Happy in Harmony acknowledges the duty of care to safeguard and promote the welfare of children and is committed to ensuring safeguarding practice reflects statutory responsibilities, government guidance and complies with best practice.
I’m committed to respecting and protecting your privacy.
How do we collect personal information about you?
We obtain personal information about you that you provide to us through our website, emails and through phone conversations. We also obtain personal information relating to you using automated technical means when you visit our website.
What type of personal information is collected? The information we collect from you might include (but is not limited to) your name, address, email address, phone number, date of birth and financial details and any other information you choose to provide to us.
The information we collect through our website using automated technical means includes: the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, identification number, online identifier and location data. We also collect information about your website visit including which website pages are accessed, page response times and length of visits to pages.
How long do we retain your personal information?
We review our retention periods for personal data on a regular basis. We are legally required to hold some types of information for certain prescribed periods to fulfil our statutory obligations. Outside of specific statutory obligations, we will hold your personal data on our systems for as long as is necessary for the relevant purposes for which we use it, or in accordance with any retention periods set out in any relevant contract you hold with us.
How do we use your personal information?
Under the GDPR you have to state the purposes and legal basis for processing each category of personal data. It is your responsibility to describe the purpose and the legal bases that you are relying on, and where you are relying on ‘legitimate interests’, what those legitimate interests are. We have made some suggestions in red, but you’ll need to review these to determine whether they are appropriate for your agency.
We may use the information that you directly provide to us in the following ways:
● We may use your name, address and contact details for the purpose of carrying out our obligations arising from any contracts entered into by you and happy in Harmony, such as providing you with products and services you have requested. Our legal basis for this use is that it is necessary for the performance of a contract to which you are party.
● We may use your name, email address and postal address to provide you with information, you have requested from us, respond to enquiries or requests from you and communicate with you in relation to those enquiries or requests. Our legal basis for this use is that you have consented to this.
● Where you have entered into a contract with us or we have provided you with services, we may use your name, email address, postal address or phone number to ask for your feedback about the services we have provided to you. Our legal basis for this use is our legitimate interests, namely evaluating and where necessary improving the quality of our service provision with a view to promoting the success of our business and positive customer relationships.
● Where you are a party to an existing contract with us or regularly enter into contracts with us for our goods and service, we may use your name, email address, postal address or phone number to notify you of changes to the terms and conditions of our services. Our legal basis for this use is our legitimate interests, namely the administration and management of our business contracts and relationships.
● We may use your name, email address and postal address to send you marketing communications, if you have chosen to receive these. Our legal basis for this use is consent.
We may use the information that we automatically collect using technical means through our website to:
● Measure or understand the effectiveness of our own advertising activity. Our legal basis for this use is our legitimate interests, namely improving the relevancy of our advertising
● Measure or understand the effectiveness of our marketing emails. Our legal basis for this use is consent.
We may analyse the personal information we collect directly from you and obtain using automated technical means to create a profile of your interests and preferences so that we can contact you with information relevant to you (if you have chosen to receive marketing communications from us).
Who has access to information?
We will not sell or rent your information to third parties.
In this section we have summarised the rights that you have under data protection law. Some of the rights are complex, applying only in certain circumstances and subject to certain exceptions, and in the interests of keeping this policy concise, not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
You have the right:
● To object to us processing your personal information for marketing purposes. If you object, we will stop processing your personal information for this purpose. When we collect your data, you can choose whether or not you wish to receive marketing communications from us. If you wish to stop receiving marketing communications, you can opt out at any time by clicking an ‘unsubscribe’ link at the bottom of one of our emails.
●To access the information we hold about you and certain information about our processing of it and your rights in relation to it.
● In certain circumstances, to obtain erasure of the personal information we hold about you, subject to certain exceptions.
● To rectification of the information we hold about you.
● In certain circumstances, to restrict our processing of your personal information or object to us processing it If you object, we will stop processing your personal information unless certain exceptions apply.
● Where our legal basis for processing your personal information is your consent or the performance of a contract and we process it by automated means, to be provided with the personal information we hold about you in structured, commonly used and machine readable format and to transmit the information to another controller.
●To not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly affecting you, subject to certain exceptions.
●Where our processing of your personal information is based on your consent, to withdraw that consent at any time. If you withdraw your consent, we will stop the relevant processing, but it will not affect the lawfulness of our processing before the withdrawal.
To exercise any of these rights, email us at firstname.lastname@example.org. In addition, you can exercise your right to object to direct marketing at any time by clicking an ‘unsubscribe’ link at the bottom of one of our emails.
If you consider that our processing of your personal information infringes data protection laws, you have the right to lodge a complaint to a supervisory authority responsible for data protection. You may do this in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. More information about lodging a complaint with the Information Commissioner’s Office (the relevant UK supervisory authority) can be found at https://ico.org.uk/concerns/.
Security precautions in place to protect your information
We take appropriate technical and organisational precautions to secure your personal information and prevent its loss, misuse or alteration. All information you provide to us is stored on our secure servers. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
The transmission of unencrypted (or inadequately encrypted) data over the internet is inherently insecure, and for this reason we cannot guarantee the security of data sent between us over the internet.
Cookies allow us to provide important site functionality so you don’t have to re-enter lots of information. They also allow us to remember what links and pages you have been or viewed during a session. This helps us deliver a better, more personalised service to you.
It is possible to switch off cookies by setting your browser preferences. For more information on the Cookies we use, visit our Cookies Policy.
Links to other websites
Our website may contain links to other websites run by other organisations. We are not responsible for the privacy practices of those organisations or the content of their websites. You should read the privacy policies of these organisations before providing them with any personal information.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated on 10/02/21.
You can obtain further information about data protection laws by visiting the Information Commissioner's Office website at www.ico.org.uk.