Privacy Notice
Eastwood Community Playgroup Association, Western Approaches, Southend-on-sea, Essex SS2 6XY
Introduction
Personal data is protected in accordance with data protection laws and used in line with your expectations. This privacy notice explains what personal data we collect, why we collect it, how we use it, the control you have over your personal data and the procedures we have in place to protect it.
When we refer to “we”, “us” or “our”, we mean Eastwood Community Playgroup Association.
What personal data we collect at Eastwood Community Nursery, Eastwood Community Preschool, Eastwood Community Early Years
We collect personal data about you and your child to provide care and learning tailored to meet your child’s individual needs. Personal details that we obtain from you include your child’s: name, date of birth, address, and health, development and any special educational needs information. We will also ask for information about who has parental responsibility for your child and any court orders pertaining to your child.
Personal data that we collect about you includes: your name, home and work address, phone numbers, email address, emergency contact details, and family details.
We will only with your consent collect your national Insurance number or unique taxpayer reference (UTR) where necessary if you are self-employed and where you apply for up to 30 hours free childcare and early education. We also collect information regarding benefits and family credits. Please note that if this information is not provided, then we cannot claim funding for your child.
We also process financial information from you when you voluntarily contact us.
Where applicable we will obtain details of your child’s social worker, child protection plans from social care, and health care plans from health professionals and other health agencies.
We may collect this information in a variety of ways. For example, data will be collected from you directly in the registration form; from identity documents; from correspondence with you; or from health and other professionals.
Why we collect personal data and the legal basis for handling your data
We use personal data about you and your child to provide childcare and early education services and to fulfil the contractual arrangement you have entered. This includes using your data in the following ways:
- To support your child’s wellbeing and development.
- To effectively manage any special education, health or medical needs of your child whilst at the setting.
- To carry out regular assessment of your child’s progress and to identify any areas of concern.
- To maintain relevant contact about your child’s wellbeing and development.
- To contact you in the case of an emergency.
- To process your claim for free childcare and early education, if applicable.
- To enable us to respond to any questions you ask.
- To keep you updated about information which forms part of your contract with us.
- To notify you of service changes or issues.
- To enable you to access our Famly portal.
With your consent, we would also like to:
- Collect your child’s ethnicity and religion data for monitoring purposes.
- Record your child’s activities for their individual learning journal (this will often include photographs and videos of children during play).
- Sign you up for our free parent e-newsletter which provides resources and useful information for parents.
- Transfer your child’s records to the receiving school when s/he transfers.
If we wish to use any images of your child for training, publicity or marketing purposes we will seek your written consent for each image we wish to use. You are able to withdraw your consent at any time, for images being taken of your child and/or for the transfer of records to the receiving school, by confirming so in writing to the setting. You can also unsubscribe from receiving our parent e-newsletter by notifying the setting.
We have a legal obligation to process safeguarding related data about your child should we have concerns about her/his welfare.
Who we share your data with:
As a registered early years provider to deliver childcare and early education services it is necessary for us to share data about you and/or your child with the following categories of recipients:
- Ofsted, or the childminder agency when there has been a complaint about the childcare and early education service or during an inspection.
- Banking services to process chip and pin and/or direct debit payments.
- The local authority if you claim up to 30 hours free childcare.
- The governments eligibility checker as above, if applicable.
- Our insurance underwriter, where applicable.
We will also share your data:
- If we are legally required to do so, for example, by a law enforcement agency, court.
- To enforce or apply the terms and conditions of your contract with us.
- To protect your child and other children; for example, by sharing information with medical services, social services, or the police.
- If it is necessary to protect our rights, property, or safety or to protect the rights, property, or safety of others.
- With the school that your child will be attending, when they transfer, if applicable.
- If we transfer the management of the provision out or take over any other organisation or part of it, in which case we may disclose your personal data to the prospective seller or buyer so that they may continue using it in the same way.
Our nursery management and communication software provider may be able to access your personal data when carrying out maintenance task and software updates on our behalf. However, we have a written agreement in place which place this company under a duty of confidentiality.
We will never share your data with any organisation to use for their own purposes.
How do we protect your data?
We take the security of your personal data seriously. We have internal policies and strict controls in place to try to ensure that your data is not lost, accidentally destroyed, misused, or disclosed and to prevent unauthorised access.
Where we engage third parties to process personal data on our behalf, they are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
Where do we store your data?
All data you provide to us is stored on secure computers or servers located within the UK or European Economic Area. We may also store paper records in locked filing cabinets.
Our third-party data processors will also store your data on secure servers which may be situated inside or outside the European Economic Area. They may also store data in paper files.
How long do we retain your data?
- You and your child’s data, including registers are retained 3 years after your child no longer uses the setting, or until our next Ofsted, inspection after your child leaves our setting.
- Medication records and accident records are kept for longer according to legal requirements.
- Learning journeys are maintained by the setting and available at your request when your child leaves. Records are kept and archived in line with our data retention policy.
- In some cases (child protection or other support service referrals), we may need to keep your data longer, only if it is necessary to comply with legal requirements. We will only keep your data for as long as is necessary to fulfil the purposes it was collected for and in line with data protection laws.
Your rights with respect to your data
As a data subject, you have several rights. You can:
- request to access, amend or correct the personal data we hold about you and/or your child
- request that we delete or stop processing your and/or your child’s personal data, for example where the data is no longer necessary for the purposes of processing or where you wish to withdraw consent
- request that we transfer your and your child’s personal data to another person
If you wish to exercise any of these rights at any time please contact the manager at the setting by email, telephone or when you attend the setting.
How to ask questions about this notice:
If you have any questions, comments, or concerns about any aspect of this notice or how we handle your data please contact the manager at the setting.
How to contact the Information Commissioner Office (ICO):
If the manager is not able to address your concern, please contact Susan Bishop General Manager/Trustee
If you are concerned about the way your data is handled and remain dissatisfied after raising your concern, you have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or https://ico.org.uk/.
Changes to this notice:
We keep this notice under regular review. Any changes to this notice will be shared with you so that you may be aware of how we always use your data.
Cookies
We use cookies and Google Analytics to help us monitor how many people view each page and how they found our site. We can't see who you are or any of your personal details.
Cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.