In order for My (after school) art club to provide our services we need to process a certain amount of data, some of which is personally identifiable.
My (after school) art club respects our customer and learner’s rights to data privacy and protection.
My (after school) art club is committed to ensuring that privacy is protected and we strictly adhere to the provisions of the General Data Protection Regulation ((EU) 2016/679) (GDPR) unless and until GDPR is no longer directly applicable in the UK, together with the Data Protection Act 2018, any national implementing laws, regulations and secondary legislation as amended or updated from time to time in the UK, and any successor legislation to GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (Data Protection Legislation).
Our customers’ Personal data is:
Processed lawfully, fairly and in a transparent manner in relation to the data subject
Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
Accurate and, where necessary, kept up to date
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures
We process data on the following categories of individuals:
Customers & prospective customers
Website visitors & online customers
Prospective staff (job applicants)
When customers place an order with us, we will ask you to provide certain personal information.
Please note that we require this information to be able to process your order and fulfil our contractual obligations towards the primary schools. We may be unable to fulfil the contract without your personal data.
If you purchase services, our third party payment provider (Paypal - you can view their privacy information here) will require additional personal information in order to process such payment (e.g. your home address). Please note that this information is not collected or stored by us.
Your personal information will then be used by us to provide you with the services you ordered and to communicate with you regarding the provision of those services. We also monitor website usage and provide statistics to third parties for the purposes of improving and developing our website and the services we provide via our website. Please note that any such statistics and/or information provided to third parties will be made on a confidential basis and will not include information that can be used to identify any individual.
Telephone calls, messages
We do not record calls. All calls and messages will be deleted after 3 months.
A cookie is a small piece of information which is automatically created by our website on your computer. Please note that cookies are harmless to your computer. Cookies are a useful way of remembering the choices you have previously made while visiting our website.
Please note that if you set your computer to not accept cookies, there may be certain features/areas on our website that you may not be able to use. It may be necessary to have cookies enabled in order to purchase or access online courses and materials.
Personal data provided by suppliers is only used for purposes related to the supply of goods or services for which we have contracted.
Staff (and 3rd party personal data they provide)
Information regarding the processing of staff data is available internally. Where staff provide 3rd party personal details, for the purposes of being an employment reference, emergency contact, or beneficiary of employment related benefits, these details are used for that purpose only, and processed under legitimate interests.
Prospective staff (job applicants)
Should you apply for an advertised job vacancy, or submit a speculative application, either directly or through a recruitment agency or other 3rd party, we will process your data solely for this purpose. We hold all applications on file for a period of 6 months, and may contact applicants regarding other similar opportunities potentially of interest that become available within this time.
We utilise a number of 3rd parties to support and enhance the delivery of our services. These are listed below.
Paypal – our online payments provider
WIX - our website builder provider
EE - telephone provider
Gmail - email service provider developed by Google
The GDPR provides you with the following rights:
The right of access
You can ask us to confirm that we process your personal data and provide access to and copies of the information we hold about you by contacting us at firstname.lastname@example.org
The right to rectification
If you believe personal data we hold about you is inaccurate or incomplete, or any of the information you provide to us changes, please let us know as soon as possible so that we can make the necessary changes to the information we hold for you on our database. If you wish to make any changes to your information, please contact us at email@example.com
The right to erasure
You have the right to ask us to delete personal data we hold about you. To request that your information is deleted, please contact us at firstname.lastname@example.org
For whatever reason, should you wish to lodge a complaint, as is your right, you can do by contacting Nathalie Titterton directly via one of the options on the website https://www.myafterschoolartclub.com/