Our Privacy and Cookies Policy

Who we are
Heartfield Equine Facilitated Learning

Our website address is: http://www.heartfieldefl.co.uk

 
Privacy Notice for Website Viewers and Prospective Clients

Our website makes no use of forms to collect contact information. If a person chooses to contact us and exchange contact details and subsequently work with us they will be given a copy of our GDPR / Privacy policy and a consent form. By completion of this form service users agree to processing of personal data in accordance with that policy.

The Use of Microsoft 365 services with Service Users

Microsoft is committed to helping protect the security businesses information. In compliance with the provisions of Article 32 of the GDPR, Microsoft has implemented and will maintain and follow appropriate technical and organizational measures intended to protect Customer Data and Support Data against accidental, unauthorized, or unlawful access, disclosure, alteration, loss, or destruction Microsoft is subject to independent verification of its security, privacy, and compliance controls. In order to provide this, Google undergo several independent third-party audits on a regular basis. For each one, an independent auditor examines Microsoft’s data centres, infrastructure, and operations. 

The following are examples of Microsoft’s accreditation: 

ISO 27001: is one of the most widely recognized, internationally accepted independent security standards. Microsoft has earned ISO 27001 certification for the systems, applications, people, technology, processes, and data centres that make up its shared Common Infrastructure 

ISO 27017: is an international standard of practice for information security controls based on ISO/IEC 27002, specifically for Cloud Services. Microsoft has been certified compliant with ISO 27017 for its shared Common Infrastructure 

ISO 27018: is an international standard of practice for protection of personally identifiable information (PII) in Public Cloud Services. Microsoft has been certified compliant with ISO 27018 for its shared Common Infrastructure The American Institute of Certified Public Accountants (AICPA) SOC 2 (Service Organization Controls) and SOC 3 audit framework defines Trust Principles and criteria for security, availability, processing integrity, and confidentiality. Microsoft has SOC 1, SOC 2 and SOC 3 reports for its shared Common Infrastructure

This means that independent auditors have examined the controls protecting the data in Microsoft’s systems (including logical security, privacy, and data centre security), and assured that these controls are in place and operating effectively.

 

Access to Microsoft 365 is controlled by a strong password and the use of two-factor authentication.

What are Cookies

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by online service providers to help build a profile of users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually. You can set your browser not to accept cookies and the websites below explain how to remove cookies from your browser. Some of our website features may not function as a result of disabling cookies but please inform us if there is anything you believe you cannot access due to doing so.

 
Types of Cookies

The cookies we place on your device fall into the following categories: 

Session — these allow our website to link your actions during a particular browser session. These expire each time you close your browser and do not remain on your device afterwards

Persistent — these are stored on your device in between browser sessions. These allow your preferences or actions across our website to be remembered. These will remain on your device until they expire, or you delete them from your cache

Strictly necessary — these cookies are essential for you to be able to navigate our website and use its features. Without these cookies, the services you have asked for could not be provided

Performance — these cookies collect information about how you use our website, eg which pages you go to most often. These cookies do not collect personally identifiable information about you. All information collected by these cookies is aggregated and anonymous, and is only used to improve how our website works

Functionality — these cookies allow our website to remember the choices you make (such as your user name, language, last action and search preferences) and provide enhanced, more personal features. The information collected by these cookies is anonymous and cannot track your browsing activity on other websites.

 
How We Use Cookies

The cookies generated by Google Analytics and Rank Maths SEO on our website collect non-personal data on website viewing which allow us to improve our content. Our cookie policy consent plugin also creates a cookie to record your consent on your device so that you will only be asked to consent on your first visit (this can be disabled).

 
Consent to Use Cookies

We will ask for your permission (consent) to place cookies or other similar technologies on your device, except where these are essential for us to provide you with a service that you have requested (eg to enable you to put items in your shopping basket and use our check-out process). 

There is a notice on our home page which describes how we use cookies and requests your consent to place cookies on your device.

 
Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content especially if you have an account and are logged in to that website.