This privacy statement describes how Blissful Bambino protects and makes use of the information you give us. If you provide, or are asked to provide, information when contacting us, it will only be used in the ways described in this privacy statement. We are committed to safeguarding the privacy of our clients and their families.
What is personal data/information?
Personal data or information is any information about an individual from which a person can be identified, either directly or indirectly.
Section 1: What information do we collect?
We may collect, store and use the following kinds of personal information:
(a) Personal details of our clients, including their names, addresses, telephone numbers and email addresses; and
(b) Personal details of children with respect to whom our services are provided, including their names, ages, dates of births, preferences, behaviours, histories, as well as medical information.
Section 2: Processing your personal information
We design our processing of personal information with children in mind from the outset and use a data protection by design and by default approach.
We may use and process this personal information to:
(a) Enable and facilitate the provision of our services, including keeping in contact with you during the course of services being provided;
(b) Send you invoices, receipts and statements;
(c) Keep records of the cases upon which we have worked for a period of 5 years post conclusion of services being offered. This is a requirement of our insurance policy.
Section 3: Disclosures
Your information will only be used by Faye Jones and Sophie Potter. The only exceptions to this would be:
(a) To the extent that we are required to do so by law;
(b) In connection with any legal proceedings or prospective legal proceedings;
(c) In order to establish, exercise or defend legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk); and
(d) To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
We will not under any circumstances share your personal information with third-parties for sales or marketing purposes.
Section 4: Security of your personal information
Any information we hold about you is stored and processed under our data protection policy, in line with The Data Protection Act 1998 and the General Data Protection Regulation (Regulation (EU) 2016/679) adopted on 27th April 2016 and enforceable from 25th May 2018.
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of personal information.
We will store paper copies of any sensitive personal information that is provided to us in locked filing cabinets in secure offices.
Data transmission by email and over the internet is inherently insecure, and we cannot guarantee the security of data sent by email or over the internet. However, we have taken precautions to make it as secure as possible. Our email account is password and pin protected and only accessed by Faye Jones and Sophie Potter. Any computers or mobile devices containing personal information are password protected or protected with a passcode/thumbprint scanner.
We have put in place appropriate measures to use our best endeavours to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Section 5: Subject Access Requests
All individuals who are the subject of personal data held by Blissful Bambino are entitled to:
(a) Ask what information the company holds about them and why
(b) Ask how to gain access to it
(c) Be informed how to keep it up to date
(d) Be informed how the company is meeting its data protection obligations
If you would like to request a copy of the data we hold about you, this is called a subject access request. Subject access requests should be made in writing on email to the companies Data Controller Faye Jones (email@example.com). We will aim to provide the relevant data within 30 days. We will always verify the identity of anyone making a subject request by asking them to supply appropriate evidence (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address). There will not be an administration fee save for reasonable charge if a request is unfounded, excessive or substantial or if you request further copies of any documents.
If you think that we have not complied with the data protection laws, you have the right to lodge a complaint with the Information Commissioner’s Office.
Section 6: Updating information
Please let us know if the personal information which we hold about you needs to be corrected or updated.
Section 7: Disposal of personal information
Any paper copies relating to services provided and containing personal information will be shredded and securely disposed of after a period of five years.
We will retain emails which may include personal information for the duration of the service being provided, and thereafter for a period no longer than a period of five years following our services ending. At the end of this period the emails will be deleted.
Email enquiries sent containing personal information will be kept securely. If our services are not engaged within six months this email will be deleted.
To prevent unauthorised disclosure or access to your information, we have implemented strong physical and electronic safeguards as set out in Section 4. In the unlikely event of a data protection breach we will notify the Information Commissioner’s Office (ICO) so that their procedures can be followed. We will notify all individuals whose data may have been accessed to alert them to the breach and potential risks.
Section 8: Contact
If you have any questions about this policy or our treatment of your personal information, please write to us by email at firstname.lastname@example.org or by post to Roselands, South Stoke Road, Woodcote, RG8 0PL.
Section 9: Data controller
The data controller responsible in respect of the personal information we collect at Blissful Bambino, is Faye Jones.