RIPPLE ACADEMY PRIVACY POLICY

1. INTRODUCTION‍

Ripple Academy Limited, (“Ripple Academy”, “we”, “our”, “us”) is committed to protecting and respecting your privacy. We are a private limited company established in England & Wales with a registered office at 4 Lynway Drive, Manchester, England, M20 4TS, and registered company number 15956660 and for the purpose of the UK General Data Protection Regulation or the UK Data Protection Act 2018 (together the “DPA”), we are the data controller.

This policy sets out the basis on which we will process any personal data in connection with our provision of extra-curricular activities for children during or after school (the “Services”).

Please read this policy carefully so that you understand your rights in relation to your personal data, and how we will collect, use and process your personal data. If you do not agree with this Privacy Policy in general or any part of it, you should not use our Services or otherwise provide your information to us. ‍

2. THE INFORMATION WE COLLECT‍

You may provide the following information to us by contacting us, or otherwise, by signing up for our newsletters or alerts or by creating an account with us:

Basic contact details: Your full name, email address, phone number and home address.

Welfare information: If you wish to use childcare vouchers to pay for our Services we may collect information relating to whether you are on any welfare plans.

Child information: We collect information relating to your child, including:

General information relating to the child, including their full name (and any preferred name(s), if applicable), date of birth, home address, gender information, ethnicity information and language(s) spoken.

Your relationship to the child.

Your child’s emergency contacts’ details, including each emergency contact’s full name, relationship to the child, phone number, email address, work phone number and address of workplace.

Your child’s GP or doctor details, including the GP or doctor’s full name, surgery name and contact details.

Information relating to any of your child’s health and preferences and requirements relating to administering medicine and healthcare, including dietary requirements, allergy information, accessibility information, disability information, medical consent restrictions, immunisation information, whether you have given consent for your child to be administered with certain medication (and the nature of such medicine, information on how such medicine should be administered and dosage requirements) and any other health requirements or conditions.

Preferences, requirements and instructions relating to nappy changing (if applicable).

Your child’s hobbies, interests and favourite toys.

Whether your child has additional needs or special educational needs and/or disabilities, including whether they are on an “Education, Health and Care Plan” or an “Individual Education Plan”.

‍Correspondence: Any information you choose to include in communications with us, for example, when sending us an email or making a booking.

Childcare information: Information relating to whether your child currently attends nursery or has attended nursery before and, if it currently attends nursery, the details of their nursery.

Please note that we may use a third-party booking and/or payment services provider to process bookings and payment for our Services. When using a third-party booking and/or payment services provider, they will store, collect and process your booking information and payment information.

3. HOW DO WE USE YOUR INFORMATION?‍

Our lawful bases for processing your personal data

We process your personal data in order to perform our contract with you, such as:

provide you with our Services;

communicate with you about your booking or customer service enquiries;

register and maintain your account or membership with us; and

administer and provide Services and customer support per your request.

We obtain your consent to process your personal data for the following reasons:

sign you up for our newsletters or alerts; 

if you opted into marketing, to communicate with you about products, services, marketing, promotions, events and other news and information we think will be of interest to you; and

collect information relating to your child’s medical conditions.

In order to be responsive to you, maintain our business relationship, improve the quality of the Services and promote the success of our business, all as a matter of legitimate interests, we will use your personal data to:

send you announcements in relation to security, privacy or administrative related communications (these communications are not marketing orientated, and we do not rely on consent, so you may not opt out);

administer the Services, and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis (including analysing booking patterns);

maintain the safety and security of our users, Services, and business; build and maintain our community; 

improve and develop our products; and

comply with legal obligations.

In addition, we may use all of the above information to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, the rights of our users, or others.

Our application conditions for processing your special category data

Special category data includes: (i) personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; (ii) genetic data; (iii) biometric data (where used for identification purposes); and (iv) data concerning health, a person’s sex life or a person’s sexual orientation.

Where we process your special category data, we do so:

because you have provided your explicit consent; or

for reasons of substantial public interest (including equality of opportunity or treatment, preventing or detecting unlawful acts, regulatory requirements, support for individuals with a particular disability or medical condition and safeguarding of children and individuals at risk).

