Privacy Policy

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes the following: For parents/carers – full name, title, relationship to child attending programmes and sessions. For children: full name, date of birth.

• Contact Data includes home address,  email address and telephone numbers (home and mobile).

• Financial Data includes bank account and payment card details.

• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.

• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

• Profile Data includes your username and password if applicable, and any enquires made by you.

• Usage Data includes information about how you use our website, products and services.

• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

• Video/Photography Data includes video clips and photographs of your child for the purposes of creating marketing and promotional materials for us to promote our forest school and nature sessions. This personal data will only be collected where we have your express, written consent.

 

Special category data

​

We need to collect the following sensitive data about your child in order to ensure your child, attending our sessions, receives the best care:

• dietary requirements

• details of any health issues or medical concerns

 

The sensitive data listed above is collected as part of our business activities to support our services towards the children in our care.

​

Methods of processing

​

We take appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the personal data.

​

The personal data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In some cases, the personal data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers) appointed, if necessary, as Data Processors of us. A list of these parties may be requested from us at any time.

​

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

​

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

​

How we use your personal data

​

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• You have given your consent for one or more specific purposes;

• provision of personal data is necessary for the performance of an agreement with your and/or for any pre-contractual obligations;

• processing is necessary for compliance with a legal obligation to which we are subject;
  processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us;

• processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

​

Retention time Personal data shall be processed and stored for as long as required by the purpose they have been collected for.

 

In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

​

Opting out

​

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you; or by contacting us at any time.

​

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase.

​

​

Your legal rights

You have the right to:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

• Request restriction of processing of your personal data.

​

If you wish to exercise any of the rights set out above, please contact us at wildchildcic@outlook.com

​