Thank you for trusting us with some information about you. We take that trust seriously and we want you to know how we use your information and why. If you have queries about how we use your data, or comments or questions about this Policy, please do email us. The email address to use is set out in section 2 below.
Policy updates: We keep this Policy under regular review, and this page may be updated from time to time. Please come back here to check the latest version. This Policy was last updated on the date given in the final box in the table in section 2 below.
2. Who are we?
|Trading Name||Wellbeing For Kids UK|
|Email address for official firstname.lastname@example.org|
|Data Retention Period(s)||7 years from the child’s 18th birthday|
|Card and payment processor (3rd party) names and their security policy links||https://www.izettle.com/gb/help/topics/487539-security-privacy/articles|
|Date this Policy last updated||31 May 2018|
3. Words with specific meanings
In this Policy, there are words and phrases that have a specific meaning or that we are using in a special way. They are:
any information about an identifiable living human being.
we “process” your personal data when we do anything with it, which might include: collecting, recording, organising, storing, adapting, altering, retrieving, using, combining, disclosing, or deleting it.
“special category data”
personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation, health, genetic or biometric data.
4. What this policy describes
This policy describes how we will collect and use personal data about you.
We process information about:
“Prospects” potential customers or referrers;
“Customers” who have bought goods or services from us;
“Suppliers”, “Associates” suppliers or potential suppliers of goods or services to us;
“Affiliates” who have signed up to our affiliate scheme (if we have one).
5. What information do we process, and WHY?
Most of the information we process comes from you. We process it so we can reply to you, and when you contact us again we know what you asked before, what you were sent, and what you told us.
Typically, we are collecting name, contact details, how we came across you, and background information from you or published by you on social media or freely accessible on the internet, on why you might be interested in our products or services or a relevant contact for our business.
If we email you individually using our own email system, or respond to an email sent to us at any of our business email addresses, a copy of that email will also be stored.
We do not routinely keep special category data. To the extent we hold this, it was supplied or made publicly available by you.
Once you buy something from us, we will collect information from you at the point of sale.
This will include the information we collect from Prospects (above). We collect your child’s name, age and date of birth, an emergency contact number, your child’s school and GP and relevant health details eg allergies so that if there is an emergency situation while you have left your child in my care I will be able to pass on those details to the emergency services. It will also include your email address, your phone number and postal address so we can provide what we have contracted to, invoice you and keep proper records of our business relationship.
We process your data to support the delivery the goods and services you have bought. We keep records of the goods/services provided to you, and information you give us, so we can support you when needed and advise you of any additional services you may need.
Financial and credit card details
We do not receive or store your credit card details. Credit card payments are handled by an external secure processor in accordance with their data security policies (see section 2, Table, above).
If you pay us by BACS or direct transfer, we know only what the bank tells us, which is usually the name of the person who paid us and how much and the reference number.
We do not routinely keep credit scores nor use credit reference agencies.
c. Supplier and Associates
We collect information on potential and actual suppliers and associates. This is mostly provided by you, but we do add to it the same kind of data we use for Prospects (see above).
If you become a supplier or associate we keep a copy of the contract between us and your bank details so we can pay you. We also keep a record of invoices/payments for accounting purposes.
We keep a record of the work you undertook for us/our clients along with any comments, reviews or suggestions about that work including complaints (if any) and their resolution.
This information is all needed to manage our customer relationships and our supply chain.
6. Data sharing – 3rd parties
We do not sell or exchange your personal data with organisations who may want to sell you something or use your data for research or other purposes.
We keep a list of the software platforms we use to run our business. If you would like a list of all the platforms we use, please email us (at the email address in section 2, Table, above).
We have an outsourced support team for our own business which may include Virtual Assistants, Web Designers, IT support, Sales and Marketing, Accounting and more. They have limited access to your data, where the service they provide to us means they need it.
For example, if our IT support wants to check the functionality of a laptop or back up, they may need temporary access to information that may include something about you.
For example, if we invoice you, our book keeper needs to process the information in the invoice.
Your information/advice is held in the strictest confidence. Our team are all contracted to strict confidentiality clauses.
7. Where is your data located?
The forms you fill out manually are stored securely.
Like most small businesses, we do not have any tailor-made software – we use mainstream packages for everything from our customer records, to email, to accounting.
This means that some of your data may be held in the EEA, and some may be held in services in the USA (with suitable data privacy shields) or elsewhere. We have picked mainstream suppliers with appropriate security standards.
8. Retention periods
Your information will be kept for the length of time set out in our retention period (see section 2, Table, above).
We need to keep customer information long enough to satisfy HMRC and our insurers. We keep information on prospective customers long enough to make our sales enquiry system effective.
9. Your rights
You have the right to know what information we are collecting on you, and to amend it if it is inaccurate.
If you feel for some reason we have information we should not be keeping, or it is out of date or otherwise wrong, please let us know and we will take appropriate action.
Most of the information we hold is not based on your individual consent but is based on our needing the information to run our business and provide our products and services.
If you want to know what information we have about you (if any) email us at the email address set out above and give us your name, email address(es) and we will happily do a search and let you know what information we hold on you and how we are using it/have used it.
You have a “right to be forgotten” – but that does have some legal limits to it. If you want us to remove information about you, let us know. If you have been a customer, we may not be able to remove all data as we will have to ensure that we can continue to comply with legal, accounting, taxation and our insurer’s requirements.
If you have a complaint about the way we are handling your information or how we have responded to a request for information or removal, you can take this up in the first instance by emailing us at the email address set out above.
If we can’t sort it out, the relevant supervisory authority for us is the Information Commissioner for the UK. You can contact them here.
12. ICO number