We take your privacy seriously and in accordance with the General Data Protection Regulation, our lawful basis for collecting your data is Contract. In order to fulfil our contract with our clients, provide them with information about the classes they attend and opportunities for developing their children’s literacy, we hold and process personal data.
What information do we hold ?
We only ask for necessary information in order to contact you and ensure that we can fulfil our contract with you. These are:
-Your e-mail address
-Your phone number
-Your child’s first name
-Your child’s date of birth
-Any allergies that your child may have
We give you the option of providing additional information that helps to inform us about the service that we are providing and that may enhance your child’s learning experience. These are:
-The name and a contact number of someone we could contact on your behalf in an emergency
-Your child’s interests
How do we store your data ?
All data is stored securely on password protected devices via Google external storage. Passwords are changed regularly to ensure extra security of your data.
Your data is never shared with third parties in the exception of if we are asked by HMRC.
How long do we store your data for ?
Personal data is kept for the duration of time required for the purpose of collecting the data- this may be for personal tax purposes or until your child reaches an age that they are no longer eligible to come to classes. After such a period of time, the data will be deleted from any computer or device. If customers enquire with us but do not attend classes, we will only store their data for a term- unless they have specifically requested to be added to our waiting lists. An annual audit is carried out to ensure that all data that is no longer required for the purpose of processing is deleted.
We ask for your consent to process your data and to use your data for marketing purposes. We keep a record of the date your consent was given. You have a right to withdraw your consent at any time. You can withdraw your consent by
e mailing email@example.com. Requests to withdraw consent will be acted upon immediately.
If you refuse to give consent to give any personal data, you will still be able to attend classes providing that you have signed our disclaimer and User Agreement.
If we already hold some of your data because you have previously attended classes, we will e-mail you to ask for your consent to continue to keep your data and to contact you to give you information about any future classes. You will be asked to “opt in” to this service and you can “opt out” at any time by contacting us. If you do not opt in, your data will be removed. You can re-join at any time.
Future / potential customers
If you make an enquiry about any of our classes or ask to join our waiting list, we will ask for your consent to process your data. We will only keep your data and make contact with you if we have your permission. You can withdraw your consent at any time.
We ask permission to take photographs of your children and to use them on our Facebook page, our website or for other marketing purposes. You may withdraw your consent at any time for photographs to be used. We will act upon this immediately.
The right to be informed:
All individuals have the right to be informed of what data is collected, how it is used and how long it is kept- as outlined above.
The right to access, rectify and erase information:
Individuals have the right to access their information as well as the right to rectify and erase the information that we hold. To exercise these rights, please e-mail firstname.lastname@example.org and inform us verbally or in writing of this request. This will be acted on within one calendar month.
The right to object:
Individuals have the right to object to the collection of their personal information or its retention. We will stop processing for direct marketing as soon as objections are received either verbally or in writing.
The right to rectification, restrict processing and the right to data portability:
Individuals have these rights and the requests can be given verbally or in writing. We will act on the request within one calendar month.
The right to not be subjected to automated decision-making including profiling:
All individuals have these rights and we will not use your data in this way
How to report a breach
If you are concerned that there has been a breach of the use of your data, you can contact us directly in the first instance. We will keep a record of this. If you are unhappy with our response, further support can be found at https://ico.org.uk/for-the-public/raising-concerns/
We are registered with Information Commissioner’s Office
Data controller: Cathie Little
e-mail address: email@example.com