Privacy Policy

Introduction

This privacy policy explains how brightfrost-shore collects, uses, and protects personal information provided by parents, guardians, and participants in our financial education programmes.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy applies to all information collected through our website and programme enrolment processes.

Information We Collect

Information You Provide

When you enquire about or enrol in our programmes, we collect:

• Parent or guardian name and contact details
• Email address for correspondence
• Child's age and relevant educational background
• Any specific requirements or preferences you share with us
• Payment information processed through secure third-party providers

Information We Collect Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• IP address (anonymised where possible)

How We Use Your Information

We use the information we collect for the following purposes:

• To process enquiries and enrolment requests
• To communicate about programme schedules, updates, and relevant information
• To provide educational materials and resources to programme participants
• To improve our services and develop new programmes
• To comply with legal obligations and safeguarding requirements
• To maintain records for educational and administrative purposes

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide information through enquiry forms or enrolment
• Contractual necessity: To deliver the educational services you've enrolled in
• Legal obligation: To meet safeguarding and child protection requirements
• Legitimate interests: To improve our services and communicate relevant information

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share limited information with:

• Qualified educators delivering our programmes (only information necessary for teaching)
• Payment processors for secure transaction handling
• Legal authorities if required by law or for safeguarding purposes
• Service providers who assist with website hosting and email communications (under strict confidentiality agreements)

Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations:

• Enquiry information: Retained for one year if no enrolment follows
• Participant records: Retained for seven years after programme completion for educational record-keeping
• Financial records: Retained for seven years as required by law
• Safeguarding records: Retained in accordance with local authority guidelines

Your Rights

Under data protection legislation, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate information
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where consent is the legal basis

To exercise any of these rights, please contact us at [email protected].

Children's Privacy

Our programmes are designed for children and teenagers, but we collect personal information only from parents or legal guardians, not directly from minors. We do not knowingly collect personal data from children without parental consent.

Any information about children collected through our programmes is used solely for educational purposes and safeguarding, in accordance with relevant child protection legislation.

Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure encrypted connections for data transmission
• Access controls limiting who can view personal information
• Regular security assessments and updates
• Staff training on data protection and confidentiality

While we strive to protect your personal information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyse site usage. For detailed information about our use of cookies, please see our Cookies Policy.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last revised. We encourage you to review this policy regularly.

Significant changes will be communicated via email to enrolled families or through prominent notice on our website.

Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us:

Email: [email protected]
Address: Bristol Community Learning Centre, Clifton Village, Bristol BS8 4AA, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, if you believe we have not handled your data appropriately.