Company number: 12497951
6 Sutton Park Road, Sutton, SM1 2GD

Cookies Policy

Policy Statement

The School is committed to transparency and user control regarding our use of cookies. Our Cookies Policy outlines how we collect, store, and use cookies to enhance website functionality and user experience. We ensure compliance with UK data protection laws and provide clear options for users to manage their cookie preferences, safeguarding their privacy and choice.

Principles

  • Consent: We seek user consent before placing non-essential cookies on their devices.
  • Clear Information: We provide detailed explanations of the purpose and function of each cookie.
  • User Control: Users have the option to manage their cookie preferences through easy-to-use tools.
  • Compliance: We adhere to UK data protection laws and relevant regulations regarding cookies.
  • Regular Reviews: Our Cookies Policy is reviewed regularly to ensure ongoing compliance and effectiveness.
  • Privacy Protection: We implement measures to protect the personal data collected through cookies.
  • User Education: We offer guidance on how users can adjust their browser settings to control cookie usage.

Regulatory Context

This Policy has been developed in line with the applicable laws, regulations, regulatory advice, and sector best practices, including the following:

Authority Name Url
UK Government Data Protection Act 2018
Legislation aimed at controlling the processing of personal data, laying down principles with respect to the processing of personal data, and the rights of data subjects
Office for Students (OfS) Regulatory Notices and Advice
Regulatory notices are additional information about OfS' regulatory requirements and are part of the regulatory framework. Regulatory advice helps providers understand and meet OfS requirements.
Quality Assurance Agency (QAA) The Quality Code
This code represents a shared understanding of quality practice across the UK higher education sector, protecting public and student interests and championing the UK's reputation for quality.
Quality Assurance Agency (QAA) Advice - Learning and Teaching
Information Commissioner's Office (ICO) Guide for higher education institutions
Provides guidance for higher education providers on their obligations under data protection law.
JISC (Joint Information Systems Committee) Digital Infrastructure Guidelines
Guidelines for universities and colleges in the UK on how to manage their digital infrastructure.

1. Introduction

Title
Advice
Text

Welcome to the Cookies Policy of the London School of Innovation (LSI) (referred to as "LSI," "we," "our," or "us"). This policy explains how we use cookies and similar tracking technologies on our website (www.lsi-ac.uk) and how you can manage your preferences regarding cookies. Cookies help us provide a better user experience by remembering your preferences and tailoring content to your interests. By continuing to use our website, you agree to the use of cookies as described in this policy. You may manage your cookie preferences through the settings available on our website or by adjusting your browser settings.

2. Who We Are

Title
Advice
Text
  • Institution Name: London School of Innovation (LSI)
  • Registration Number: 11942630
  • Address: 6 Sutton Park Road, Sutton, Greater London, United Kingdom, SM1 2GD
  • Data Controller: London School of Innovation (LSI)
  • Data Protection Officer (DPO): Director of Technology
  • Contact Information:
  • Email: privacy@lsi-ac.uk
  • Phone: +44 (0)203 507 0033

3. What Are Cookies, Pixels, and Local Storage?

Title
Advice
Text
  • Cookies are small text files placed on your device by a website. They help us remember your preferences and improve your experience on our site.
  • Pixels are tiny pieces of code embedded in web pages or emails. They track your interactions with our content to help us understand how you engage with our site and measure the effectiveness of our marketing campaigns.
  • Local Storage is a method of storing data directly on your device, allowing us to maintain settings and preferences between visits.

4. How Cookies, Pixels, and Local Storage Work

Title
Advice
Text

Cookies, pixels, and local storage enable us to:

  • Enhance Your Browsing Experience: By remembering your preferences and settings, we can provide content and recommendations tailored to your interests.
  • Analyse Website Performance: Track how you interact with our website to improve functionality and user experience.
  • Measure Advertising Effectiveness: Understand the impact of our advertising and optimise future campaigns.

5. Relevant Laws

Title
Advice
Text

The use of cookies and similar technologies is regulated by several key pieces of legislation in the UK:

  • UK General Data Protection Regulation (UK GDPR): Governs the processing of personal data, including data collected through cookies. Consent is required for non-essential cookies.
  • Data Protection Act 2018: Complements the UK GDPR and sets out the framework for data protection in the UK.
  • Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR): Specifically governs the use of cookies and similar technologies and mandates user consent before placing non-essential cookies on a device.

