1. Scope

    At Wonde, we take privacy very seriously. We’ve updated our privacy policy (Policy) to ensure that we communicate to You, in the clearest way possible, how we treat personal information. We encourage You to read this Policy carefully. It will help You make informed decisions about sharing Your personal information with us. All data subjects whose personal data is collected, in line with the requirements of the GDPR.

  2. Wonde

    Wonde is a provider of online platforms and APIs which are simple, smart, and secure and gives schools, individuals and business owners more control and visibility of their own data and provides additional tools.

    The Service involves the storage of Data about schools, companies or individuals. That Data can include personal information. “Personal information” is information about an identifiable individual, and may include information such as the individual’s name, email address and what school they’re attached to.

    Wonde may collect personal information directly from You when You:

    register to use the Service,
    use the Service,
    have your data in a school’s Management Information System,
    are included in a school integration,
    contact the Wonde support team, and
    visit our Website.

    You can always choose not to provide Your personal information to Wonde, but it may mean that we are unable to provide You with the Service.

  3. Responsibility

    1. The Data Protection Officer (DPO) is responsible for ensuring that this notice is made available to data subjects prior to Wonde Ltd collecting/processing their personal data.

    2. All Employees of Wonde Ltd who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.

  4. Privacy notice

    1. Who are we?

      Wonde are a company that helps schools better manage and securely control their data with third party applications, and allows third party applications to access school data upon agreement of the school and the terms of their agreements.

      Our DPO and data protection representatives can be contacted directly here:

      Telephone: 01638 779 144

      The type of data we collect from you includes:

      Personal Data Type Source
      First name Sign-up page/School MIS
      Last name Sign-up page/School MIS
      Email address Sign-up page/School MIS
    2. The personal data we collect will be used for the following purposes:

      Allowing you to access Wonde
      Allowing you to access software purchased directly or by the school

      Our legal basis for processing for the personal data include ‘consent’ (the individual has given clear consent for you to process their personal data for a specific purpose) and ‘contract’ (the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract).

    3. Consent

      By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified. Consent is required for Wonde Ltd to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used. You may withdraw consent at any time.

    4. Retention period

      Wonde Ltd will process personal data for as long as required by schools, their approved third parties and any direct services provided to individuals. Wonde will only store the personal data for the retention period in line with the requirements of the GDPR.

    5. Your rights as a data subject

      At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights

      Right of access – you have the right to request a copy of the information that we hold about you.
      Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
      Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
      Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
      Right of portability – you have the right to have the data we hold about you transferred to another organisation.
      Right to object – you have the right to object to certain types of processing such as direct marketing.
      Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
      Right to judicial review: in the event that Wonde refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 3.6 below.

      All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.

    6. Complaints

      In the event that you wish to make a complaint about how your personal data is being processed by Wonde Ltd (or third parties as described), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Wonde Ltd’s data protection DPO.

  5. Online privacy statement

    Personal data

    Under the EU’s General Data Protection Regulation (GDPR) personal data is defined as:


    “any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.