If you are a customer of Little Nightingales, or have communicated with us through our website, we hold a small amount of information about you which falls under the category of Personal Data. Little Nightingales is the Data Controller of this information, under the EU General Data Protection Regulation.
What we hold and why
We hold only the minimum amount information we need to provide services to you, and which you have normally given to us when you start coming to the group. This is likely to be:
- Email address
- Telephone number
- Child’s name
- Child’s date of birth
- Payment dates (no account details)
- Subscription start dates
- Photographic consent
- Email access tracking (via third party)
The purposes of holding this information are:
- Provision of the services to you (performance of a contract/legitimate interests)
- Administration (legitimate interests)
- Regulatory compliance
- Marketing (with consent or ‘soft opt-in’)
You can withdraw marketing consent at any time by emailing Wiltshire@little-nightingales.co.uk or clicking the unsubscribe link in one of our emails. Please note that if you unsubscribe we will continue to hold a small amount of personal data for compliance purposes (to ensure that we don’t accidentally mail you again).
Who the information is shared with
We do not share your information to any parties. We do use social media (Facebook and Twitter) but only share photos of you on social media with your consent – we also seek consent prior to sharing photos with the media. Facebook are based in the US, and have their own Privacy policies – we are not responsible for Facebook’s use of data that you place on the site. Please advise us if you do not wish photos to be placed on social media.
We use Mailchimp for sending out newsletters; all emails from this source carry information on how to unsubscribe. Doing so will not affect your ability to access our services, though it will mean we cannot mail you information about the new term and events we’re running. Mailchimp data is hosted (which means held) in the US where privacy law is different. However, Mailchimp have signed up to Privacy Shield, which provides an adequate level of protection in EU law, and carry additional security certifications, so you can be confident in the protection this offers.
How long we keep your data
We will only keep your data for as long as we need it. Where you stop coming to our services, we will hold your information for no more than 6 months. Where you are subscribed to our marketing list, we will stop emailing you if you have not opened any of our last 10 emails, though a small amount data will continue to be held for compliance purposes for up to 1 year.
You have various rights under the GDPR:
- To object to an aspect of processing;
- To ask us to correct your data;
- To ask us to erase your data;
- To ask us to provide you with a copy of your data.
You can make requests to us on any of these by emailing firstname.lastname@example.org. You can also make complaints on any aspect of our data protection practice to the Information Commissioner’s Office www.ico.org.uk, although we would ask that you contact us first so that we can try and resolve things for you.
Data Protection Officer
Little Nightingales is not required to appoint a Data Protection Officer, although we do have access to qualified data protection advice. If you have any queries, please do contact us at the email address above.