in respect of TMB Day Nurseries Limited
https://www.themulberrybush.co.uk/ (Website) is brought to you by TMB Day Nurseries Limited, a company incorporated and registered in England and Wales under company number 08104481 whose registered office address is 51 Locks Road, Locks Heath, Southampton, Hampshire, England, SO31 6NS.
For the purposes of the General Data Protection Regulation and all other relevant legislation, TMB Day Nurseries Limited (‘we’ or ‘us’) is the ‘data controller’ (ie the company who is responsible for, and controls the processing of, your personal data).
Information that you provide
Personal information about you and your child will be obtained, whenever you complete forms on the Website or use one of our forms, whether it is an enquiry, application or ‘All About Me’ form. Personal data collected includes the following:
We will also obtain personal information you provide when you send us feedback, post material, contact us for any reason and by any medium, sign up to a service, share information via The Mulberry Bush social media functions, complete a survey or report a problem with the website.
We may ask you to provide sensitive personal data from time to time. This includes the nationality, religion and medical history of your child. If we request such data, we do so for at least one of the following reasons, outlined in the ‘lawful basis’ section.
We may retain a record of any contact you make with us.
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
Occasionally we may receive information about you from other sources (such as credit reference agencies), which we will add to the information we already hold about you in order to help us supply our services to you.
Device information: We may also collect information about your device each time you use the Website. For example, we may collect information on the type of mobile device that you are using and its unique device identifier (for example, the IMEI number, the device’s mobile phone number, or the MAC address of the device’s wireless network interface), the type of mobile browser that you are using, the mobile operating system that you are using, mobile network information and the time zone setting.
Information on your device: We may also collect information which is stored on your device each time you use the Website. For example, we may collect contact information, login information, friends lists, photos, videos and other digital content with your prior consent.
Location data: We may also collect information to determine your location using GPS technology or such other location tracking software we may use from time to time. Some of the features of the Website will require access to such location data to work. If you would like to use any such feature, you will be asked to consent to provide such location information. You can withdraw your consent to providing this information at any time by sending an email to firstname.lastname@example.org.
We use your personal data for the following purposes:
Under laws that are designed to protect the data you provide, we need to have what is called a lawful basis or ground each time we use, share or otherwise process your personal data.
We may also need to process the data you provide us with to comply with any legal obligations which may be applicable. Likewise, we may process the data you provide us with where this is in the public interest or it is to protect your vital interests, but this will only be in rare circumstances.
In most cases, our processing of the data you provide us with is necessary for the performance of our services to you.
Certain uses of the data you provide us with, or other processing activities, may not be strictly necessary to perform our services to you, however, they may be necessary for the purposes of our legitimate interests or the legitimate interests of a third party. They may also be in your interests.
When we say ‘legitimate interests,’ we mean our (or a third party's) interests in enabling us to provide our services to you as efficiently and securely as possible. For example, we may choose to use a third party to store the data you have provided us with; we may do this in part because our use of that service means that the data you have provided us with is more secure.
When processing sensitive categories of data, the lawful grounds are more specific.
If you have provided your consent, we may share your personal data with organisations who are our business partners and we or they may contact you (unless you have asked us or them not to do so) by mail, telephone, sms, text/picture/video message, email, about products, services, promotions, special offers, charitable causes that may be of interest to you. If you prefer not to receive any further direct marketing communications from us or our business partners, you can opt out at any time. See further 'Your rights', below.
We may disclose your personal data to:
We will use technical and organisational measures to safeguard your personal data, for example:
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.
We will make reasonable efforts to ensure that the data you provide us with is not transferred outside the European Economic Area (EEA). Where we use data servers that may transfer data out of the EEA we will take steps to ensure adequate protections are in place to ensure the security of the information you provide us with and give you remedies in the unlikely event of a security breach.
All information you provide to us is stored with secure data processors for the purposes of storing the data you provide, accounting purposes and social media purposes for example. A copy of the information you provide is also stored securely on our internal server and computers where access is restricted.
Please note that we review all processors we utilise and ensure that there are adequate safeguards in place to protect the data you provide, such as adherence to binding corporate rules or compliance with the EU-US Privacy Shield Framework, which is a mechanism that ensures compliance with EU data protection requirements when transferring personal data from the European Union to the United States. You can learn more about Privacy Shield here: https://www.privacyshield.gov/welcome
We may monitor and record communications with you (such as emails) for the purpose of quality assurance, training, fraud prevention and compliance.
You can change your mind, remove or amend your consent at any time.
To revise your consent, access, amend or remove your records or assert any of your rights set out above, you should send your request in writing to us at email@example.com.
These rights may not apply in all situations or in relation to all types of processing.
You will need to provide proof of identity and address (eg a copy of your driving licence or passport, and a recent utility or credit card bill); and specify the personal data you want access to, amended or removed.
We will store your data for as long as necessary for the purpose of processing, for example up to the age of 21 or 24, depending on the data. The data may be deleted in the following circumstances:
TMB Day Nurseries Limited operates a policy dedicated to ensuring the privacy and safety of children and their data. Access to a child’s information is restricted and can only occur following identification and proven relationship with the child.
Furthermore, TMB Day Nurseries Limited will obtain carers’ permission before using photographs of the children online. This consent can be amended at any time.
We work with third-party suppliers who may also set cookies on our Website, for example Google, Facebook, Twitter, YouTube and Adobe Flash Player which we use to display video content. These third-party suppliers are responsible for the cookies they set on our site. If you want further information please go to the website for the relevant third party. You will find additional information in the table below.
The table below is designed to provide more information about the cookies we use and why:
|Name of cookie||Purpose of the cookie|
|_ga||This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites’ analytics reports.
Expires: 2 years.
|_gid||Used to distinguish users.
Expires: 24 hours.
|_gali||Used to distinguish users.
Expires: 1 minute.
|_gat||This cookie is used to throttle the request rate - limiting the collection of data on high traffic sites.
Expires: 1 minute.
If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of the Website. For further information about cookies and how to disable them please go to: www.aboutcookies.org or www.allaboutcookies.org.
We welcome your feedback and questions. If you wish to contact us, please send us an email at firstname.lastname@example.org, call us on 01489 583 130 or you can write to us at The Mulberry Bush, 51 Locks Road, Locks Heath, Southampton, SO31 6NS.
We may change this Policy from time to time. You should check this policy frequently to ensure you are aware of the most recent version that will apply each time you use the Website.
The Data Protection Supervisory Authority in the UK is the Information Commissioners Office. Should you have any complaints about the way we handle your data, you may direct them to the ICO. More information on the ICO can be found on their website here: https://ico.org.uk