Privacy Policy

This privacy policy sets out how PrintLab International Ltd uses and protects any information that you give PrintLab International Ltd when you use the following websites:

https://weareprintlab.com/
http://makeablechallenge.com/

PrintLab International Ltd is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, it will only be used in accordance with this privacy statement. PrintLab International Ltd may update this policy from time to time, so you should check this page periodically to ensure you are happy with any changes. This policy is effective from 18.05.2018 and was last updated on 01.10.2024.

What we collect

We may collect the following information from users over the age of 16 when they sign up on our website, or participate in our certification programs (including quizzes and Open Badges):

Name and job title
Contact information, including email address
Demographic information such as postcode and location
Other information relevant to customer surveys and/or offers
Evidence of student work, such as design portfolios, for certification purposes

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, including:

Internal record keeping
Improving our products and services
Issuing certificates for quiz completion and Open Badge certification
Periodically sending promotional emails about new products, special offers, or other information we think you may find interesting, using the email address you provide (for users over 16)
Contacting you for market research purposes

Children’s Privacy Policy

We do not knowingly collect personal data from children under the age of 16 without appropriate consent, in compliance with the U.S. Children’s Online Privacy Protection Act (COPPA) and GDPR. For students under 16, the following policies apply:

Learning Materials Access: Students under 16 can access PrintLab learning materials via a share link provided by their teacher, without needing to enter personal data.
Quizzes and Certificates: For quizzes where certificates are issued upon passing, students may be required to provide their full name. If parental consent is not provided (via the downloadable form on our platform), or if teachers do not already have the necessary permissions, teachers are advised to instruct students to use a nickname, in accordance with our terms of service. No other personal data is required for quiz participation.
Open Badge Certification: To issue Open Badges, we must collect students’ full names, email addresses, and evidence of their work (such as design portfolios). Parental consent is required for children under 16 to participate in this program, and a downloadable form is available on the certification platform. In certain educational contexts, teachers may provide consent, but they must adhere to local governing laws as outlined in our terms of service.
Consent for Use of Media: If we wish to share students’ work or media (e.g., images or videos) online, we will always seek parental and individual consent beforehand.

We honour requests to delete any content we post online unless required by law to retain it.

Security

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. These include:

Data Encryption: We use encryption protocols to protect sensitive data both in transit and at rest.
Access Control: We limit access to personal information to authorised personnel only, and access is based on the principle of least privilege.
Regular Security Audits: We conduct periodic security assessments and audits to identify and address potential vulnerabilities in our systems.
User Responsibilities: We recommend that users also take steps to safeguard their personal information, such as using strong passwords and logging out of their accounts when using shared devices.

Incident Response:

In the event of a cybersecurity breach, PrintLab International Ltd will act swiftly to minimise the impact. Key steps include:

Containment: Isolating affected systems to prevent further damage.
Investigation: Identifying the cause and scope of the breach to assess compromised data.
Notification: Informing affected individuals and authorities as required by law.
Post-Incident Review: Strengthening security measures based on findings to prevent future breaches.
Legal Compliance: Cooperating with regulatory bodies and addressing any legal obligations.

While we strive to protect your personal data, please note that no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to continually improving our cybersecurity practices to protect your information.

How we use cookies

A cookie is a small file that asks permission to be placed on your computer’s hard drive. Once you agree, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual, tailoring operations to your needs, likes, and dislikes.

We use traffic log cookies to identify which pages are being used, helping us analyse data and improve our website. We only use this information for statistical analysis, after which the data is removed from the system.

Cookies help us provide a better website by monitoring which pages are useful to you. You can choose to accept or decline cookies. Most browsers automatically accept cookies, but you can usually modify your settings to decline cookies. Declining cookies may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, we do not control those websites and cannot be responsible for the protection and privacy of any information you provide there. Such sites are not governed by this privacy statement, so please review their privacy policies.

Controlling your personal information

You may choose to restrict the collection or use of your personal information by emailing us at hello@weareprintlab.com. We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.
You may request details of the personal information we hold about you under the Data Protection Act 1998. If you would like a copy of the information, please email hello@weareprintlab.com. If you believe any information we hold on you is incorrect, please email us, and we will promptly correct it.

GDPR Compliance Statement

The EU General Data Protection Regulation (GDPR) is a privacy and data protection regulation in the European Union effective from May 25 2018. The GDPR imposes new obligations on organisations that control or process personal data and introduces new rights and protections for EU citizens.

PrintLab International Ltd are committed to ensuring that your privacy is protected and we strictly adhere to the provisions of all relevant Data Protection Legislation, including GDPR, ensuring all personal data is handled in line with the principles outlined in the regulation.

The below statements reinforce and add to the privacy policy of PrintLab International Ltd.

Information Audit – We will regularly carry out a company-wide information audit to identify and assess what personal information we hold, where it comes from, how and why it is processed and if and to whom it is disclosed.

Policies and procedures – Privacy policies and terms of use statements have been revised to meet GDPR requirements and other data protection standards.

Marketing – We have revised the wording and processes for direct marketing, including clear opt-in mechanisms for marketing subscriptions, a clear notice and method for opting out and by providing unsubscribe features on all subsequent marketing materials.

Employee Training – Current employees have been briefed on GDPR regulations and all future employees will receive the same briefing.

Right to be forgotten – We recognise the right to erasure, also known as the right to be forgotten, laid down in the GDPR.

Children – The GDPR provides for special protection for children’s personal data and we will comply with the requirement to obtain parental or guardian consent for any data processing activity involving anyone under the age of 16.