This notice sets out how we look after your
personal data if you are a:
We may update this notice from time to time, and you can find our latest notice on our website or
by asking us for a copy.
Wonde Limited is a company incorporated in England and Wales, with company number 08645640
(referred to as “we” “us” “our” and “Wonde” in this notice).
Wonde has several different trading names, including MyLogin. This privacy
notice applies to personal data we collect through all of our different businesses, unless we
provide a separate privacy notice for that business.Our address is Furlong House, 2
Kings Court, Newmarket, Suffolk, England, CB8 7SG.We have appointed a Data Protection
Officer who is responsible for overseeing questions in relation to this privacy notice. If you
have any questions about this privacy notice, including any requests to exercise your legal
rights, please contact the Data Protection Officer as follows:Address: Furlong House, 2
Kings Court, Newmarket, Suffolk, England, CB8 7SGTelephone Number: +44 1638 779
144Email address: firstname.lastname@example.org
We provide applications and platforms to help schools better manage and securely control
their data. Our Wonde platform integrates with a school’s management information systems, to
allow schools to seamlessly transfer data to and from third party application providers.We
also provide applications to schools, such as our MyLogin application.In most
cases, Wonde acts as a data processor. This means we assist the school and the
application provided to transfer your personal data, and that of pupils, to and from each other.
In these cases, the school will be the data controller and the person responsible for deciding
how and when your personal data is collected and used, whilst we follow the instructions of the
school. The school, and, in some circumstances, the third party application provider, will be a
privacy notice, setting out how the school uses your personal data.Where we act as a
data processor, we have legally binding agreements in place with the school
(and application provider) which restrict how we process your personal data, in accordance with
data protection laws. This includes personal data processed through the MyLogin
application.When you log in to our platform, visit our website, or contact Wonde
support, we will receive certain data directly from you, such as your name and login details.
For this limited data only, we will be the person responsible for deciding how and when your
data is used, and we will be the data controller.We are a data
controller when we collect personal information from suppliers and other third
parties who interact with us.
The purpose of the remainder of this privacy notice is to set out how we use your personal
data when we act as a data controller.This notice does not apply when
we act as a data processor. In those cases, our private agreement with the
understand what personal data is collected and how it is used and shared.
Depending on your relationship with us (for instance, whether you are a parent or a
professional contact), we collect, use, store and transfer some or all of the following data:
You can withhold your personal data from us, but we may not be able to provide our services to
you if you do so.We may collect your personal data from different sources:
We will only use your personal data when the law allows us to.We will only use your
personal data for the purposes for which we collected it, unless we reasonably consider that we
need to use it for another reason and that reason is compatible with the original
purpose.When we are acting as a data controller, we will use your personal data for the
purposes set out in the table below.The law sets out a number of different reasons for
which we can collect and use your data. The legal grounds on which we collect and use your data
are also set out in the table below.
We may aggregate and use non-personally identifiable data we have collected from you and
others. This data will in no way identify you or any other individual.We may use this
aggregated non-personally identifiable data to:
You can set your browser to refuse all or some browser cookies, or to alert you when websites
website may become inaccessible or not function properly. For more information about the cookies
we use, please see cookie notice.
We may need to share your personal data when using your personal data as set out in the table
above. We may share your personal data with the following third parties:
MyLogin's use and transfer to any other app of information received from Google APIs will adhere
API Services User Data Policy, including the Limited Use requirements.
We may transfer your personal data to third parties providing services to us who are based
outside of the UK. This includes parties providing IT administration services and hosting
services, and parties providing assistance with managing our marketing databases.Whenever
we transfer your personal data outside of the UK, we ensure a similar degree of protection is
afforded to it by ensuring at least one of the following safeguards is implemented:
We will only retain your personal data for as long as necessary to fulfil the purposes we
collected it for, including for the purposes of satisfying any legal, accounting, or reporting
requirements.To determine the appropriate retention period for personal data, we
consider the amount, nature, and sensitivity of the personal data, the potential risk of harm
from unauthorised use or disclosure of your personal data, the purposes for which we process
your personal data and whether we can achieve those purposes through other means, and the
applicable legal requirements.For more details of our specific retention periods, please
contact our Data Protection Officer.
Under certain circumstances, you have rights under data protection laws in relation to your
personal data. These rights are set out below. If you wish to exercise any of the rights set out
below, please contact our Data Protection Officer.You will not have to pay a fee to
access your personal data (or to exercise any of the other rights). However, we may charge a
reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we
may refuse to comply with your request in these circumstances.Your rights are as
All of the above requests will be forwarded on should there be a third party involved in the
processing of your personal data.
You have the right to make a complaint at any time to the Information Commissioner’s
Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We
would, however, appreciate the chance to deal with your concerns before you approach the ICO so
please contact us in the first instance.