If you are a participant in one of our activities or sign up to our mailing list, we, Mangorolla CIC, will collect information from you to help us run our activities and send you updates.
Data Controller: Mangorolla CIC, registered in England & Wales company number 10384826.
Our ICO reference number is ZA243399.1. What we ask for, and why
Students
We’ll ask you a few questions on your profile page. You can answer these if you want to and edit them at any time.
Your account is linked to your teacher and school, so we can identify you if we need to. Sometimes we will be required to share your name and email with your teacher. This will happen if you break any of the House Rules or if we have a safeguarding concern.
This is what we ask all students:
Display Name Your display name is shown when you ask questions, take part in live chats and leave comments. Please do not use your full name. Full Name To identify you to your teacher in the event of a safeguarding or behaviour concern. Email address To tell you when your question has been answered, about activity updates (including evictions/winners), and follow up surveys for you to tell us what you thought of taking part. If you are 13 or above To identify whether you are 13 or above and able to consent to this privacy policy. If you are under 13, your teacher will consent for you. Also used anonymously for evaluation. Teachers
We ask for your name, email and information about your school and subject responsibilities when you register your interest in our activities. This is so we can send you information about our activities that are relevant for you. We may also send you information about our activities that might be relevant for your colleagues, but only with your consent.
If you are taking part in one of our projects, you will have a profile which you can edit at any time.
If you have signed up to our Debate Kit list, we will email you information about new Debate Kits we release. If you request one we will email to ask you if you received it, if you used it and what you thought. We might also send you information about our other projects which are relevant to you. You can change your preferences using the ‘update your preferences’ link at the bottom of Debate Kit emails.
Healthcare workers
We ask for your name, email and information about where you work when you apply to take part in our projects. We use this to ensure you can participate in our projects, and to send you information about projects relevant to you. With your consent, we may also use this information to contact your employer to check your work status and for them to publicise your involvement, if you are given a place in an event. If requested by funders, we will send them just your name and work information to help guide the selection for the events.
We also ask for some optional data on funding status and membership of organisations to assess eligibility for some funded activities. You can tell us your education history, gender and ethnicity to help us present a diverse range of healthcare workers to students. If you tell us your school name we may use that to contact your school to try to get them to take part.
If you are taking part in one of our projects, you will fill in a profile on this site about yourself and your work which is visible to the public. You can edit this at any time.
Public
If you access the site through a Social Media login — which means your account is linked to either your Facebook, Twitter or Google account — it will automatically send emails to the address connected to that account. You can remove this at any time by editing your profile, and removing the email address.
Keep Me Updated mailing list
If you sign up to our Keep Me Updated mailing list we will ask for your name and email. This is so we can send you information about our projects, including upcoming event dates, project news and blog posts. You can unsubscribe from the list by clicking the unsubscribe link at the bottom of any email.
Debate Kit mailing list
If you sign up to our Debate Kit mailing list we will ask for your name, email and school address. This is so we can email you when we have a new kit out to ask if you would like one, and post it out to you. If we send you a kit we will also ask you if you received and used it. You can unsubscribe from the list by clicking the unsubscribe link at the bottom of any email.
2. Our legal basis for collecting your information, and how you can remove it
Participants
If you apply to participate in one of our projects (a student, teacher or healthcare worker), we collect information from you as part of our legitimate business interests. If we didn’t have this information, we wouldn’t be able to run our activities.
If you would like us to remove any of your information you can email your request to privacy@mangorol.la with your name, email you used on our site and what project and zone you were involved in. We will remove your data within 30 days.
Mailing Lists
If you have signed up to one of our mailing lists (Keep Me Updated, Debate Kits or Teacher Registration list) we will collect information from you with your consent. You can unsubscribe from the list by clicking the unsubscribe link at the bottom of any email.
3. Who we share your information with
Students
If you are a student taking part in our activities, the data you provide us when registering or on your profile page is mostly stored on our site. We use a US based service, Postmark, to handle outgoing emails transactions. They store your email address and metadata for 45 days from sending. We do NOT share your details with anyone else.
