Privacy notice
Draft for legal review. Items in [square brackets] need confirming before launch.
This notice explains how we handle personal information through the ildana.app website. It does not cover the Ildána platform itself: when a school uses Ildána, the school is the data controller for its pupils' and staff information, and we process it on the school's instructions under a separate data processing agreement.
Who we are
The website is operated by BFC Travel Management [full registered company name, registration number and registered address]. You can contact us about anything in this notice at [email protected].
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Your name, role, school or group and work email, when you ask about a pilot or write to us | To reply, and to discuss a pilot or demonstration with you | Legitimate interests in responding to enquiries about our service |
| Technical information such as your IP address and browser type, processed by our hosting provider when you visit | To deliver the website securely and protect it from abuse | Legitimate interests in running a secure website |
Please don't send us pupils' names or any information about children through the website or by email.
Cookies
This website doesn't use analytics, advertising or tracking cookies. Our hosting provider may set a strictly necessary security cookie to protect the site from automated attacks. If we ever add analytics, we will ask for your consent first and update this notice.
Who we share it with
- Cloudflare, Inc., which hosts the website and handles email to ildana.app addresses.
- Our email provider, which stores the messages you send us [name the provider].
We don't sell your information or use it for unrelated marketing. Where a provider processes data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
How long we keep it
We keep enquiry correspondence for up to 24 months after our last contact with you, unless your school or group becomes a customer, in which case our agreement with them applies.
Your rights
You can ask to see, correct or delete the information we hold about you, ask us to restrict how we use it, or object to our use of it. Email [email protected] and we will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority where you live. [Confirm whether the UAE PDPL or another regime also applies to BFC as the operating entity.]
Changes
If we change this notice, we will update the date at the top of this page.