Bangor on Dee Childcare – Privacy Policy.
Introduction
We at Bangor on Dee Childcare are committed to safeguarding the privacy of all our staff and service users; in the policy we explain how we will handle your personal data. This policy covers the collection, processing, controlling, and other use of personal data under the Data Protection Act 1998 (“DPA”) and the General Data Protection Regulations (“GDPR”)
For purposes of the DPA and GDPR we are the data processor and data controller and any enquiry regarding the collection and processing of your data should be address to the Data Protection officer at our address Bangor on Dee Childcare, Ysgol Sant Dunawd, Sandown Road, Bangor on Dee, Wrexham, LL13 0JA.
Our legal grounds for using your information:
This section contains information about the legal basis that we are relying on when handling your information.
Legitimate Interest:
This means that the processing is necessary for legitimate interests except where the processing is unfair to you. The setting relies on legitimate interests for most of the ways in which it uses your information.
Specifically, the setting has a legitimate interest in:
Providing educational and care services to your child;
Safeguarding and promoting the welfare of your child (and other children);
Promoting the objects and interests of the setting. This includes making sure we are able to enforce our rights against you, for example, so that we can contact you if unpaid fees are overdue;
Facilitating the efficient operation of the setting; and
Ensuring that all relevant legal obligations of the setting are complied with.
Necessary for a contract:
We will need to use your information in order to perform our obligations under our contract with you. For example, we need your name and contact details so that we can update you on your child’s progress and so that we can contact you if there is a concern.
Legal Obligations:
Where the setting needs to use your information in order to comply with legal obligation, for example, to report a concern to Safeguarding Services. We may also need to disclose information to third parties such as the local authorities where legally obliged to do so.
Vital interests:
For example, to prevent someone from being seriously harmed or killed.
The setting must also comply with an additional condition where it processes special categories of personal information. For example, ethnic origin and health information.
We may ask for your consent to use your information in certain ways. If we ask for your consent to use your personal information you can take this consent at any time. Any use of your information before you withdraw remains valid.
Categories of children’s information that we collect, hold and share include:
∙ Personal information (such as name, date of birth, contact details and parental/carer information including names and telephone numbers)
∙ Characteristics (such as ethnicity, language, nationality, country of birth)
∙ Attendance information (such as sessions attended, number of absences and absence reasons)
∙ Foundation phase assessment outcomes
∙ Additional learning needs information
∙ Relevant medical information
Collecting children’s information whilst the majority of children information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain children’s information to us or if you have a choice in this.
How long do we keep your information?
We keep your information for as long as we need to in order to educate and care for your child. We will keep some information after your child leaves our setting, for example, so that we can find out what happened if you make a complaint.
In exceptional circumstances we may keep your information for a longer time than usual but we would only do so if we had a good reason and only if we are allowed under Data Protection Law. * Retention of records will be kept in a locked archive cupboard for the period of up to 4 years and for Safeguarding records until the child reaches the age of 21.
Who do we share pupil information with?
In accordance with our legal obligations, we may share information with the local authorities, for example, where we have any safeguarding concerns.
On occasion we may need to share information with the police.
We may use advisors to assist us in fulfilling its obligations to help run the setting properly. We might need to share your information with them if this is relevant to their work.
We may share some information with our insurance company, where there is a serious incident at the setting.
If your child leaves us to attend another setting we may need to provide that setting with information about you or your child. For example, details of family circumstances for safeguarding reasons.
We may share information about you with others in your family, such as another parent where this is part of our obligation to take care of your child, as part of our wider legal and regulatory obligations.
We may need to share information if there is an emergency for example, if your child is hurt whilst on our premises.
Why we share pupil information?
We do not share information about our service users with anyone without consent unless the law and our policies allow us to do so. We share children’s data with early education team (Wrexham CBC) on a statutory basis. This data sharing underpins the settings funding and educational policy and monitoring.
Requesting access to your personal data under data protection legislation
Parents and children have the right to request access to information about them that we hold.
To make a request for your personal information, or be given access to your child’s records, contact Ms Nicola Callan, Data Protection Officer.
What decisions can you make about your information?
From May 2018 data protection legislation gives you a number of rights regarding your information. Some of these are new rights whilst others build on your existing rights. Your rights are as follows:
If information is incorrect you can ask us to correct it;
You can also ask what information we hold about you and be provided with a copy. We will also give you extra information, such as why we use this information about you, where it came from and what types of people we have sent it to;
You can ask us to delete the information that we hold about you in certain circumstances. For example, where we no longer need the information;
You can ask us to send you, or another organisation, certain types of information about you in a format that can be read by computer;
Our use of information about you may be restricted in some cases. For example, if you tell us that the information is inaccurate we can only use it for limited purposes while we check its accuracy;
You can object to direct marketing
Claim compensation for damages caused by breach of Data Protection regulations.
Further information and guidance:
Like other organisations we need to keep your information safe, only use it for what we said we would, destroy it when we no longer need it and most importantly – treat the information we get fairly.
If we need to change this Privacy Notice we will post those changes on the notice boards and emails so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it.
You have a right to complain to the ICO if you have any concerns in regards to the way your private data is collected or stored.
By providing us with personal information about you and your child you agree that we may collect and use your information in accordance with this Privacy Notice.
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/ Contact
--------------------------------------------------------------------------------------------------------------------------------------
Please Sign, date and print name to acknowledge you have read the privacy policy and are happy with the way we will control and process your data.