Alliance privacy policy

Early Years Alliance

Privacy Policy

Introduction

At the Early Years Alliance (the Alliance) we take your privacy seriously and are committed to ensuring that your personal data is protected in accordance with data protection laws and used in line with your expectations.

This privacy notice explains what personal data we collect, why we collect it, how we use it, the control you have over your personal data and the procedures we have in place to protect it.

When we refer to “we”, “us” or “our”, we mean the Early Years Alliance. The privacy team at the Alliance can be contacted at dataprotection@eyalliance.org.uk

Our full legal information as a data controller, is: Early Years Alliance is the trading name for the Pre-school Learning Alliance, a charity registered in England Wales (number 1096526) and a company incorporated in England and Wales (number 4539003) with its registered office address at 50 Featherstone Street, London, England, EC1Y 8RT.

The legal basis for handling your data

When collecting your personal data, we’ll always make it clear to you, which data is necessary in connection with a particular service. The law on data protection sets out a number of different reasons for which an organisation may collect and process your personal data.

In certain circumstances, we need your personal data to comply with our contractual obligations. For example, if you order an item from us, we’ll collect your address details to deliver your purchase, and pass them to our courier. We require this information in order to process your payment, deliver your goods and fulfil our contract with you. If you enter into a contract with us we will also need certain information to fulfil the agreement we have with you. We may also process your data to comply with our legal obligations.

In specific situations, we collect and process your data with your consent. For example, when you register to attend one of our online events via video conference or when you tick a box to receive certain marketing information.

In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our organisation, and which does not materially impact your rights, freedom or interests. For example, we will combine the shopping history of many members to identify trends and ensure we can keep up with demand, or develop new products/services. We will also send our members information about sector updates and policy changes by email and post to support their practice and development. We may also email you after you have downloaded a free sample document in order to follow up on your interest in our products and services. We will do this based on our legitimate interest in marketing our products and services.

When do we collect your personal data?

We collect your personal data when you:

  • Register for membership of the Alliance or to use one of our services.
  • Create a new account, use your account to buy products/services or book on an event, redeem vouchers from us, or submit an enquiry.
  • Comment on or review our products and services or take part in one of our competitions.
  • Have given a third-party permission to share with us the information they hold about you in order to use one of our services.
  • Request information regarding our services.

What sort of data do we collect and how we use your information?

We want to deliver excellent customer service. In order to achieve this we do need to have relevant information about our service users.

The types of data we collect

The types of personal information that we collect from you depends on how you interact with us and the service and may include:

  • Contact details, such as your name and work email address, billing/delivery address, and phone number.
  • Account login credentials, such as usernames and passwords, password hints and similar security information and other account registration information.
  • Payment information, such as a credit or debit card number.
  • Other information in order to be able to deliver membership and other services.
  • Comments, feedback and other information you provide to us, including search query data and questions or information you send to customer support; and/or interests and communication preferences, including preferred language.

We also may obtain contact details and other information about you from third parties, including:

  • Service providers that help us determine a location in order to customise certain products to your location.
  • Publicly available sources and data suppliers from which we obtain data to validate or supplement the information we hold.

How we use your data

Depending on how you interact with us and our services, we use your personal information to:

  • Provide, activate and manage your access to and use of our membership and other services.
  • Process and fulfil a request, order, download, subscription or other transaction.
  • Provide technical, product and other support and to help keep access to our services working, safe and secure.
  • Enhance and improve our services and our other products and services and to develop new products, services and benefits.
  • Offer you customised content and other personalisation to make our services more relevant to your interests and geography.
  • Respond to your requests, inquiries, comments and concerns.
  • Notify you about changes, updates and other announcements related to our services and our other products and services.
  • Deliver targeted advertisements, promotional messages, notices and other information related to our services and your interests.
  • Provide you with promotional messages and other information about products, events and services of ours, our partners and third parties such as sponsors.
  • Invite you to participate in surveys, prize draws and similar promotions.
  • Identify usage trends and develop data analysis, including for purposes of research, audit, reporting and other organisational operations, including determining the effectiveness of our promotional campaigns and evaluating our organisational performance, or in other ways relevant to customer agreements; and/or to comply with our legal obligations, resolve issues, and enforce our agreements.

If you supply us contact information of your colleagues, we may contact those individuals with communications about our services that may include reference to you.

Disclosing information relating to a third party

Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with the terms of this notice.

Sharing your information

We sometime share your data with trusted third parties which include:

  • IT companies that support our site development and other business-related software that support us to deliver our services. This includes video conferencing software.
  • Banking services to process payments.
  • Courier companies that deliver goods on our behalf. Print and distribution processors.
  • Marketing companies that help us manage our marketing communications for example an e-newsletter platform, online survey and online learning journal provider.
  • Our insurance underwriter (only where applicable).

We also will disclose your personal information if we have a good faith belief that such disclosure is necessary to:

  • meet any applicable law, regulation, legal process or other legal obligation;
  • detect, investigate and help prevent security, fraud or technical issues; and/or
  • protect the rights, property or safety of the Early Years Alliance, our users, employees or others.

How we protect your data

We take the security of your personal data seriously. We have internal policies and strict controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed and to prevent unauthorised access. Any payment transactions will be encrypted.

Where we engage third parties to process personal data on our behalf, they:

  • are obligated to comply with the requirements of data protection laws;
  • are obligated to only use the data for the purpose/s for which it was supplied;
  • are under a duty of confidentiality; and
  • are required to implement appropriate technical and organisational measures to ensure the security of your data.

Where do we store your data?

Data you provide to us is stored on secure computers or servers located within the UK or European Economic Area.

We may also store paper records in locked filing cabinets or locked cupboards. Our third party processors will also store your data on secure IT systems which may be situated inside or outside of the European Economic Area. They may also securely store data in paper files.

Your credit card details are passed to a third-party payment processor. We do not retain your payment information.

For how long do we keep your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your rights

As a data subject, you have a number of rights. You can:

  • request to access and obtain a copy of your data on request;
  • request that we change incorrect or incomplete data; and
  • request that we delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing.

Where we rely on consent to processing your personal data you can request to withdraw your consent at any time for example, you may choose to stop receiving one of our newsletters by clicking the unsubscribe link in any e-mail we send to you.

If you would like to exercise any of these rights, please contact your [local service delivery manager]. For corporate related issues please contact our Communications Team in writing at the National Centre Office, Communications team, 50 Featherstone Street, London, EC1Y 8RT or email feedback@eyalliance.org.uk

How to exercise any of your rights or ask questions about this notice

If you would like to exercise any of your rights above, or you have any questions, comments or concerns about any aspect of this notice or how we handle your data please contact your local service delivery manager. For corporate related issues please contact our Communications Team in writing at the National Centre Office, Communications team, 50 Featherstone Street, London, EC1Y 8RT or email feedback@eyalliance.org.uk

How to contact the Information Commissioner Office (ICO)

If our local service delivery manager or Communications Team are not able to address your concern, please raise a complaint with our privacy team at dataprotection@eyalliance.org.uk or on 020 7697 2593.

If you are concerned about the way your data is handled and remain dissatisfied after raising your concern with our privacy team, you have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or

Changes to this notice

We keep this notice under regular review. Any changes to this notice will be posted on this page, so that you may be aware of how we use your data at all times.

Last updated: 20 May 2024