1.2 This site is owned by Madresfield Early Years Centre Ltd whose business address is situated at Hayswood Farm, Madresfield, Malvern, Worcestershire, WR13 5AA
1.3 Our company registration number is 03597604. We are the ‘data controller’ of any personal information you provide to us.
1.4 We are registered as a Data controller with the Information Commissioners Office. Our registration number is: ZA650036
1.5 As a Data Controller, we will take all the necessary steps to comply with the GDPR and Data Protection Act 2018 and relevant subordinate legislation when handling any personal data which you may provide to us. This includes ensuring that data is:
i) Fairly and lawfully processed
ii) Processed for limited purposes
iii) Adequate, relevant and not excessive
iv) Accurate and Secure;
v) Not kept longer than necessary
vi) Processed in accordance with your rights
vii) Not transferred to countries outside the European Economic Area.
1.7 The Data Processing contact for our business is Cath Glover who you can contact via the postal address above or by email at email@example.com if you have any queries regarding this policy.
1.8 This Online Privacy information is a precis of our detailed written policies which are held at our business premises. Please contact us if you require further information regarding our data protection compliance procedures.
2.1 We are committed to protecting your personal privacy and, in accordance with relevant data protection laws, we uphold strict security procedures for the collection, storage, use and disclosure of your personal information.
2.2 We have described below the personal information we may gather about you, the purposes we will hold it for and the limited categories of people to whom we may disclose it.
3. What information do we collect and how may we use it?
3.1 All visitors to the site:
(a) During your visit to our site, we will only collect personal information that you choose to provide, if for example you: contact us with an enquiry or request us to provide you with further information
(b) If you share other people’s data with us, for example if you order on behalf of another person, it is your legal responsibility to check that person consents to you providing their information to us.
4. We may use the information held about you in the following ways:
4.1 To administer any account you have with us
4.2 To perform our contractual obligations to you
4.3 To respond to your queries and requests
4.4 To communicate with you
4.5 To provide you with the information, products and services requested from us
4.6 To make improvements to the service we provide you
4.7 We also reserve the right to disclose your personal information where we are required to do so by law, such as to assist in any disputes, claims or investigations relating to your account or contract with us, and to detect and prevent fraudulent transactions.
4.8 E-mail correspondence with Ourselves via our website and email addresses accessible through, or obtained from, this site may be recorded and/or monitored.
5. How do we store and protect your data?
5.1 We take the security of your information seriously and we will endeavour to ensure that the personal information you submit to us is kept private and secure.
5.2 Data we receive and process is held by us in secure electronic devices and separate back up devices and servers.
5.3 Personal Data may also be held in encrypted 3rd party ‘Cloud’ Servers.
5.4 Further encrypted back ups of data may be held securely in locations which are also subject to physical security at their location.
5.5 We will not sell, rent or otherwise disclose the personal information you provide to us through the site to third parties (other than as listed below) unless we are required to do so by law.
6. Third parties who provide services on our behalf
6.1 We may share your personal information with certain third parties who provide services on our behalf.
6.2 Such 3rd Parties only have access to the personal information they need to perform those services.
6.4 If you have contracted with us we will share data only to the extent necessary for the performance of the contract, otherwise we will obtain specific consent from you before sharing your data.
6.5 The third parties who provide services on our behalf fall into the following categories:
i) Our partners providing logistics and external service support.
ii) Our business partners or advisors for the purposes of completing or investigating a transaction with you.
iii) Marketing agencies appointed to provide services to us
iv) The service providers operating this site on our behalf
v) Accountants, auditors, law firms, payment processors, information technology support providers
7. How long do we store your data?
7.1 We will not keep your data for longer than is necessary for the relevant purposes set out in our Company Compliance Policy.
7.2 Where you have purchased a product or service from us, we will hold your relevant personal details to enable us to provide after-sales services and to administer the contract.
8. Your rights
8.1 Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA) you have a number of rights with regard to your personal data.
8.2 You have the right to request from us access to and rectification or erasure of your personal data; the right to restrict processing; the right to object to processing as well as in certain circumstances the right to data portability.
8.3 Please note we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
9. Lawful bases for data processing
9.1 We hold and process your data by lawfully allowed means, these include:
i) Your Consent: Consent is usually given by yourself when you contact us via the Website or personally when we discuss products or advice with you.
ii) Contractual obligations: This occurs when you purchase products or services from us.
iii) Legal Obligation: When the processing is necessary for us to comply with the Law.
iv) Vital Interests: When the processing is necessary to protect someone's life.
v) Public Task: When the processing is necessary for us to perform a task in the public interest or for an official function and the task or function has a clear basis in Law.
vi) Legitimate Interests: When the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
10. Children’s data
10.1 Our site is not directed at children and should not be accessed by them.
10.2 We will not knowingly collect information from minors without their parent's or guardian's consent.
11. Third Party Websites
11.1 From time to time our site may contain links to and from the websites of our suppliers or other third party sites.
11.2 If you visit any of these sites please note they have their own privacy policies and you should check these before submitting any personal data. We cannot accept any responsibility or liability for these policies.
12. Data Access
12.1 You have rights of access to the data we hold about you.
12.2 There is no charge for this service. As soon as we are satisfied as to your identity, we will send you, within one Month a copy of all the data we hold relating to you.
12.3 Please contact us if you believe that any personal data or information which we hold about you is incorrect or incomplete. Any information or data which is found to be incorrect will be corrected as soon as practicable.
12.4 Please contact us if you wish to have your personal data removed entirely from our systems. As soon as we are satisfied as to your identity and the data is not required to be kept for any other lawful reason or purpose it will be removed from our systems forthwith. If you so wish, your Data is provided to you electronically in a commonly used format such as email.
12.5 To exercise any of your rights contact our Data processing Contact whose details are given above
12.6 If you are unhappy with any of the responses given to you by us you may complain about us to the Government Regulator at the Information Commissioners Office on 0303 123 1113 or through their website www.ico.org.uk.
13. Changes to this policy.
13.1 There may be developments in how we use your data according to changes in the Law.
13.3 Any revised terms shall take effect as at the date of posting.
13.4 If you don’t find your concern addressed here, feel free to contact us by emailing firstname.lastname@example.org