Hamish & Milo Online

Hamish & Milo Online is owned and operated by Hamish & Milo Ltd and is our digital offering of our SEMH Wellbeing Intervention programme.

It is important that you are aware of and agree to the following terms and conditions before using Hamish & Milo Online:

• To access Hamish & Milo online, users will be provided with a user login to be able to access session plans and the Resources hub for supporting materials.
• To access Hamish & Milo online, users must have a secure, school/organisation email address. Any user attempting to create an account with a non-secure email including, but not limited to, Gmail, AOL, Hotmail, will have their accounts disable with immediate effect until a school/organisation email address can be provided.
• Only users with login details may access Hamish & Milo online and use for the sole purposes of programme delivery in their school only.
• Any data processed by Hamish & Milo to give users access to the materials will be processed according to the UK General Data Protection Regulation (GDPR) and in line with our Data, Privacy and Cookies Policy, the Data Processing Agreement within these Terms and Conditions, and in accordance with current UK laws.
• It is your responsibility to access Hamish & Milo online using a secure device that protects your data from unauthorised access.
• It is your responsibility to ensure your password is safe and securely stored, and that you do not share your account credentials with any other user.

These Terms and Conditions (T&Cs) may be changed by us from time to time with or without notice to you. The latest T&Cs will be posted on the website, and you should always review these T&Cs prior to using the website to ensure that you have a current understanding of the T&Cs under which you are permitted to access this website. If you cannot access the T&Cs via the internet, we can provide a copy of the most recent T&Cs by email upon request at hello@hamishandmilo.org.

For any questions regarding these T&Cs you can email us at hello@hamishandmilo.org.

In these Terms and Conditions:

• Hamish & Milo we, us, our and ours mean Hamish & Milo Ltd.
• Service means the service provided by us through Hamish & Milo online.
• Registered user means a person who signs up with us to access Hamish & Milo online or service through a user account.
• Service user means a user who is eligible to use the service or access information related to the service as a result of purchase of Hamish & Milo online.
• Administrator user means a service user who manages all the users and all data for a school or organisation using Hamish & Milo online.

Access to Hamish & Milo online is purchased through our website and so will be invoiced with terms and conditions for payment or through our online shop using BACS. Hamish & Milo online is a one-off payment for access to either specific programme themes or the complete programme and does not incur yearly subscription fees.

Where schools/settings buy just one or two of the programme themes, access will be given to specifically those programme sessions, plans and hub resources, and not to the other themes within the programme. The only variation to this is if schools/settings buy the whole programme they shall then have access to all programme themes and hub resources.

By purchasing access to Hamish & Milo online, your organisation gains the limited right to access the specific programmes bought through login details that will be administered by Hamish & Milo, subject to any restrictions elsewhere in these T&Cs. For clarity, users within your organisation means users employed by, contracted to, associated with or volunteering for your organisation only, subject to any restrictions at the point of sale.

Users outside your organisation are not eligible to use the service as part of your account. For example, if the organisation is a school, only users working in that school are eligible to use the service. If the organisation is an organisation that supports schools, Hamish & Milo online may only be used by users who work directly with or in support of children or young people that the organisation works with directly, or is contracted to support, and not by other users in supported schools, or in support of other children within any supported schools.

We reserve the right to terminate your account if you, administrator users or service users within your organisation, commit any material breach of these T&Cs. For clarity, we reserve the right to suspend your account at any time if we suspect that users from outside your organisation are using your account, or if we suspect that the registration details of users within your organisation are being used by anyone else.

On termination of account, any rights for administrator users to administer the account and service users within your organisation to use the service, will cease.

If your user account is inactive for two years, we reserve the right to lock your account and archive your data. See the Data, Privacy and Cookies policy for further details on how we handle and use your data.

We reserve the right to archive all data older than five years. See the Data, Privacy and Cookies policy for further details on how we handle and use your data.

If your account is terminated early because of a breach of these T&Cs, any payment you have made is not refundable, though we may, at our sole discretion, choose to refund part of the account fee.

