Part 2: Full Privacy Notice

South West Grid for Learning Trust Ltd (wey we dey call “SWGfL”, “SWG”, “the Grid”, “Our”, “We” and “Us”) na dem dey run StopNCII.org (di website) and we serious about protecting and respecting your privacy.

Dis Privacy Notice (together with our terms and conditions (wey dey for swgfl.org.uk/terms) and any other document wey we mention inside am) explain di basis on which any personal data wey we collect from you, or wey you give to us, go be processed by us. Abeg read wetin dey below well-well so you go understand how we see your personal data and how we go handle am.

SWGfL na registered charity and company limited by guarantee. We fit disclose your personal data to any member of our group, wey include any subsidiaries or holding companies as dem define am for section 1159 of the UK Companies Act 2006, if such subsidiaries or holding companies dey exist.

SWGfL Information

South West Grid for Learning Trust Ltd: Belvedere House, Woodwater Park, Pynes Hill, Exeter, EX2 5WS. A charitable trust company registered in England and Wales. Company Number: 5589479, Charity Number: (England and Wales) 1120354 (Scotland) SC051351, VAT Number: GB 880 861 888.

General

• Dis Privacy Notice explain how we use and protect your personal data for when you dey use www.StopNCII.org. When you enter di website, we only collect small personal data, and we no go take more than wetin we need.
• For di purpose of UK data protection legislation, na we be di Controller for how personal data dey processed, for situations where you don:
  • access our website; and/or
  • use our services through our website;

How We Dey Use Your Personal Data

Wetin kind personal data we dey process:

When you dey use our website, we go process your personal data wey include:

• your email address (if you give am to us);
• whether you don tell us say you dey under or over 18 years old; and
• your IP Address
• information about how you dey move around our website

How we dey use your personal data:

We go use dis information:

• to allow you create secure password for your use, and to prevent other people from accessing your data for inside di website; and
• to deliver correct and accurate content to you and your device from inside di website.
• to fulfil your request(s) to share your hashed image(s) with social media services and other platforms so dem go fit remove dem. Dis mean say your hashed images fit be sent to those organisations even if dem dey outside United Kingdom.

We dey collect your IP Address at country level only, and na only for analytics and threat management we dey use am.

Di lawful basis wey give us right to process your data:

We dey process your personal data with your consent where dem request am:

1. to protect your vital interests
2. for di purpose of our own or a third party’s legitimate interests (to communicate with you; to fulfil your request, and understand you better as a user of our services; for network and information security so we fit protect your information from loss, damage, theft or unauthorised access; to prevent fraud and other criminal activities; to manage queries, complaints, or claims; and to establish and defend our legal rights); or
3. to comply with any legal obligation wey we dey under.

Who we dey share your data with

• We fit share your image hashes with social media services and other platforms so dem go fit detect and remove di images wey people share online. Your image hashes no fit be reversed and SWGfL no fit see di content of di images at any time. For complete list of social media services and other platforms wey fit receive your image hashes, abeg check Industry Partners
• Di platforms wey dey participate fit dey based for different countries around di world. Dis mean say when we share your hashes, your personal data fit be transferred internationally to those platforms.
• For now, you no fit choose which individual platform go receive your hashes. When you upload your hashes to StopNCII, you understand and agree say dem go be shared with all current and future platforms wey don sign up to di StopNCII service.
• If you choose to receive email notification, your email address go be shared with our email provider SendGrid, so dem fit send you email on our behalf.

We fit disclose your personal information to third parties where:

• a court don order us to do so
• an authority wey get power to demand disclosure, like social services and police, don order us to do so
• di law require or authorise us to do so

We fit employ third party companies and/or individuals to do certain work on our behalf. Where dem need access to personal data (and where we no fit achieve wetin we want by giving dem di data in anonymised form), we go only disclose your personal data where:

• di third party agree to use am only for di agreed function(s) and not for any other purpose; and
• di third party agree to process di personal data according to dis Privacy Notice and as di UK data protection legislation allow.

Data Transfers

• To fulfil your request(s) to remove your image hashes from social media services and other platforms, your personal data go be shared with those services wey fit dey outside United Kingdom. Where e dey appropriate, and where exceptions under Article 49 of di UK General Data Protection Regulation no apply, we go put contractual controls and procedures in place with such service providers to adequately protect your rights.

How Long We Keep Your Data and How We Keep Am Safe:

• We go only keep personal data for as long as we need am.
• You fit withdraw your consent to di processing of any image hashes at any time, by withdrawing your case. You go need your valid case number and correct password to do dis. Once you don withdraw your case, we go erase your hashes from our systems and instruct industry partners to do di same. But abeg take note — once industry partners don see a hash wey violate their policies, dem reserve di right to continue removing that content.
• We go store your email address for minimum of 3 days and den delete am. Your case number and hashed password go dey kept for as long as your case dey active or until you withdraw.
• We go store any information wey you give us for our secure servers or for secure servers wey our service providers dey provide.

Cookies

• Our website only put cookies on your computer wey strictly necessary for us to provide di services to you.
• Specifically, we dey use Google ReCaptcha for both “Create” and “Withdraw” screens to verify say you na real person, not a bot, and to ensure di security of di platform. Di link here describe di cookies. https://developers.google.com/recaptcha/docs/faq#does-recaptcha-use-cookies.
• We dey use “lang”, wey na language cookie, to remember di language wey you don select.
• We also dey use di “idstopncii_org” cookie, wey na session cookie wey help us protect your form submissions. Dis cookie no go last long, and e go delete when you close your browser.

Your Rights

Where we dey process personal data wey concern you, you get di following rights:

• di right to know say your personal data dey being used or stored by us. Dis Privacy Notice dey tell you dis;
• di right to access copy of di personal data wey we hold about you;
• di right to object to direct marketing by unsubscribing from am;
• di right to object to processing wey dem carry out based on legitimate interests;
• di right to make us erase information wey we use or hold about you;
• di right to data portability;
• di right to object to decisions wey dem take by automated means;
• di right to make us correct your data if e no accurate or e incomplete.
• Abeg take note say some of these rights no be absolute and dem fit be subject to exemptions wey we fit rely upon.

Complaints

• If anything about how we process your personal data dey worry you, abeg contact us. Contact details dey below.
• If we no fit resolve your concern, you get right to complain to di UK Information Commissioner’s Office.

How to Contact Us

Abeg read dis notice carefully and contact us and our Data Protection Officer if you get any question by emailing us for: privacy@swgfl.org.uk. Or by writing to:

The Head of Privacy
South West Grid for Learning Trust
Belvedere House
Pynes Hill
Exeter
EX2 5WS

Or by telephone for: +44 (0) 345 601 3203

We reserve di right to change dis Privacy Notice from time to time and we advise you to review am from time to time. Di version of dis Privacy Notice wey you dey read now, we last update am for January 2026.