Privacy Policy
MINI ME TIME
DATA PRIVACY POLICY
This Privacy Policy governs the manner in which Mini Me Time collects, uses, maintains and discloses information collected from parents / carers of attendees of Mini Me Time classes. This privacy policy applies to the website and all products and services offered by Mini Me Time.
In accordance with General Data Protection Regulations (GDPR) dated 25th May 2018, Mini Me Time have updated our Privacy Policy and reviewed our data flow procedures.
In some cases, personal data processing is out-sourced to a third party, however, this will only be done with prior consent unless law or our policies allow s sharing of data. All third party processors must comply with the same data protection standards.
Mini Me provides child centred activities specifically for 0-5’s. We work in conjunction with the local community, children's centres and schools to ensure that we work toward the five ‘Every Child Matters’ outcomes.
WHAT DATA IS COLLECTED?
Personal Data
tNames of both child and parent / carer
tAddress
tEmail address
tContact telephone number & emergency contact telephone number
tAge of child
tChild’s date of birth
Sensitive Data
tRelevant medical information
tPayment details held by third party booking system
tPermission for use of images either photos or videos held by third party booking system
WHERE DATA IS STORED
Data is stored in the following locations:
tPassword protected spreadsheet held by each instructor
tSign-in sheets – stored by each instructor in a secure location
tThird party booking system - Class4Kids. The data held on their systems is covered by Class4Kids Privacy Policy available here: https://www.class4kids.co.uk/privacy
tThird party email marketing system – MailChimp. The data held on their systems is covered by MailChimp Privacy Policy available here: https://mailchimp.com/legal/privacy/
tImages are held on Facebook (privacy policy - https://en-gb.facebook.com/full_data_use_policy ) Instagram (privacy policy - https://help.instagram.com/519522125107875 ), Mini Me Time website (covered by this Privacy Policy).
TIME HELD
tClass4Kids – 12 months from date of booking
tExcel spreadsheets – Two years after last booking
tMailChimp – Two years after last booking
tWebsite – indefinitely
tSign-in sheets – three months
SHARING DATA
Instructors have their own logins to Class4Kids and MailChimp and this is never shared with other instructors. Data held with third parties is only shared for the purposes stated above.
LAWFUL BASIS FOR THE COLLECTION, RETENTION AND USE OF DATA
Data is held under the following lawful bases:
tConsent – Consent is required for photo / video to be taken, held indefinitely and used across all social media platforms. This is obtained via Class4Kids at the time of class booking. For specific photo/video shoots, consent is gained at the time of the shoot. Email addresses to be used for marketing purposes.
tPerformance of a Contract – personal details such as email address and phone number are held in order to communicate with parents / carers regarding the classes that have been booked.
tVital Interest – medical details, child’s DOB and other sensitive information is retained by Mini Me Time in order to protect the individual’s vital interests e.g. to provide this information to paramedics
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Under GDPR, parents / carers are entitled to gain access personal information held by Mini Me Time. This is called a ‘subject access request’. Mini Me Time must respond to subject access requests (SARs) within one month of the date of the request and will provide:
tDescription of data held
tWhy the data is held
tHow long it will be kept
tWho has access to it
tA copy of the data in an intelligible form
CHANGES TO THIS PRIVACY NOTICE
When we will review our policy we will inform you of any changes as well as updating it on the web site.