This website, stemintheworld.com, promotes and sells the Transition Year book Engineering in the World. In this policy “we”, “us” and “our” mean STEM in the World, the data controller for personal data collected through this website. Legal entity name and registered address: [TO CONFIRM: legal name and postal address of the controller].
Contact us about anything in this policy, or to use your data protection rights, at admin@stemsouthwest.ie. We have not appointed a Data Protection Officer [TO CONFIRM: confirm no DPO is appointed].
2. What personal data we collect and why
We only collect what we need for each purpose below.
Personal data we collect, purpose and lawful basis
What
Data
Why
Lawful basis (GDPR Art. 6)
Newsletter sign-up
Name and email address, and any other details the sign-up form asks for
To send occasional emails about the book, new resources and related opportunities
Consent (6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email.
Enquiries by email
Your name, email address and whatever you include in your message
To reply to you and keep a record of the conversation
Legitimate interests (6(1)(f)) in answering questions about the book
Book orders
Name, email, delivery address in Ireland, phone number if given, what you bought and payment status. Card details are handled by Stripe; we never see your full card number.
To take payment, deliver your order, handle returns or queries, and keep accounting records
Contract (6(1)(b)); legal obligation (6(1)(c)) for tax and accounting records
Website operation and security
Technical data such as IP address, browser type, pages requested and time of visit
To deliver the site, keep it secure and protect it from abuse
Legitimate interests (6(1)(f)) in running a secure website
Embedded YouTube videos
Data YouTube collects when a video loads (for example IP address and cookie identifiers)
To show videos on our pages
Consent, given through our cookie banner (see section 9)
We don't use your data for automated decision-making or profiling, and we don't sell it.
3. Who we share it with
We use the service providers below to run the site. They process personal data on our behalf and only for the purposes described here.
Stripe — secure checkout and payment processing for book orders. Stripe is also an independent controller for some data it needs for fraud prevention and legal compliance. See Stripe's privacy policy (opens in a new tab).
Lovable — hosts this website, with Cloudflare providing delivery and security. They process technical data such as IP addresses to serve the site.
Google — YouTube video embeds (only after you accept cookies) and the Google Fonts used for the site's lettering, which your browser downloads from Google when you visit.
Email provider for our inbox at admin@stemsouthwest.ie: [TO CONFIRM: name of email provider].
Delivery of book orders: [TO CONFIRM: courier or postal service used, if any].
We may also share data with professional advisers (such as accountants) or where the law requires it.
4. International transfers
Some providers (including Stripe, Twilio SendGrid, Google and our hosting providers) may process data outside the European Economic Area, mainly in the United States. Where they do, the transfer is protected by the EU–US Data Privacy Framework, where the provider is certified, or by the European Commission's Standard Contractual Clauses [TO CONFIRM: confirm the safeguard each provider relies on]. Contact us for more detail.
5. How long we keep it
Newsletter: until you unsubscribe, then deleted or kept only on a suppression list so we don't email you again [TO CONFIRM: retention period].
Enquiries: [TO CONFIRM: retention period, e.g. up to 2 years after the last contact].
Orders: [TO CONFIRM: retention period]. Irish tax law generally requires business records to be kept for six years.
Website security logs: kept by our hosting providers for short periods under their own retention rules.
6. Children and young people
Engineering in the World is written for Transition Year students, but this website's newsletter and shop are intended for adults: teachers, schools, parents and other readers. We don't knowingly collect personal data from anyone under 16. Students under 16 shouldn't sign up to the newsletter or place orders themselves; a parent, guardian or teacher can do this instead [TO CONFIRM: confirm this is how you want to handle under-16s].
If you think a child has given us their data, contact us at admin@stemsouthwest.ie and we'll delete it.
7. Keeping your data secure
We use appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) connections across the site and trusted providers for payments and email. No online service can be completely secure, so if we ever have a data breach that puts you at risk, we'll tell you and the Data Protection Commission as the law requires.
8. Your rights
Under the GDPR you have the right to:
access the personal data we hold about you and get a copy of it;
have inaccurate or incomplete data corrected;
have your data erased in certain circumstances;
restrict how we use your data in certain circumstances;
object to processing based on legitimate interests, and to direct marketing at any time;
data portability: receive data you gave us in a commonly used, machine-readable format;
withdraw consent at any time. This doesn't affect processing that happened before you withdrew it.
To use any of these rights, email admin@stemsouthwest.ie. We'll reply within one month, and we may need to confirm your identity first. Using your rights is free.
Complaints. If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Irish supervisory authority, the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — www.dataprotection.ie (opens in a new tab).
9. Cookie Policy
Cookies are small files that websites store in your browser. Similar technologies, such as your browser's local storage, work in a similar way and are covered here too.
We don't use analytics, advertising or tracking cookies. Without your consent, the site only uses the strictly necessary items below, which don't need consent under the ePrivacy rules.
Strictly necessary cookies and storage
Name
Set by
Purpose
Duration
__cf_bm
Cloudflare (our hosting network)
Tells real visitors apart from bots to protect the site
30 minutes
__dpl
Lovable (our hosting provider)
Makes sure you see the current published version of the site
[TO CONFIRM: duration]
eitw-cookie-consent-v1 (local storage)
This website
Remembers whether you accepted or rejected cookies
Until you change your choice or clear your browser data
tsr-scroll-restoration (session storage)
This website
Remembers your scroll position when you go back a page
Until you close the tab
Optional: embedded YouTube videos. Videos on How to Navigate the Book and Classroom Activities come from YouTube (Google). We use YouTube's privacy-enhanced mode (youtube-nocookie.com), and we only load the videos after you click “Accept”. Once a video loads, YouTube may store identifiers in your browser and collect data about your viewing. See Google's privacy policy (opens in a new tab). If you reject, you'll see a “Watch on YouTube” link instead.
Other sites we link to. When you click through to Stripe checkout, our SendGrid newsletter form, the Issuu e-book or YouTube, those sites set their own cookies under their own policies. Nothing from them loads on our pages until you click.
Changing your choice. You can change or withdraw your consent at any time with “Cookie settings” at the bottom of every page, or here: . You can also block or delete cookies in your browser settings.
10. Changes to this policy
We'll update this policy when our practices or the law change, and show the date of the latest version at the top of this page. If we make significant changes, we'll make that clear on the site or tell newsletter subscribers by email.