For clarity, we reserve the right to suspend an account at any time and/or reject any future purchases from the organisation if we suspect that users from outside your organisation are using your account, or if we suspect that the registration details of users within your organisation are being used by anyone else. Also, in such instances, Hamish & Milo has the right to refuse the provision of customer support service or any other services available otherwise to organisations.

User

As a user, you are responsible for complying with these T&Cs and maintaining the confidentiality of your registration details and password. You are responsible for immediately informing us of any use, by another person with your registration details, or any suspected unauthorised use of your registration details.
Based on your access rights as a user, you may have further responsibilities. We reserve the right to notify you of additional responsibilities from time to time.

Administrator users

Each organisation must ensure it has an administrator user at all times. As an administrator user, you are responsible for ensuring that details of the organisation, including contact and payment details, are up to date. You are responsible for ensuring that only service users working within the organisation are accessing the service under your account, and that these users can access only the intervention assessments that are relevant to them. You are also responsible for immediately informing us of any use by another person with your registration details, or any suspected unauthorised use of your registration details.

We reserve the right at any time, and from time to time, to modify, edit, delete, suspend or discontinue, temporarily or permanently amend all or any part of the service, and the information, materials, products or services available through Hamish & Milo Online with or without notice. You agree, that we shall not be liable to you or to any third party for any such modification, editing, deletion, suspension or discontinuance. Price and availability of information, materials, products and/or services are subject to change without notice, subject to restrictions elsewhere in these terms and conditions.

All references on this website to information, materials and services apply to information, materials and services available and applicable to the UK only, unless otherwise stated. This may apply to the Hamish & Milo assessments, resources or any other information provided. If you are outside the UK and choose to use the service, you accept that the service and information may not be appropriate to your location. We cannot guarantee that we comply with all relevant laws in your location.

The service is intended only for use by professionals working with children in educational settings. You are not eligible to use the service if you are under 18, or if you are a research and/or commercial organisation. Unless otherwise indicated, the service is to be used solely to deliver our SEMH intervention programmes.

All references on this website to information, materials and services apply to information, materials and services available and applicable to the UK only, unless otherwise stated. This may apply to the Hamish & Milo assessments, resources or any other information provided. If you are outside the UK and choose to use the service, you accept that the service and information may not be appropriate to your location. We cannot guarantee that we comply with all relevant laws in your location.

To the fullest extent permitted by applicable laws we, on behalf of our employees and volunteers, exclude liability for any losses and expenses of whatever nature and howsoever arising including, without limitation, any direct, indirect, special, punitive, or consequential damages, loss of use, loss of data, loss caused by a virus, loss of income or profit, loss of or damage to property, claims of third parties, or other losses of any kind or character, even if we have been advised of the possibility of such damages or losses, arising out of or in connection with the use of this service or any website with which it is linked. You assume total responsibility for establishing such procedures for your data backup and virus checking as you consider necessary on all devices you use to access the website or use the service.

We exclude all liability for any information and materials added or recommended by users.

You agree to indemnify, release and hold us harmless as well as our directors, representatives, employees and volunteers from any claim, liability, loss, expense or demand, including legal fees, related to your violation of these T&Cs or your access or use of this service, or any of the information, materials, products or services available through this website.

Unless otherwise indicated, Hamish & Milo online and its design, text, content, selection and arrangement of elements, organisation, graphics, design, compilation, digital conversion and other matters (proprietary rights) related to this website are protected under applicable copyrights, trademarks and other proprietary (including, but not limited to, intellectual property) rights and are the property of Hamish & Milo Ltd.

You do not acquire ownership rights to any such proprietary rights viewed through this service. Except as otherwise provided herein, none of the proprietary rights may be used, copied, reproduced, distributed, republished, downloaded, modified, displayed, posted or transmitted in any form or by any means, including, but not limited to, electronic, mechanical, photocopying, recording, or otherwise, without our express prior written permission. Permission is hereby granted to the extent necessary to lawfully access and use this service and/or the information, materials and/or services available on it, to display, download, archive and print in hard copy, portions of this material, provided you do not modify the materials and that you retain any and all copyright and other proprietary notices contained in the materials. This permission terminates automatically if you breach any of these T&Cs. When there is no legitimate interest to keep the information, you must immediately destroy any downloaded, archived or printed materials.

