We take the security of the information you entrust to us extremely seriously and that includes information which is personal to you, and those around you.
WHO WE ARE
We are Sherpa Nominees Group PTY Ltd (company number 613 298 785) whose registered address is 269 Pulteney Street, Adelaide, South Australia 5000, trading as Sherpa Kids.
HOW TO CONTACT US
Telephone our office team on: 01425 462 523
Send us an email on: firstname.lastname@example.org
Write to us at our trading address: Buckman Building, 43 Southampton Road, Ringwood, Hampshire, BH24 1HE
Our Data Protection Officer is:
Jan Biffin 01425 462 523 via email email@example.com
The kind of information we hold about you
We will collect, store and use the following categories of personal information about you:
We may also collect, store and use the following “special categories” of more sensitive personal information:
How is your personal information collected:
We collect personal information about you and your child through our enrolment process. We may sometimes collect additional information from third parties such as the school your child attends.
How we will use information about you
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
We may also use your personal information in the following situations, which are likely to be rare:
Situations in which we will use your personal information
We need all the categories of information in the list above primarily to allow us to provide our services to you as well as enabling us to comply with legal obligations. In some cases we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests. The situations in which we will process your personal information are listed below.
The personal data which we collect includes information which is considered to be special category data. We need to collect and process this information in order to ensure the safety of the children in our care. Our lawful basis for doing so is that such processing is necessary for complying with legal obligations and providing treatment to a child who becomes unwell in our care.
Who has access to your data
We will share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. Some of your information may be shared with:
What about other third parties?
We may need to share your personal information with a regulator or to otherwise comply with the law.
Transferring information outside the EU
We will transfer the personal information we collect about you to the following country outside the EU – New Zealand in order to perform our franchise agreement with you. There is an adequacy decision by the European Commission in respect of that country. This means that the country to which we transfer your data are deemed to provide an adequate level of protection for your personal information.
However, to ensure that your personal information does receive an adequate level of protection we have put in place the following appropriate measure[s] to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection: binding franchise agreement to licensor based in New Zealand. If you require further information about this protective measure[s], you can request it from the Director.
How long we keep your data
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
To comply with our obligations to the HMRC and Regulators we have to retain:
Once 7 years have passed, we will delete or anonymise your data in accordance with applicable laws and obligations.
Because the data we hold about you is your data, you have the right to:
If you would like to exercise any of the above rights, please contact us using the contact details above.
Your Duty to Inform us of Changes
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes.
Right to Complain
If you have any concerns about our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) by visiting https://ico.ord.uk/concerns/ or by telephoning the ICO helpline on 0303 123 1113.