classforkids privacy

CLASSFORKIDS PRIVACY TERMS AND CONDITIONS

1. INTRODUCTION

We at the Access Group know it is a big responsibility to protect your personal data. This Privacy Notice is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information. This Privacy Notice focusses on processing in relation to the following “Sites”: https://classforkids.io/ and is aimed at consumers and or general visitors using these Sites. Our overarching Group Privacy Notice can be found here - this will be the most appropriate notice if you are a user of the ClassForKids (C4K) solution on behalf of the kid’s club that has C4K license(s). We may from time to time update this Privacy Notice, where we deem it appropriate, we will seek to notify you about any material changes, however, we recommend you review this page periodically.

‍

2. ABOUT US
The ‘Access Group’ is made up of numerous legal entities which are wholly owned subsidiaries of The Access Technology Group Limited (company registration 05575609). Our primary trading entity is  Access UK Ltd (company registration 2343760) – the registered address for both is: The Armstrong Building, 10 Oakwood Drive, Loughborough, LE11 3QF, United Kingdom. For this Privacy Notice, Access UK Ltd is the controller. Our Group Data Protection Officer is Danielle Hefford. To contact us regarding our use of personal data, you may email us at Access.DPO@theaccessgroup.com We have appointed Access Workspace Ireland (registration number: 91755) as our EU representative under Article 27, EU GDPR. Our representative can be contacted by email at Core.DPO@theaccessgroup.com

3. WHY WE HAVE YOUR INFORMATION

We process personal data to fulfil our contractual obligations to you and our customers, and to otherwise improve and market our solutions. We may have collected your information because:

‍1. You have created an account;
2. You have visited one of our Sites; and/or
3. A kids club that you have engaged with uses our ClassForKids solution.

4. ON WHAT LEGAL BASIS WE HAVE YOUR INFORMATION

We will only ever process your personal data where we have a lawful basis to do so. We have expanded upon the reasons for us processing your personal data below.

5 .YOU HAVE AN ACCOUNT WITH US

Where you have created an account on one of our Sites, we will collect the following information:

Type of data - full name, telephone number, email address, home address, date of birth, gender and health information.
Belonging to you, your children and/or emergency contacts - you, your children and emergency contacts.
Lawful basis - contract and consent.

We share this information as necessary with:

1) our business partners who help us deliver our ClassForKids solution
2) other businesses within the Access Group, and
3) relevant customers of our ClassForKids solutions who you have engaged with (once the information is shared with the relevant customer, they become an independent controller of your information).

You may delete your account with us at any time by contacting support@class4kids.co.uk. You may withdraw your consent at any time by contacting support@class4kids.co.uk. Your information will be deleted in accordance with our retention schedule.

5. YOU HAVE VISITED ONE OF OUR SITES

Where you visit one of our Sites, we may collect the following information:

Type of data - IP address, web browser type and version, operating system and URLs of referring site, activity while on site and exited to
Belonging to you, your children and/or emergency contacts - you.
Lawful basis - consent.
Retention period - 90 days.

We use cookies (and similar technologies) to collect this information. This is to optimise your experience of our Sites. Please see our Cookie Policy for more information, including on how you can withdraw your consent.

6. A KID’S CLUB THAT YOU HAVE ENGAGED WITH USES OUR CLASSFORKIDS SOLUTION

Where you have engaged with a kid’s club that uses our ClassForKids solution we process the additional information below as a processor, the relevant kid’s club is the controller:

Type of data - custom fields and club notes
Belonging to you, your children and/or emergency contacts - your children.
Lawful basis - The kid’s club determines the lawful basis.
Retention period - The kid’s club determines the lawful basis.

We recommend you liaise directly with the relevant kid’s club to determine what information of yours they are processing.

7. SHARING YOUR PERSONAL DATA

We may have to ad hoc share your personal data with regulators, law enforcement bodies, government agencies, courts or other third parties where we think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. We may also share your personal data with third parties in connection with a sale of the Access Group (or any part thereof). Where that divested entity becomes a controller of your information, they will supply or otherwise make available to you their relevant privacy notice. Where the receiver of your personal data is based in a third country without an adequacy decision or adequacy regulation (as applicable under UK and/or EU GDPR), we will ensure that the transfer is afforded an essentially equivalent level of protection as it is afforded in the EU or UK, as appropriate.

8. AUTOMATED PROCESSING

We use the following automated processes for carrying out certain kinds of profiling. If at any point you wish to query any action that we take based on this or to request ‘human intervention’ (i.e. have someone review the action themselves, rather than relying only on the automated method), you have the right to do so. The following automated profiling may take place: RecogniSing your child’s upcoming birthday and highlighting it to kid’s clubs that they attend; Using class, location, age, booking status, payment status and other status level information to enable filtering of information.

9. MARKETING

In addition to sending you service messages from time to time, we may also use your email address for marketing, either our own or our customer’s services to you. You may opt out of marketing communications at any time by following the unsubscribe instructions provided in our emails, alternatively you may contact us.

10. YOUR RIGHTS

Regardless of your geographical location, we will process your personal data in accordance with the rights stated below:

Your right of access - You have the right to ask us for copies of your personal information.
‍Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
‍Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
‍Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
‍Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
‍Rights in relation to automated decision making.

To exercise any of these rights or to withdraw your consent, please contact support@class4kids.co.uk.

‍Important note: If you feel we have not processed your data in accordance with the Principles and Rights we describe in this Notice, contact Access.DPO@theaccessgroup.com (or our EU representative, Core.DPO@theaccessgroup.com) for our complaints procedure, or you may raise a complaint with the Information Commissioners Office - external link (or other relevant supervisory authority) but we would like the opportunity to resolve any issues first. We may have to ad hoc share your personal data with regulators, law enforcement bodies, government agencies, courts or other third parties where we think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. We may also share your personal data with third parties in connection with a sale of the Access Group (or any part thereof). Where that divested entity becomes a controller of your information, they will supply or otherwise make available to you their relevant privacy notice. Where the receiver of your personal data is based in a third country without an adequacy decision or adequacy regulation (as applicable under UK and/or EU GDPR), we will ensure that the transfer is afforded an essentially equivalent level of protection as it is afforded in the EU or UK, as appropriate.