Refer to our main Terms and Conditions for further information regarding our Hamish & Milo trademarks.

Any data inputted, stored and processed on the service will be handled by Hamish & Milo Ltd according to our Data, Privacy and Cookies Policy, and the Data Processing Agreement appended here.

By agreeing to these T&Cs, you agree to the terms of our Data, Privacy and Cookies Policy, and the Data Processing Agreement, which you should read.

Any electronic communication or material you post or transmit to us over the internet (e.g. via email, social media or any other form of electronic communication) is and will be treated as non-confidential and non-proprietary.

We reserve the right to monitor your communications with us whether by mail, voice, email or any other form of transmission for the purposes of quality control, security and other business-as-usual needs.

Notwithstanding the foregoing, all personal data provided to us as a result of this service will be handled in accordance with our Data, Privacy and Cookies Policy. It is your responsibility to evaluate (or take professional advice on) the accuracy and completeness of all information, statements, opinions and other material on this service or any website with which it is linked.

You may receive emails from us from time to time for administrative or communication purposes to inform you of any updates to the service, relevant changes to the T&Cs or to the data, privacy and cookies policy, relevant changes to your user account or any other change that may affect your experience with Hamish & Milo online. These communications are part of accessing the service and cannot be opted out of receiving such notifications. Hamish & Milo Ltd will endeavour to keep these communications to the minimum required.

This Data Processing Agreement (DPA) applies to the use of Hamish & Milo online by a purchasing organisation. In some cases, this DPA will be replaced or supplemented by an additional DPA agreed with, or on behalf of, a subscribing organisation. In the case of any conflict between this agreement and an additional DPA, the additional DPA applies.

Unless otherwise defined herein, capitalised terms and expressions used in this DPA shall have the following meaning:

• ‘Organisation Personal Data’ means any Personal Data Processed on behalf of Organisation pursuant to or in connection with the Terms of Use of Hamish & Milo Online.
• ‘Data Protection Laws’ means the laws in force in the United Kingdom from time to time that relate to data protection, the processing of personal data, privacy and/or electronic communications;
• ‘EEA’ means the European Economic Area;
• ‘UK GDPR’ means the UK General Data Protection Regulation (as defined in the Data Protection Act 2018);
• ‘Restricted Transfer’ means a transfer of Organisation Personal Data which is undergoing Processing or which is intended to be Processed after transfer, to a country or territory to which such transfer would be prohibited or subject to a requirement to take additional steps to adequately protect the Organisation Personal Data for the transfer to be lawful under Data Protection Laws;
• ‘Services’ means the use of Hamish & Milo Online within the limits of its terms of use.
• The terms, ‘Controller’, ‘Data Subject’, ‘Personal Data’, ‘Personal Data Breach’, ‘Processing’, ‘Processor’ and ‘Supervisory Authority’ shall have the same meaning as in the UK GDPR, and their cognate terms shall be construed accordingly.

Parties acknowledge and agree that unless otherwise stated below, in the provision of the Services, the Organisation is a Controller and the Company, Hamish & Milo Ltd, is a Processor.

The Parties acknowledge and agree that the Company may aggregate, anonymised and/or pseudonymised Organisation Personal Data for research purposes (‘Aggregated Data’) as a separate independent controller.

The Company shall not Process Organisation Personal Data other than on the relevant Organisation’s documented instructions. For the purpose of this section, the terms and conditions of the Hamish & Milo website are documented instructions.

Where acting as Controllers, the Parties shall comply with all applicable Data Protection Laws.