6. How We Obtain Consent for Cookies: CookieYes

Title
Advice
Text

To comply with the UK GDPR and PECR, LSI uses the CookieYes consent management platform to obtain user consent for cookies on our website. CookieYes is a tool that provides a cookie banner when you first visit our website, which allows you to choose which categories of cookies you are willing to accept or reject.

How CookieYes Works:

  • Initial Cookie Banner: When you first visit our website, a cookie banner powered by CookieYes will appear at the bottom of the page. This banner provides a summary of our use of cookies and gives you the option to accept all cookies or manage your preferences.
  • Cookie Preferences: By clicking on "Manage Preferences," you can choose which categories of cookies you would like to allow or disallow. 
  • Consent Storage and Management: Once you select your preferences, CookieYes acts on your consent choices.
  • Changing Preferences: You can change your cookie preferences at any time by clicking on the "Cookie Settings" link, or by re-accessing the cookie banner.

The CookieYes tool ensures that we comply with legal requirements by allowing users to make informed decisions regarding their privacy and consent.

7. Types of Cookies We Use

Title
Advice
Text

We use different types of cookies on our website, which can generally be categorised as follows:

  • Strictly Necessary Cookies: Essential for the operation of the website.
  • Performance Cookies: Collect information about how visitors use our website.
  • Functional Cookies: Allow the website to remember your choices and provide enhanced features.
  • Targeting or Advertising Cookies: Collect information about your browsing habits to make advertising relevant to you and your interests.

Below is a list of cookies that we use on our website, categorised by type and with an explanation of their purpose, type, and relevance:

Name

Domain

Path

Expiry

Size

Secure

Type

Purpose

First/Third Party

Strictly Necessary

Cookie Type

Relevance Under Law

_cf_bm

.vimeo.com

/

30 mins

134

Yes

Persistent

Bot management and security

Third Party

Yes

Strictly Necessary

Under PECR, essential cookies like this do not require consent as they are vital for security and functionality.

_cfuid

.vimeo.com

/

1 year

82

Yes

Persistent

Identifies trusted web traffic

Third Party

Yes

Strictly Necessary

Does not require consent under PECR; necessary to maintain website security.

cf_clearance

.vimeo.com

/

1 year

161

Yes

Persistent

Protects website from malicious bots

Third Party

Yes

Strictly Necessary

As above, used for security purposes, compliant with PECR without requiring user consent.

f2p_pilot_bucket

.vimeo.com

/

Session

10

Yes

Session

Used by Vimeo for player experiments

Third Party

No

Performance

Requires consent under UK GDPR and PECR as it is not essential for the service.

has_logged_in

.vimeo.com

/

Session

13

Yes

Session

Indicates if a user is logged into Vimeo

Third Party

Yes

Functional

Necessary for maintaining session integrity; PECR compliant without explicit consent.

is_logged_in

.vimeo.com

/

Session

13

Yes

Session

Tracks logged-in status for Vimeo users

Third Party

Yes

Functional

Similar to above; essential for proper user authentication processes.

language

.vimeo.com

/

Session

10

Yes

Session

Stores preferred language settings

Third Party

No

Functional

User consent needed as it customises the experience based on user preference; PECR applicable.

player

.vimeo.com

/

1 year

18

Yes

Persistent

Saves user video player settings

Third Party

No

Functional

Requires user consent under PECR and UK GDPR for saving settings unrelated to essential services.

Void

.vimeo.com

/

1 year

18

Yes

Persistent

Internal Vimeo ID

Third Party

No

Functional

Requires consent as it tracks and identifies users; relevant under PECR.

_ga

.lsi-ac.uk

/

2 years

30

No

Persistent

Google Analytics tracking ID

First Party

No

Performance

Requires consent for user tracking and analytics; covered under PECR and UK GDPR.

