Privacy Notice

Who we are
We are Oakhurst Guardian Limited T/A The Croft Day Nursery. Our company is incorporated in England and Wales and registered with Companies House. Our registered office is at Oakhurst House, West Street, Hambledon PO7 4RW. In this notice Oakhurst Guardian Ltd is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).. A reference to ‘you’ or ‘your’ means customers, prospective customers, students and apprentices, employees, job applicants, subcontractors and suppliers and general website visitors.

What information we collect
The type of business relationship you have with us will determine the specific information we will need to collect from you. The records will be created during the course of us providing a service to you or your dependents.

• • Personal information
    This is typically the information you voluntarily provide to us which is necessary to perform the service that you are accessing (whether by telephone, online or in person). Depending on the type of service accessed, the information requested may include your name and that of your dependant or child, your email address, your postal address, your telephone number, dates of birth or employment details. If you are using our online payment platform, you will need to enter credit or debit card details or other payment details. If you are applying for a job or an apprenticeship or learnership you will also need to provide your CV (and relevant information in it) or details of your education or your qualifications transcripts.
  • Personal information about other individuals
    If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can: give consent on his/her behalf to the processing of his/her personal data; receive on his/her behalf any data protection notices; and give consent to the transfer of his/her personal data to our affiliates. In so far as required by applicable data protection laws, you must ensure that beforehand you have their explicit consent to do so and that you explain to them how we collect, use, disclose and retain their personal information or direct them to read our this Policy.
  • Personal information provided by third parties
    Occasionally we may receive information about you from other sources (such as credit reference agencies or Disclosure and Barring Service). We may enhance personal information we collect from you with information we obtain from third parties that are entitled to share that information in order to help us provide our services, improve or personalise our service to you.
  • Sensitive personal information
    Our websites do not collect sensitive personal information. Sensitive personal information includes information relating to:
    • your ethnic origin;
    • your political opinions;
    • your religious beliefs;
    • whether you belong to a trade union;
    • your physical or mental health or condition;
    • your sexual life; and
    • whether you have committed a criminal offence.

How we collect information
To the extent permissible under applicable data protection and privacy laws, we collect information about you and any other party whose details you provide to us when you:

• • register with us, fill out our enrolment form, apply for a job, and use our price quota or purchase products or services from us. We also collect information when you send us feedback, post material to our website, complete customer surveys or participate in competitions or participate in any other interactive areas that appear on our website. This may all or any of the information described in Section 2 above;
  • interact with us using social media; and
  • contact us offline, for example by telephone, fax, SMS, email or post.

We will also collect your information where you only partially complete and/or abandon any information inputted into our website and/or other online forms and may use this information to contact you to remind you to complete any outstanding information and/or for marketing and aftersales purposes.

Our websites may contain technology that enables us to:

1. • obtain information relating to any technical errors or other issues with our website;
   • collect information about how you and users use the functions of the features of our website; and
   • gather statistical information about the operating system and environment from which you access our services.

In the future we may also develop and install technology that collects information from your devices (including mobile devices) and applications you or your users use to access and use any of our websites, applications or services. (for example, we may collect the device’s location information and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your IP address, your browsing history and your web log information) and we will ask for your permission before we do so. We may do this using cookies or similar technologies (as described in below).

You can manage your privacy settings within your web browser such as Google Chrome or Firefox at any time by following their instructions.

How we use your information
We limit the collection of personal information to what is necessary to provide you with high quality services, to support your specific needs and requests, and to meet our legitimate business interests in connection with the services. Below we have highlighted the reasons for the collection of your information:

