Dallow Community Nursery is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
Dallow Community Nursery may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25th May 2018.
The Nursery Press provides an online service to childminders, nurseries and schools for the purpose of tracking children’s development. This service can be accessed by parents, carers or whoever the setting decides to allow.
1.1 The Nursery Press takes the security and privacy of your data seriously. We need to gather and use information or ‘data’ about you as part of our business and to manage our relationship with you. We intend to comply with our legal obligations under the Data Protection Act 2018 (the ‘2018 Act’) and the EU General Data Protection Regulation (‘GDPR’) in respect of data privacy and security. We have a duty to notify you of the information contained in this policy.
1.2 This policy applies to current and former customers. If you fall into one of these categories then you are a ‘data controller’ for the purposes of this policy. You should read this policy alongside any other notice we issue to you from time to time in relation to your data.
1.3 The Nursery Press has measures in place to protect the security of your data and a Data Privacy Impact Assessment has been carried out.
1.4 The Nursery Press will only hold data for as long as necessary for the purposes for which you use our service.
1.5 In ICO terms, you are the ‘data controller’ for the purposes of your personal data as you own the data and we are the ‘data processor’. This means that you determine the data stored on our system.
1.6 This policy explains how The Nursery Press will hold your information. It also explains your obligations when obtaining, handling, processing or storing personal data on our system.
2 Data Protection Principles
2.1 Personal data must be processed in accordance with six ‘Data Protection Principles.’ It must:
- be processed fairly, lawfully and transparently;
- be collected and processed only for specified, explicit and legitimate purposes;
- be adequate, relevant and limited to what is necessary for the purposes for which it is processed;
- be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay;
- not be kept for longer than is necessary for the purposes for which it is processed; and
- be processed securely.
We are accountable for these principles and must be able to show that we are compliant.
3 How we define personal data
3.1 ‘Personal data’ means information which relates to a living person who can be identified from that data (a ‘data subject’) on its own, or when taken together with other information which is likely to come into our possession. It includes any expression of opinion about the person and an indication of the intentions of us or others, in respect of that person. It does not include anonymised data.
3.2 This policy applies to all personal data stored electronically.
3.3 This personal data will be provided to us by you by your manager or other colleagues.
3.4 We will collect and use the following types of personal data about you
- The name and address of your school or nursery.
- Your contact details such as name, address, e-mail address or telephone number
4 How we define processing
4.1 ‘Processing’ means any operation which is performed on personal data such as:
- Collection and recording
- adaption or alteration;
- retrieval, consultation or use;
- restriction, destruction or erasure.
This includes processing personal data which forms part of an automated processing.
5 How will we process your personal data?
5.1 The Company will process your personal data in accordance with our obligations under the 2018 Act.
5.2 We will use your personal data for:
- performing the services between us
We will not use your personal data for an unrelated purpose without telling you about it and the legal basis that we intend to rely on for processing it.
If you choose not to provide us with certain personal data you should be aware that we may not be able to carry out certain parts of the contract between us.
5.3 You may choose to store some or all of the following data on our system:
- Name and e-mail address of staff
- Names, dates of birth, addresses of children
- Name and e-mail address of parents/carers
- Photographs and videos
- Observations and reports
- Any other additional information that you may wish to store
6 Examples of when we might process your personal data
6.1 We have to process your personal data in order for you to set up an account with us or purchase goods.
7 Sharing your personal data
7.1 Sometimes we might share your personal data with our IT support in order for them to carry out our obligations with you.
7.2 We require our IT support to keep your personal data confidential and secure and to protect it in accordance with the law and our policies. They are only permitted to process your data for the lawful purpose for which it has been shared and in accordance with our instructions.
7.3 Legitimate purposes may include for example fixing faults on our system.
7.4 We do not send your personal data outside the European Economic Area.
7.5 When purchasing from our website, you will be directed to ECWID who will process your payment via card or Paypal. Other than invoice details, we do not hold any of that information ourselves.
8 How to deal with data breaches
8.1 We have robust measures in place to minimise and prevent data breaches from taking place. Should a breach of personal data occur then we must take notes and keep evidence of that breach. If the breach is likely to result in a risk to the rights and freedoms of individuals then we must also notify the Information Commissioner’s Office within 72 hours.
9 Your data subject rights
9.1 You have the right to information about what personal data we hold.
9.2 You have the right to access your own personal data by way of a subject access request.
9.3 You can correct any inaccuracies in your personal data by logging into your account.
9.4 You have the right to request that we erase your personal data if it is no longer necessary to process it for the purpose it was collected.
9.5 We would never use your personal data for the purposes of direct marketing.
9. 6 You have the right to be notified of a data security breach concerning your personal data.
9.7 You have the right to complain to the Information Commissioner. You can do this be contacting the Information Commissioner’s Office directly. Full contact details including a helpline number can be found on the Information Commissioner’s Office website (www.ico.org.uk). This website has further information on your rights and our obligations.
A cookie is a small file which asks permission to be placed on your computer\'s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website in question.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to Dallow Community Nursery.