Teachers and healthcare workers
We may provide your data to third party suppliers in order to run our activities. All suppliers within the European Economic Area (EEA) are GDPR compliant registered data processors. We may use suppliers outside of the EEA. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. When transferring your information outside of the EEA, we ensure that appropriate security measures are taken. For example, if using a service in the US it is compliant with EU law with appropriate Standard Contractual Clauses to ensure compliance with GDPR.
The third-party processors we use fall into a number of categories which are listed below:
- IT service providers – Software providers we use to help us to run our activities. AirTable, Basecamp
- Email systems (SendinBlue, SendGrid, Google Workspace and Hubspot) – To send updates on our activities, and to communicate with participants during an event
- Funders (healthcare workers only) – We will provide some information to our funders for research and evaluation purposes. This will include your name, place of work, and level of activity in the events.
- Employer (healthcare workers only) – Where you have agreed to share your information with your employer or a professional institution, we may share information about your activity in the event.
Mailing lists
If you have signed up to one of our mailing lists (Keep Me Updated, Debate Kits or Teacher Registration list), we use email systems (SendinBlue, SendGrid and Hubspot) to manage email communication with you.
We do NOT share your details with anyone else without you giving permission that your information can be used in that way. No companies, no sponsors.
4. How long we keep your information for
Students
If you are a student who has taken part in one of our activities from, your personal information will be removed after 12 months of inactivity. That means we’ll delete your name and email address if you’ve given them to us. We will then make any questions, comments or evaluation surveys you have sent on the site anonymous.
Teachers and healthcare workers
If you are participating in one of our activities as a teacher or healthcare worker, we will keep information about you and your participation for as long as the project continues to run so we have a record of what happened in each event. You can request for us to remove your information at any point.
Mailing lists
If you are signed up to one of our mailing lists, we will keep your information until you unsubscribe from the list, which you can do so with a link at the end of every email.
5. Accessing your information
You have a right to access all of your information. To request access, email privacy@mangorol.la with your name, email you used on our site and what project and zone you were involved in. We will then provide everything in your preferred format within 30 days.
If you are a participant in one of our events, you can view and edit your profile information at any time by logging in and clicking ‘Edit my profile’.
6. Site data
During the event our computers put a session cookie on your computer. If you block this cookie the site can’t work, so please don’t do that. A session cookie is a small file that identifies who you are. It allows you to vote once, to ask questions and take part in live chats showing the screen name you choose (we will never put your real name on the site). After you log off the cookie is removed from your computer.
As you use the site we do record some information that could be traced to you. We record how you vote so we can check the evictions are done fairly if necessary. This information NEVER gets released though, except on your profile page where logged in users in your zone will be able to see the healthcare worker you most recently voted for.
We also record what questions you ask and what you say in Live Chat. We do this so the healthcare workers know who they are talking to – at least they know your username. We also record when you log in and where you log in from (your IP address). We log the IP address so that if someone registers on the site claiming to be someone else then we can see where they are logging on from. It also helps us track any technical issues.
That sounds like a lot but it doesn’t get given away and nobody will be able to trace it to you.
7. Cookies
Cookie Duration Type Purpose Intrusiveness _pk_id 13 months matomo It is used to store some details about the user, such as their unique visitor ID. Users can be automatically tracked across subdomains, without extra configuration. _pk_ref 6 months matomo It is used to store information that is needed to recognise users. The place the web page was visited from. _pk_testcookie per session matomo It is used to check if the server used by the visitor allows cookies. It is created and directly deleted. _pk_ses
_pk_cvar
_pk_hsr30 minutes matomo Short-lived cookies that are used to store data for the visit temporarily. Cookies expire and are removed from the server PHPSESSID per session imamedic.ddev.site It is a cookie generated in each session by the server. It is used to establish the user’s session and to pass data about the state via a temporary cookie. borlabs.cookie 1 year imamedic.ddev.site You cannot continue on the server without accepting this cookie. If the terms of this cookie are not accepted, you cannot enter the page. wordpress_logged_in per session imamedic.ddev.site It is used to indicate when the user has logged in and what user it is. This cookie is kept in the web interface, as well as when one logs in. mtm_cookie_consent
or
mtm_consent
or mtm_consent_removed30 years matomo Whether or not the user accepts the consent Created with an expiration date of 30 years to remember if consent was given or not.