• • to respond adequately to your requests for services or information;
  • to provide services to individuals, families and employers that includes child care and adult care, education (general and accredited education), wellbeing, work/life, and consulting;
  • to provide a safe, healthy, and successful environment for those to whom we provide services;
  • to provide resource material/information regarding our services and areas of interest to our customers, such as parenting, child care, adult care, education, wellbeing, and work/life balance, among other things;
  • to aid in the administration of our services to our customers;
  • to administer first aid, emergency and other medical care, when necessary;
  • to comply with laws, and government regulations/standards;
  • to support our business purposes and functions related to the services, such as education, training, curriculum, communication, administration, and record-keeping;
  • to provide information and reports and other information to employers offering our apprenticeship services to its workforce;
  • to facilitate and process payments for the services;
  • to fulfil tax, reporting, and other financial requirements and obligations;
  • to compare information for accuracy and to verify it with third parties;
  • to administer employee payroll, benefits, tax/regulatory compliance and other record keeping and administration requirements;
  • to consider applications for employment and accredited education;
  • to manage our relationship with you (for example, customer services and support activities);
  • to monitor, measure, improve and protect our content, website, applications and services and provide an enhanced, personal, user experience for you;
  • to undertake internal testing of our website, applications, systems and services to test and improve their security and performance. In these circumstances, we would anonymise any information used for such testing purposes;
  • to contact you to see if you would like to take part in our customer research (for example, feedback on your use of our products and services);
  • to deliver targeted advertising, marketing or information to you which may be useful to you, based on your use of our services see ‘Marketing’ section below; and
  • to deliver joint content and services with third parties with whom you have a separate relationship (for example, social media providers).

What are our lawful means of collecting data
Where you provide us with your personal information in any of the ways described in section 2 below, you agree that we may collect, store and use the information to (a) perform the service you have requested, (b) for our legitimate business interest for processing; or (c) based on your consent, which you may withdraw at any time, as described in this Website Privacy Policy. In light of the nature of our services, as well as applicable laws and regulatory requirements, if you choose to withhold some types of personal information or opt out of providing it, we may not be able to provide the services requested.

Your information and your rights
When you give us your information or when we process your data, you have the following rights under applicable laws:

• • the right to be told how we use your information and obtain access to your information;
  • the right to have your information rectified or erased or place restrictions on processing of your information;
  • the right to object to the processing of your information e.g. for direct marketing purposes;
  • the right to have any information you provided to us returned to you in a structured, commonly used and machine-readable format, or sent directly to another company, where technically feasible (“data portability”);
  • where the processing of your information is based on your consent, you have the right to withdraw that consent at any time and in the same manner used to gain you consent;
  • the right to object to any decisions based on the automated processing of your personal data, including profiling; and
  • the right to lodge a complaint with the supervisory authority responsible for data protection matters. In the UK, this would be with the Information Commissioner’s Office.

If you request a copy of your information in a ‘Subject Access Request’ you may be required to pay a statutory fee depending on the volume of information you are requesting. Please see Appendix 1 at the end of this document for our Subject Access Request Form.

If we hold any information about you which is incorrect or if there are any changes to your details, please let us know so that we can keep our records accurate and up to date.

Please remember that if you withdraw your consent to the use of your personal information for purposes set out in this policy, we may not be able to provide you with access to all or parts of our website or services.

Sharing your information
We may share your information with:

• • any company within the Oakhurst Guardian Group;
  • our software service providers and agents (including their sub-contractors) which process information on our behalf (e.g. internet service and cloud based platform providers, payment processing providers and those organisations we engage to help us send communications to you such as MailChimp), so that they may help us to provide you with the services you have requested or which we believe is of interest to you;
  • third parties used to facilitate payment transactions, for example clearing banks and financial institutions;
  • third parties where you have a relationship with that third party and you have consented to us sending information (for example social media sites or other third party application providers);
  • credit reference and fraud prevention agencies;
  • regulators to meet our legal and regulatory obligations;
  • law enforcement agencies so that they may detect or prevent crime or prosecute offenders;
  • any third party in the context of actual or threatened legal proceedings, provided we can do so lawfully (for example in response to a court order);
  • our own professional legal advisors, accountants and auditors for the purpose of seeking professional advice or to meet our audit responsibilities;
  • another organisation if we sell or buy (or negotiate to sell or buy) any business or assets;
  • another organisation to whom we may transfer our agreement with you; and
  • Government departments where reporting is mandatory under applicable law.