The Organisation warrants to the Processor that:

• It has all necessary rights to authorise the Company to Process Organisation Personal Data in accordance with this DPA and the Data Protection Laws.
• Its instructions to the Company relating to Processing of Organisation Personal Data will not put the Company in breach of Data Protection Laws, including with regard to Restricted Transfers.
• It has a lawful basis for Processing the Organisation Personal Data for the Services in accordance with the Data Protection Laws, and
• Where the relevant lawful basis relied upon is the consent of the Data Subject, it has obtained the Data Subject’s consent in accordance with the Data Protection Laws and maintains a record of such consent.

The Company shall take reasonable steps to ensure the reliability of any employee, agent or contractor of any Sub-processor who may have access to the Organisation Personal Data, ensuring in each case that such individuals comply with the DPA and are subject to confidentiality undertakings or professional or statutory obligations of confidentiality.

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, Hamish & Milo Ltd shall in relation to the Organisation Personal Data implement appropriate technical and organisational measures to ensure a level of security appropriate to that risk, including, as appropriate, the measures referred to in Article 32(1) of the GDPR.

In assessing the appropriate level of security, Hamish & Milo Ltd shall take account in particular of the risks that are presented by Processing, in particular from a Personal Data Breach.

Taking into account the nature of the Processing, the Company shall provide reasonable assistance to the Organisation by implementing appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the Organisation obligations to respond to requests to exercise Data Subject rights under the Data Protection Laws. The Company shall:

• Promptly notify the Organisation if it receives a request from a Data Subject under any Data Protection Law in respect of Organisation Personal Data; and
• Ensure that it does not respond to that request except on the documented instructions of Organisation unless required to do so by Applicable Laws to which the Company is subject, in which case the Company shall to the extent permitted by Applicable Laws inform Organisation of that legal requirement before the Company responds to the request.

The Company shall notify the Organisation without undue delay, upon the Company becoming aware of a Personal Data Breach affecting Organisation Personal Data. The Company shall co-operate with the Organisation and take reasonable commercial steps as are directed by Organisation to assist in the investigation, mitigation and remediation of each such Personal Data Breach.

The Company shall provide reasonable assistance to the Organisation with any data protection impact assessments, and prior consultations with Supervising Authorities or other competent data privacy authorities, in each case solely in relation to Processing of Organisation Personal Data by, and taking into account the nature of the Processing and information available to, the Company.

At the option of the Organisation, the Company will delete or return to the Organisation all Organisation Personal Data.

The Company will be entitled to retain the Aggregated Personal Data and any Organisation Personal Data that it has to keep, to comply with any applicable law or which it is required to retain for insurance, accounting, taxation or record-keeping purposes. Any Organisation Personal Data retained in accordance with this section ‎will be kept by the Company as a Controller.

Subject to this section, the Company shall make available to the Organisation on request all information necessary to demonstrate compliance with this DPA, and shall allow for and contribute to audits, including inspections, by the Organisation or an auditor mandated by the Organisation in relation to the Processing of the Organisation Personal Data.

Information and audit rights of the Organisation only arise under the previous section to the extent that the Organisation cannot itself access the information.

The Company may make or authorise a Restricted Transfer if it demonstrates or implements an appropriate safeguard for that Restricted Transfer in accordance with Data Protection Laws. Such appropriate safeguards may include the standard contractual clauses for the transfer of personal data which have been approved by the European Commission or such alternative body in the United Kingdom, in which case the Organisation will execute any documents relating to that Restricted Transfer which the relevant Company requires it to execute from time to time.

Each Party must keep this Agreement and information it receives about the other Party and its business in connection with this Agreement (“Confidential Information”) and must not use, or disclose that Confidential Information without the prior written consent of the other Party except to the extent that:

• disclosure is required by law;
• the relevant information is already in the public domain.

All notices and communications given under this Agreement must be in writing and will be delivered personally, sent by post or sent by email to the address or email address set out below, or such other address as notified from time to time by the Parties changing address.

Hamish & Milo Ltd
Data Protection Officer
4 Gaunts Business Centre
Petersham Lane
Gaunts Common
Wimborne
Dorset
BH21 4JT

The Organisation’s details are as provided on the Hamish & Milo website, the admin user being the main representative of the Organisation when the Company is contacted.