Draft — awaiting review by Strasys. The wording may change.
P3 privacy notice
How Strasys Limited uses your personal information when you use P3. This notice is a draft for the P3 trial and is still being reviewed.
Who is responsible
Strasys Limited provides P3 and is responsible for the personal information it holds about you. [To be confirmed in review: Strasys's role for each kind of information, and the contact for privacy questions.]
What we hold and why
Your name and email address, to let you sign in and to know who you are in P3.
The portfolio you build — activities, reflections, development goals, profile and attached files — to provide the service to you.
A record of your use of P3 (sign-ins, pages viewed, administrator actions), to keep P3 secure and to help you if something goes wrong.
[To be confirmed in review: the lawful basis for each of these.]
Who sees it
You. P3 administrators only as described in the data statement: to help you, read-only, with a reason you can see. Strasys's suppliers store it for us (Vercel, Railway, Microsoft and GitHub) and cannot use it for their own purposes. [To be confirmed in review.]
How long we keep it
Your portfolio is kept until you delete it or your access ends. [To be confirmed in review: how long after access ends.] Deleted entries remain in encrypted backups for up to 30 days.
Your rights
You can see and change your own portfolio in P3 at any time, and delete it from your profile page. You have rights under UK data protection law, including to ask for a copy of your information and to complain to the Information Commissioner's Office. [To be confirmed in review: how to make a request.]