We may share non-personally identifiable information about the use of our website, products or services publicly or with third parties but this will not include information that can be used to identify you.

Social media and other websites
If you follow a link from our website to another site or service, this notice will no longer apply. We are not responsible for the information handling practices of third party sites or services and we encourage you to read the privacy notices appearing on those sites or services. Our websites may enable you to share information with social media sites or to connect your social media account. Those social media sites may automatically provide us with access to certain personal information retained by them about you (for example any content you have viewed). You should be able to manage your privacy settings from within your own third party social media account(s) to manage what personal information you enable us to access from that account.

Marketing
From time to time, we may use your information to contact you with details about our products and services which we feel may be of interest or benefit to you. We may also share your information with our group companies and carefully selected affiliates third parties so that they (or we) may contact you with information about products or services which we feel may be of interest or benefit to you. We may wish to contact you for this purpose by telephone, post, SMS or email. You have the right at any time to object and stop us from contacting you for marketing purposes. You may also request at any time that we do not share your information with third parties referred to in this paragraph. If you wish to exercise these rights you can do so by contacting us via email to info@croftnurserypreview-co-uk.stackstaging.com. Or you can call or write to us using the contact details provided on this website. You can also unsubscribe from any marketing emails using the links provided in the emails we send to you.

Internet service providers and search engines
Your information may be inadvertently shared with third party internet service providers and search engines such as Google and Firefox, as a consequence of our use of those platforms to run our website. You can control your privacy setting on the relevant provider’s platform and you should consult the third party’s help/support centre for more information.

How long we keep your information
We will retain your personal information for the duration of our business or contractual relationship and afterwards for as long as is necessary and relevant for our legitimate business purposes, or in accordance with the laws which are applicable to our service industry. Where we no longer need your personal information, we will dispose of it in a secure manner.

Security and storage of information
Electronic information:

• • although some information may remain on electronic storage data systems at the group company where originally provided, the electronic personal information we collect may also be stored at in the cloud or at dedicated hosting centres in the United Kingdom. These hosting centres are also subject to applicable data protection laws and standards.

Hardcopy information:

• the hardcopy of personal information we collect will be stored securely and in accordance to applicable industry standards and safeguards.

We will keep your information secure by taking appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage. We will do our best to protect your personal information but we cannot guarantee the security of your information which is transmitted to our website or services or to other website, applications and services via the internet or similar connection.

If you believe your information has been compromised, please contact us at info@croftnurserypreview-co-uk.stackstaging.com. Or Contact the Information Commissioner’s Office directly.

Google Analytics and ‘cookies’
Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the websites. The information generated by the cookie about your use of the websites (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the websites, report on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using our websites or services you consent to the processing of data about you by Google in the manner and for the purposes set out above. To find out more, see “How Google uses data when you use our partners’ sites or apps”, at google.com/policies/privacy/partners/.For further information on cookies generally visit www.aboutcookies.org or www.allaboutcookies.org.

Transfers outside of the European Union and European Economic Area
Personal information in the European Union is protected by data protection laws but other countries do not necessarily protect your personal information in the same way. Our website and some of our services or parts of them may also be hosted in the outside of the European Union or EEA and this means that we may transfer any information which is submitted by you through the website outside the European Union and EEA to other territories. We may use service providers based outside of the European Union or EEA to help us provide our website and services to you (for example, platform who help us execute mass communication). We take steps to ensure that where your information is transferred outside of the European Union or EEA by our service providers and hosting providers, appropriate measures and controls are in place to protect that information in accordance with the requirements of General Data Protection Regulations 2016/679.By using our website, products or services or by interacting with us in the ways described in this policy, you consent to the transfer of your information outside the European Union or EEA in the circumstances set out in this policy. If you do not want your information to be transferred outside the European Union or EEA please contact us to let us know your wishes.

Changes to our privacy notice
We may change our Privacy Notice from time to time. However, we will not reduce your rights under this Privacy Notice. We will always update this Privacy Notice on our website, so please try to read it when you visit the website (the ‘last updated’ reference tells you when we last updated our Privacy Notice).