposes for which it is held, subject to applicable legal and regulatory requirements.

The period depends on the nature of the information, why it was collected, whether an enquiry or professional relationship remains active, whether a programme, partnership or contractual relationship develops, record-keeping needs, legal and insurance requirements, applicable limitation periods, any privacy or safeguarding matter, and whether limited information is needed to respect an objection or unsubscribe request.

Information that is no longer reasonably required will be deleted or anonymised where appropriate.

Section 10

Cookies and similar technologies

The YRSE Website uses cookies and similar technologies for Website operation, remembering privacy choices and, where permission is given, analytics and visitor insights.

Zoho SalesIQ, Zoho PageSense and Google Analytics do not load until Analytics & visitor insights consent has been given. Where consent is legally required for a technology or purpose, that technology will not operate until consent has been obtained.

Our Cookie Policy (opens in a new tab) identifies the technologies active on the Website, their purposes and the available choices.

Section 11

Children and the public Website

The public YRSE Website is designed for schools, education professionals, councils, road safety organisations, partners, parents, funding partners, media and other stakeholders. It is not designed for or directed at students, and students are not required or directed to use it to participate in our programmes.

A young person may nevertheless independently visit the Website or contact YRSE. Where we process their personal information through the public Website, this Privacy Notice applies.

General Website forms must not be used to submit student account information, quiz or survey responses or other programme records.

Section 12

Security

YRSE uses appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, destruction, alteration, disclosure or access. Access to personal information is limited according to legitimate operational requirements.

No internet service or information system can eliminate every security risk, and nothing in this Privacy Notice provides an absolute guarantee of security.

Section 13

Your rights

Depending on the circumstances and the processing involved, you may have the right to:

• request access to personal information held about you;
• ask us to correct inaccurate or incomplete information;
• request deletion of your information in certain circumstances;
• ask us to restrict certain processing;
• object to certain processing;
• receive certain information in a portable form where the right to data portability applies; and
• withdraw consent at any time where we rely on consent.

These rights are subject to the conditions and exceptions provided by law. Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn. We may need to verify your identity before responding to a request.

Your right to object to direct marketing

You have the right to object at any time to our use of your personal information for direct marketing, including profiling related to direct marketing. If you object, we will stop using your personal information for that purpose.

You can also use the unsubscribe or opt-out mechanism in applicable marketing communications. Where we rely on legitimate interests for purposes other than direct marketing, you may also have the right to object. Whether processing must stop will depend on the circumstances and applicable law.

Section 14

Providing personal information

You are not generally required to provide personal information to browse the public Website.

If you choose not to provide information requested in connection with an enquiry or another service, we may be unable to respond fully, provide requested information or take the requested action. Where particular information is legally or contractually required, we will make this clear where appropriate.

Section 15

Data protection complaints

If you have a concern about how YRSE has handled your personal information, please contact us using the details below so that we can consider it.

You also have the right to make a complaint to the Information Commissioner's Office, the UK's data protection regulator. Further information is available at ico.org.uk (opens in a new tab).

Section 16

Changes to this Privacy Notice

We may update this Privacy Notice when our activities, Website, technologies, service providers or legal requirements change.

Where we intend to use personal information already collected for a materially different purpose and the law requires further information to be provided, we will provide that information before beginning the new processing.

The current version of this Notice and its last-updated date will be published on this page.

Section 17

Contact us

For privacy questions, data protection requests or complaints, contact: