Privacy Policy
At NAF! School, we’re committed to protecting and respecting your privacy.
This policy explains what personal information we collect, why we collect it, how we use it and how we keep it secure.
We may update this Policy from time to time to reflect changes to our privacy practices or for legal, or regulatory reasons so please check this page occasionally to ensure that you’re kept up to date and happy with any changes.
By using our website, you’re agreeing to be bound by this Policy. The information is held by NAF! School in accordance with the provisions of the UK General Data Protection Regulation (UK-GDPR).
If you have any questions or concerns regarding the following information, you should contact us using the details given at the end of this notice.
What personal information do we collect?
The personal data we collect is:
Name
Address
Date of Birth
Phone Number
Email Address
Health information
Any additional learning support needs
This information is collected when you provide it to us through the booking page on this website, over the phone, via email, in writing or any other means by which you provide it to us.
Why do we need your information?
We need to obtain and process your personal data to provide you with our services and to fulfil our business and legal obligations. We will never collect any personal information from you that we do not need or retain any data that is no longer necessary for the purposes specified in this notice.
Where we request sensitive personal data from you (i.e. health or medical data), the reason(s) for the request will be clearly given along with the purposes of the processing.
Health questions relating to allergies and any additional learning support needs are asked for to highlight any action NAF! School may need to take ensure safe practices and in order to supply you with the best possible service. By providing us with this information in any of the ways detailed above, you are consenting that NAF! School can gather and process this information.
At any time after giving consent, you can withdraw your consent, subject to legal, insurance and contractual restrictions (see more on your rights as an individual)
Why do we process your data?
Collect specific personal data (name, email, contact number, DOB) that is required to enter into a contract to sell a service.
Engage in communication with you including confirmation and reminders of bookings, and requests to cancel or change bookings.
Collect health information to perform the agreed services appropriately, and potentially highlight areas that products or services may cause issues to students
Ensure a safe service and provide industry standard advice.
Select relevant offers, promotions and information for you.
Estimate the number of students we have.
Hold personal data that is required by law or to respond to legal process.
Hold for insurance purpose.
Store client records.
Your rights as an individual
If your personal data is held by NAF! School, you hold particular rights over it. Where you have provided consent for us to contact you as part of our marketing services, you have the right to modify or withdraw your consent at any time by using the unsubscribe option accompanied with all of our direct marketing or by contacting NAF! School directly.
You also have the right to:
To be informed of how your personal data will be used before it is collected.
To access your personal data and gain information on how it is used after it has been gathered.
To have personal data corrected if it is incomplete, inaccurate or out of date.
To request the removal or deletion of personal data where there is no compelling reason for its continued processing.
To restrict processing of your personal data.
To data portability – having your data moved, copied or transferred from NAF! to another organisation in an easily readable format.
To object to direct marketing from us.
16 or Under
NAF! School will never collect the personal data of Children under the age of 16 without parental/guardian consent. If you believe we hold any information of a child under the age of 16, please contact NAF! School. If we cannot immediately obtain parental/guardian consent, we will remove the personal data from storage.
Who has access to your data?
We will not sell or rent your information to third parties
We will not share your information with third parties for marketing purposes.
Use of Data Processors
Data processors are third parties who provide some elements of our business services for us. Where we use a third party. We have strict agreements in place governing the processing of your personal data, on which no action can be taken without instruction from us. The third parties with whom we work will never share or disclose your personal information and will hold it securely at all times.
Please be reassured that we will not release your information to third parties beyond NAF! School for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
Safeguarding your personal Data
Appropriate measures are taken to protect your personal data from access from unauthorised persons or inappropriate access, internal and external.
Any sensitive information (such as credit or debit card details) is encrypted and protected with the following third party website, Squarespace.
All non-sensitive details (email address etc… ) transferred over the internet will be protected to the best of our ability, however, this can never be guaranteed to be 100% secure. While we strive to protect all of your personal information, we cannot guarantee the safety of any information you transmit to us, and you do so at your own risk.
Only members of staff, authorised by management, will have access to the personal information you provide us with.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be held responsible for the privacy policies and practices of other sites even if you access them using links from our website.
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
How long do we keep your data?
NAF! School retains your data for as long as necessary to provide you with our services. NAF! School are required under tax laws to keep your personal data for a minimum of 7 years. Health and safety records will be retained for 10 years and where we have your consent for marketing purposes, we will retain the minimum required data until you notify us that you no longer wish to receive such information.
What happens if you don’t want to provide your information?
In the event that you want to book a course from NAF! School, certain personal information is required to enter into a contract with you. NAF! School will be unable to enter into a contract with you if you do not provide this personal information.
As noted in this privacy statement, we are processing your personal data to comply with legal and statutory obligations and in the performance of a contract. You can always choose not to provide your personal information: however, we will be unable to provide certain services in these instances.
Complaints
In the occurrence that you want to make a complaint about how your personal data was gathered or processed by NAF! School or you are not satisfied about how a complaint has been handled, you retain the right to lodge a complaint directly with the supervisory authority and NAF! School Ltd.
Data Protection Commissioner:
The Information Commissioner’s Office – Scotland
Queen Elizabeth House
Sibbald Walk
Edinburgh
EH8 8FT
Telephone: 0303 123 1115
Email: Scotland@ico.org.uk
NAF! School Ltd. Data Protection Officer / UK-GDPR Owner:
Tamsin Koslowski
211 West George Street
Glasgow
G2 2LW
0141 258 7676
Review of this Policy
We keep this Policy under regular review. This Policy was last updated in May 2022.