4. COOKIES‍

We use cookies to collect information about your browsing activities over time and across different websites following your use of our Services. Cookies allow us to recognise and count the number of users and to see how users move around our website when they are using it. This helps us to improve our Services and the way the Platform works. You can find more information about cookies and how to manage them here. For more information, please refer to our Cookies Policy.

 5. HOW THE COMPANY SHARES YOUR INFORMATION‍

We do not use or share your personal data to others except as described in this Privacy Policy. In certain circumstances, we also may share your information with third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we may share your personal data:

With service providers and vendors for business purposes. Such third parties include: (i) data analytics vendors; (ii) security vendors; and (iii) website hosting vendors. These service providers receiving this information assist us with many different functions and tasks, such as providing data storage and disaster recovery services and communicating with you.

With our affiliates. We may share your information with companies within our corporate family.‍‍

For legal reasons and to protect our Services and business. We may share your information in response to a legal obligation or if we have determined that it is necessary to share your personal data to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory enquiries, protect our interests or those of our users, or exercise or defend legal claims.

In connection with an asset sale, merger, bankruptcy, or other business transaction. We may share your personal data while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of our assets.

To enforce any applicable terms of service. We may share your personal data to enforce our terms and conditions or any other applicable terms of service.
‍‍

To ensure our safety and security of and/or of our users. We may share your personal data if necessary to ensure our, or our users’, safety and security.

When you request us to share certain information with third parties. With your permission or upon your discretion, we may disclose your personal data.‍

With professional advisors. As necessary, we may share your information with professional advisors functioning as service providers such as auditors, law firms, or accounting firms.

You acknowledge that such sharing of information may occur in all of the aforementioned circumstances and is permitted by and subject to this Privacy Policy.

6. WHERE WE STORE YOUR INFORMATION‍

The information that we collect from you as data controller will be transferred to, and stored at/processed in countries outside the United Kingdom (“UK”). Your personal data is also processed by staff operating outside the UK who work for us or one of our third party service providers or partners. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this.

For any transfers of data outside the UK, we will implement appropriate safeguards in accordance with the DPA, unless the data transfer is to a country that has been determined by the UK Information Commissioner’s Office to provide an adequate level of protection for individuals’ rights and freedoms for their personal data.

7. HOW LONG DO WE STORE YOUR PERSONAL DATA?

We will retain your information as follows:

your account data for as long as you keep your account open or as needed to provide you with our Services;

if you contact us, we will keep your data for 72 months after you contact us; and 

we will also retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you stop using our Services or if you delete your account with us, we will store your information in an aggregated and anonymised format.‍

8. YOUR RIGHTS‍

You have certain rights in relation to your personal data (some of these only apply in certain circumstances):

Access: You have the right to access personal data we hold about you, how we use it, and who we share it with.

Portability: You have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party, with certain exceptions.

Correction: You have the right to correct any of your personal data we hold that is inaccurate.

Erasure: In certain circumstances, you have the right to delete the personal data we hold about you.

Restriction of processing to storage only: You have the right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances.

Objection: You have the right to object to our processing of your personal data.

Objection to marketing: You can object to marketing at any time.

Withdrawal of consent: Where we rely on consent to process your personal data, you have the right to withdraw this consent at any time by emailing us at enquiries@rippleacademy.co.uk.

Please note that these rights are in many cases limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interest reasons or where we are required by law to retain your personal data.

9. THIRD PARTY LINKS‍

Our website and social media platforms may contain links to other online platforms operated by third parties. We do not control such other online platforms and are not responsible for their content, their privacy policies, or their use of your information.

10. MODIFICATION OF THIS POLICY‍

We change our Privacy Policy from time to time. Updates to our Privacy Policy will apply only to information collected after the date of the change.

11. COMPLAINTS‍

If you have complaints about how we process your personal data, please contact us at enquiries@rippleacademy.co.uk and we will respond to your request as soon as possible.

If you think we have infringed data protection laws, you can file a claim with the UK Information Commissioner’s Office.