Search
Login
Login
Contact

GDPR Policy Product – US

The new General Data Protection Regulation, or GDPR, is set to overhaul how businesses process and handle personal data. Here at PebblePad, we take our responsibilities seriously, and we are committed to being transparent about our data policies. In the guide below you’ll find a jargon-free overview of everything you need to know about our approach to GDPR compliance and how we handle information about you and your end-users.

Useful links and contact information

Our full Privacy Policy is available here.

Any questions about our data policies and information requests should be sent for the attention of our Data Protection Representative to datasecurity@pebblepad.co.uk.

What personal data do you store and why do you need it?

By default, we store the minimum amount of data possible to support access to the PebblePad platform, namely: First name, last name and email address. We may also store information passed over by a user’s organisation, such as postal code or telephone number.

Where is user data stored and how is kept secure?

  • Data is stored on secure servers in the cloud.
  • Data is stored in as few places as possible.
  • Our employees will not create any unnecessary additional data sets.
  • Our employees are trained in data security and will take all reasonable steps to ensure user data is accurate and kept up-to-date.
  • We strictly enforce a policy which ensures no customer data can leave the region in which it was created, thereby ensuring compliance with local data protection laws.

How long do you retain data for?

  • PebblePad data is held for the lifetime of an account. When a user account is deleted, the user’s data is automatically purged after a period of 30 days. In the case of an organisation discontinuing their PebblePad licence, all associated account and user data is purged 150 days after the licence expiry date.
  • Support tickets are held for 5 years.
  • Contact details gathered as part of marketing activities through our websites will be retained until a user makes a request to have data held about them deleted. Users shall be able to update their preferences or revoke consent to the processing of their data for marketing purposes via the options contained within all PebblePad communications.

How do you destroy user data?

Individual user data is removed using standard OS and database calls. Provisioned storage containing sensitive data is wiped using the DoD 5220.22-M sanitising method before being returned to cloud storage pools if it is no longer required.

How can a user request information about the data you hold?

Any user can submit an information request to obtain an inventory of the data we hold about them. Requests should be sent for the attention of our Data Protection Representative at datasecurity@pebblepad.co.uk. Upon receiving a request, we will provide information to the user about:

  • The data we hold about them and how they can access it.
  • Measures we undertake to keep their data up-to-date.
  • The data policies and procedures we have in place to ensure GDPR compliance.

How can a user request the removal of their data?

Users accessing PebblePad through their university or another organisation should follow the steps outlined here:

  • The user should first contact their organisation (typically a PebblePad administrator) and make a formal request for their data to be removed.
  • The user’s organisation should then notify us of the request.
  • Upon receiving a request for the removal of a user’s data, we will create an inventory of all the data we hold for that user. The inventory will include: User account details, all PebblePad assets created or collaborated upon, submitted work, shared assets, information in logged files, support tickets, and information in marketing databases.
  • The inventory will be presented to the organisation who will enter into a conversation with the user about the implications of deleting the data within the inventory.
  • Following agreement between the user and their organisation, we should be informed in writing of the user’s consent to have their data removed. Following receipt of consent, we will remove the user’s data as a priority and notify all parties when the removal is complete.

The process for removing data for users accessing PebblePad through Alumni or Personal Accounts is exactly the same as the above with the exception that requests for an inventory of the data we store and the consent to have data removed should come directly to us at datasecurity@pebblepad.co.uk.

Last updated: 28 June 2018

 

Curriculum Transformation at the University of Edinburgh: co-creation and the relationship between local innovation and institutional change

Talk description: I will use the themes of reflection and experiential learning, skills development and assessment (including programme level assessment and changes in assessment practice) to explore this process in more detail. This includes the link between disciplinary and institutional curriculum reform, learning from local innovations and changes, and using this to inform University level changes and support.

Bio: My current position is leading the University wide Curriculum Transformation Project. This is a major and long term initiative for the University considering all areas of the University’s undergraduate and taught postgraduate curriculum. Prior to this Jon set up and led the Institute for Academic Development (IAD) at the University of Edinburgh. The IAD provides University level support for teaching, learning and researcher development, including direct support for students and staff, and support for enhancement and innovation in curriculum development, the student and researcher experience. Jon has a PhD in petroleum geology.

Mission Possible: The DNA of a bespoke professional development program

Talk description: The diversity of students in higher education dictates that there cannot (and should not) be a single ‘silver bullet’ approach to address the complex challenge of career readiness learning. However, the reality of modern university structures is that delivering bespoke experiences for each student is a challenge in and of itself.  And yet, all things are possible with creative use of PebblePad to streamline delivery (for the university) and make it highly personalised (for the student). 

Bio: Gayle Brent is a Learning and Teaching Consultant (Employability) at Griffith University, Queensland, Australia. Gaye’s specialist area of interest is developing and implementing strategies to enhance staff and student understanding of employability in both curricular and extra-curricular contexts. She completed a Master of Education and Professional Studies Research to explore the potential barriers and challenges to embedding employability-based learning in higher education curriculum and is currently completing a Doctor of Philosophy exploring the impact of an extra-curricular employability program on the individual student experience.

Dr Melissa Highton. Assistant Principal, University of Edinburgh

Talk description: A journey through the stories told by wicca data. How a neglected research data set was used by students to overturn historic injustice and shed new light on the lives of women in Scotland.

Bio: Melissa has worked for many years in higher education at some of the UK’s finest and most ancient institutions. In each place she enjoys discovering the hidden histories and less heard voices which can be surfaced in new ways using the most up to date and open technologies. She is a champion of playful and curious approaches to engagement with audiences on campus and online, and is an invited speaker at events about dangerous women.

Education is an Experience That Should Be Designed

Talk description: We have any number of problems and opportunities as universities, and universities must adapt to help students from diverse backgrounds develop the knowledge and skills they need to thrive and make a positive impact in the world. Key to those adaptations is understanding that we provide students with an experience. We ought to design them with intention and purpose. This talk with take up this argument and ground it within a large educational transformation project at the University of Leeds.

Bio: Jeff Grabill is Deputy Vice Chancellor for Student Education at the University of Leeds. Prior to joining the University of Leeds, Grabill was at Michigan State University (MSU) in the United States for nearly 20 years. He served Michigan State University as the Associate Provost for Teaching, Learning, and Technology. In that role, he was responsible for facilitating innovation in learning and educator professional development via his role as Director of the Hub for Innovation in Learning and Technology. Grabill’s research focuses on how digital writing is associated with citizenship and learning. That work has been located in community contexts, in museums, and in classrooms at both the K-12 and university levels. Grabill is also a co-founder of Drawbridge, an educational technology company.

Sign Up to the Customer Newsletter