_ga_G9T64DKJLC

.lsi-ac.uk

/

2 years

18

No

Persistent

Google Analytics tracking for user engagement

First Party

No

Performance

Consent needed for non-essential data collection, as per PECR and UK GDPR.

cookeyes-consent

.lsi-ac.uk

/

1 year

170

No

Persistent

Stores cookie consent preferences

First Party

Yes

Strictly Necessary

Necessary to remember user consent preferences; does not require separate consent.

wp-settings-4

.lsi-ac.uk

/

1 year

55

No

Persistent

Stores WordPress user settings

First Party

Yes

Functional

Does not require explicit consent as it is essential for user interface customisation.

wp-settings-time-4

.lsi-ac.uk

/

1 year

28

No

Persistent

Time at which wp-settings-{user} was set

First Party

Yes

Functional

Related to above, necessary for basic website functions, therefore exempt from consent under PECR.

 

8. Third-Party Cookies

Title
Advice
Text

We use third-party services that may set their own cookies on your device. These include:

  • Vimeo: Used for video hosting and streaming. For more details on how Vimeo handles cookies, please refer to their privacy policy.
  • Google Analytics: Used to analyse website usage. You can learn more about Google Analytics’ cookies on their website.
  • CookieYes: Manages cookie consent preferences. You can find more about their privacy practices on their website.

We recommend reviewing the privacy policies of these third parties to understand how they manage your data.

9. Data Protection Impact Assessments (DPIAs)

Title
Advice
Text

We conduct Data Protection Impact Assessments (DPIAs) to ensure our use of cookies complies with data protection laws. DPIAs help us identify and mitigate risks associated with cookie usage and protect your privacy.

10. How to Manage Your Cookie Preferences

Title
Advice
Text

You can manage your cookie preferences through the cookie settings available on our website. When you first visit our website, you will be presented with a cookie consent banner giving you the option to accept or reject non-essential cookies. You can also change your preferences at any time by clicking on the cookie icon or accessing the settings in your web browser.

Most web browsers allow control of cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please visit our website for more information.

11. Impact of Cookies on Your Privacy

Title
Advice
Text

Cookies, particularly those used for analytics and advertising, may collect personal data such as IP addresses, browsing behaviour, and device information. We take your privacy seriously and ensure that any data collected is processed in accordance with our Privacy Policy. We anonymise data wherever possible and use cookies only for the purposes outlined in this policy.

12. Your Rights Under the UK GDPR

Title
Advice
Text

Under the UK GDPR, you have the following rights concerning your personal data collected through cookies:

  • Right to be Informed: You have the right to be informed about the collection and use of your personal data.
  • Right to Access: You have the right to access the personal data we hold about you.
  • Right to Rectification: You have the right to request the correction of inaccurate data.
  • Right to Erasure: You have the right to request the deletion of personal data in certain circumstances.
  • Right to Restrict Processing: You have the right to request that we limit the processing of your data.
  • Right to Data Portability: You have the right to obtain your data in a machine-readable format.
  • Right to Object: You have the right to object to the processing of your data for marketing purposes.

For more information on your rights, please refer to our Privacy Policy or contact us using the details provided below.

13. Changes to This Cookies Policy

Title
Advice
Text

We may update this Cookies Policy from time to time to reflect changes in legislation or our operations. We encourage you to review this policy periodically to stay informed about how we use cookies. The effective date at the top of this policy indicates when it was last updated.

14. Contact Us

Title
Advice
Text

If you have any questions or concerns about our use of cookies or this Cookies Policy, please contact us at:

  • London School of Innovation (LSI)
  • Email: privacy@lsi-ac.uk
  • Phone: +44 (0)203 507 0033

Metrics and KPIs

The following metrics will be measured and regularly reviewed as key performance indicators for the School to ensure the effectiveness of this policy and associated operations.

Title
Cookie Consent Banner Visibility
Ensure that the cookie consent banner is visible to 100% of users on their first visit by the end of the next quarter.
Guarantees that all users are informed about cookie use from their initial interaction with the site.
Cookie Policy Review Frequency
Review and update the Cookies Policy at least twice a year.
Ensures the policy remains current and compliant with evolving legal and operational requirements.
Incidents of Cookie-Related Complaints
Reduce cookie-related complaints to fewer than 3 per quarter.
Indicates successful management of cookie practices and user understanding.
Response Time to Cookie-Related Issues
Resolve 90% of cookie-related queries or issues within 48 hours.
Measures efficiency in addressing and resolving user concerns about cookies.
Transparency of Cookie Information
Provide detailed information for 100% of cookies used on the website.
Ensures users are fully informed about the cookies being used and their purposes.
Policy: Cookies Policy