In Brief, for the 50 Things To Do Mobile Applications:
We collect and hold as little as we possibly can to provide the service. It’s important to us to know what activities people are interested in, and not interested in, and when. It’s also very useful, if people are prepared to share their postcode, because we use this to highlight areas in our communities where it would be worth holding real world events.
We hold the Device ID of your 'phone. We CANNOT tell anything about you from this, it's just a unique number that every 'phone has. We need this so we can see how many people are ticking off activities and events. We don't know it's you, but we do know how many people click them and when.
We receive the IP address when you access the app for 14 days. We don't do anything at all with this unless something goes wrong, it’s just in our logs. If anything strange starts happening, this can help us to track down problems with our service.
We ask you for your postcode. This is OPTIONAL, you don’t have to give it to us if you don’t want to. If you do provide this then your local 50 Things Team will see a little dot in that postcode on a map. This helps them to decide where to best run events in their area. They CANNOT tell who you are or where you are (unless you happen to be the only house in that postcode, but even then, we/they don’t know WHO you are).
We DO NOT do anything with any photographs or videos that you take, we do not receive them and we CANNOT see them. These stay on your 'phone and never leave it, unless you choose to share them on your social media, or send them in a text message, etc.
Who we are
St Edmund's Nursery School and Children's Centre runs the 50 Things to Do service (the Service). Their address is Washington St, Bradford BD8 9QW.
St Edmund’s Nursery School and Children’s Centre is the “data controller” for the personal information held by the service.
Our Data Protection Officer (DPO) is Richard Lewis-Ogden
DPO@bywaterkent.co.uk
How we process your data
Frog Education Ltd provides the technology behind the 50 Things to Do Before You’re Five service (the Service).
Frog Education is the "data processor" for the information held by the 50 Things Central Team and their Regional Commissioning Partners. This means that Frog Education processes the personal data of users of the Service, on behalf of the St Edmund’s Nursery School and Children’s Centre.
Frog Education’s address is 2nd Floor West, Bowling Mill, Dean Clough Mills, Halifax HX3 5AX and their web site can be viewed at www.frogeducation.com
Access to your data
If you choose to use the Service, then you agree to the collection and use of information in relation with this policy. The personal information that we collect is used for reporting on and improving the Service. We will not use or share your information with anyone except as described in this Privacy Notice or in fulfilment of our legal obligations.
The information we hold about you and who provides it
The information we collect on you as a result of you accessing the 50 Things to Do Before You’re Five service is as follows:
-
Device ID
-
IP Address
-
Postcode
Collection of your postcode is fully optional. You don’t have to give it to us if you don’t want to and you may still use the service without giving your postcode.
Our website may also contain a range of forms, for things like joining mailing lists, requesting more information from us, or just soliciting your opinion on things. If you interact with these forms, then obviously any data held in these forms is collected by us
What we use your personal information for
We use your personal information to improve our product and service.
This may be:
-
Understanding which activities are most popular, or otherwise
-
Understanding which features of the app are used or avoided
-
Seeing correlations between geographic region and the use of the Service
-
Understanding patterns of engagement with the Service
Log Data
We want to inform you that whenever you visit the Service, we collect standard information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of the Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies
Cookies are files, each with a small amount of data, that are commonly used as anonymous unique identifiers. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.
Our website uses these "cookies" to collect information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service..
Links to Other Sites
Our Service (both the Mobile Applications and the associated websites) may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
How the law protects you and the legal basis for processing your information
The Data Protection Act 2018 places a legal obligation on us to process your personal information in accordance with the following data protection principles in that your personal data must be:
-
Used lawfully, fairly and in a transparent way
-
Collected only for valid purposes that we have explained to you and not used in any way that is incompatible with those purposes
-
Relevant to the purposes we have told you about and limited only to those purposes
-
Accurate and kept up to date
-
Kept only as long as is necessary for the purposes we have told you about
-
Kept securely
There must also be a lawful basis for processing personal information – a justifiable reason for us to collect, store, use and disclose your personal information.
Who has access to your data
The 50 Things Central Team, based at St Edmund’s Nursery School and Children’s Centre, has access to your data. As our Data Processor and the provider of the technology, so does Frog Education Ltd.
As part of the Service, we also share your data with services within your Local Commissioning Partner area. This is in order to enable them to improve their own use of 50 Things to Do, within your region, and thus to improve the service.
How long we use your information for
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To work out the right retention period for personal data, we consider the following matters:
-
The amount, nature, and sensitivity of the personal data
-
The potential risk of harm from unauthorised use or disclosure of your personal data
-
The purposes for which we process your personal data and whether we can achieve those purposes through other means, and
-
Any legal or regulatory requirements.
On the rare occasions where we do collect personal data that identifies you (for example, on forms you might fill in on our website), in some circumstances we may anonymise your personal information so that it can no longer be associated with you. In such cases, we may use such information within the 50 Things Central Team and with our Regional Commissioning Partners without further notice to you.
Device ID: Because the Device ID is our only way of identifying the activities, etc. that you are engaging with, this information is kept indefinitely. From time to time, we may clear down data for devices that are no longer engaging with our service.
IP addresses: IP addresses are only captured within our logs. These are typically deleted after 14 days.
Postcode: Where a postcode is provided, this data is kept indefinitely. From time to time, we may clear down data for devices that are no longer engaging with our service.
Your rights under the Data Protection Act
You have the following rights (but note, these rights do not apply in all circumstances):
-
Your right to be informed about the processing of your personal information. This is the purpose of this notice.
-
Your right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
-
Your right to object to the processing of your personal data
-
Your right to restrict processing of your personal information
-
Your right to have your personal data erased (“the right to be forgotten”). As above, please note this right is subject to several restrictions, which we will discuss further with you if you choose to exercise it.
-
Rights to be notified of, object to and challenge any automated decision made in respect of you, including profiling
-
Your right to request access to your personal information and information about how the 50 Things Central Team and your local 50 Things Team process it
-
Your right to withdraw any consent you have given for the processing of personal data at any time
If you want to exercise any of these rights, please contact the Information Compliance Team by:
Emailing the Information Compliance Team on info@50thingstodo.org or writing to the Information Compliance Team, St Edmund's Nursery School and Children's Centre Washington Street Girlington Bradford BD8 9QW
Questions or complaints
If you have any questions about this privacy notice or how we handle your personal information, you can write to the DPO by email at DPO@bywaterkent.co.uk
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
The ICO can be contacted:
-
By writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
-
By telephoning 0303 123 1113
-
Online at ico.org.uk/global/contact-us/
Changes to this privacy notice
We may amend this privacy notice from time to time, so please review it frequently. The date below will be amended each time this notice is updated.
This notice was last updated on 1st March 2024.