NANNYCARE LTD, A COMPANY REGISTERED IN ENGLAND AND WALES UNDER COMPANY REGISTRATION NUMBER 02606575 AND WHOSE REGISTERED OFFICE IS 80-83 LONG LN, LONDON EC1A 9ET, IS COMMITTED TO PROTECTING AND RESPECTING YOUR PRIVACY. THIS POLICY SETS OUT THE BASIS ON WHICH ANY PERSONAL DATA WE COLLECT FROM YOU, OR THAT YOU PROVIDE TO US, WILL BE PROCESSED BY US. PLEASE READ THE FOLLOWING CAREFULLY TO UNDERSTAND OUR VIEWS AND PRACTICES REGARDING YOUR PERSONAL DATA AND HOW WE WILL TREAT IT. FOR THE PURPOSES OF DATA PROTECTION LAWS IN THE UK, THE DATA CONTROLLER IS NANNYCARE LTD.
The paragraphs in this section explain how and why we process your personal data, as well as the legal basis on which we carry out this processing.
To assist you with customer service queries (relating to our products and/or feeding your baby):
Where you ask us to provide customer service information about our products or using our products, we will process your personal data in order to provide this information and advice to you. Our use of personal data in this way includes, in particular, logging any contact information and details you provide to us in a protected document, stored on secure servers. We need to process your personal data in this way to be able to effectively and accurately respond to your query.
In the case that you provide us with special category data relating to your health or that of your baby or child, we will ask for your explicit consent to process this data at the time that you provide it to us.
If you do not wish to provide us with your personal data in this way, we will be unable to provide the information or assistance you have requested.
The legal basis on which we process your personal data in these circumstances is our legitimate interest to provide you with the best possible customer service. If we process any special category data in respect of your health or health of your baby or child the additional lawful basis on which we process this type of data is your explicit consent.
You are not under any obligation to provide us with your personal health data and you can withdraw your consent to your personal health data being processed in this way at any time by contacting us at firstname.lastname@example.org. If you do choose to withdraw your consent, this will not mean that our processing of your personal health data before you withdrew your consent was unlawful.
To provide you with our marketing information:
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We will only provide you with our marketing information if you choose to sign up to our marketing newsletter and the lawful basis on which we process this data is your explicit consent. You can unsubscribe from our marketing at any time by using the unsubscribe function.
Where you unsubscribe to receiving these marketing messages, this will not apply to personal data provided to us as a result of a product purchase or customer service query.
We will not share your personal data with any third-parties for marketing purposes.
We will collect and process the following data about you: Information you give us. This is information about you that you give us by filling in an enquiry form on our website www.nannycare.co.uk (our “Website”), or by corresponding with us by phone, e-mail or by registering to receive our newsletter. The information you give us may include your name, address, e-mail address and phone number and other information related to you and your baby or child.
All information you provide to us is stored on secure servers. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
We will retain your data for a period of 8 years after the date you first provided us with the information to ensure that we are able to assist you should you have any further questions, feedback or require further assistance in relation to our products.
We will anonymise any personal medical data after a period of 2 years and retain it for a period of 8 years in total.
We may disclose your information to third parties in order to provide you with the products and services you request. Where we share your information with third parties outside of the EU, we take steps to ensure that your information is protected in the same manner it would be under the GDPR or any update or amendment to the GDPR as may be applied in the UK from time to time. We will not share your information with any third parties that are not compliant with the requirements of the GDPR.
In the case that we are unable to answer your call, a third party telephone answering service will take your contact details, the reason for your call and email those to Nannycare Ltd.
You have the right to object to us processing your personal data where we are processing your personal data based on our legitimate interests (as set out above). If you ask us to stop processing your personal data on this basis, we will stop processing your personal data unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws. In such a case, if you ask us to stop processing your personal data, we will stop but we may no longer be able to provide you with our products or services as a result.
You have the right to receive confirmation as to whether your personal data is being processed by us, as well as various other information relating to our use of your personal data. You also have the right to access your personal data which we are processing.
You have the right to require us to rectify any inaccurate personal data we hold about you. You also have the right to have incomplete personal data we hold about you completed, by providing a supplementary statement to us.
You have the right to restrict our processing of your personal data where:
a) the accuracy of the personal data is being contested by you;
b) the processing by us of your personal data is unlawful, but you do not want the relevant personal data erased;
c) we no longer need to process your personal data for the agreed purposes, but you want to preserve your personal data for the establishment, exercise or defence of legal claims; or
d) we are processing your data on the basis of our legitimate interest (as set out above) and you:
i. object to our processing on this basis; and
ii. want processing of the relevant personal data to be restricted until it can be determined whether our legitimate interest overrides your legitimate interest.
Where any exercise by you of your right to restriction determines that our processing of particular personal data is to be restricted, we will then only process the relevant personal data in accordance with your consent and, in addition, for storage purposes and for the purpose of legal claims.
You have the right to require we erase your personal data which we are processing where at least one of the following grounds applies:
a) the processing is no longer necessary in relation to the purposes for which your personal data were collected or otherwise processed;
b) our processing of your personal data is based on your consent, you have subsequently withdrawn your consent and there is no other legal ground we can use to process your personal data;
c) you object to the processing as set out in the “right to object” section of this policy and we have no overriding legitimate interest for our processing;
d) the personal data been unlawfully processed; or
e) the erasure is required for compliance with a law to which we are subject.
You also have the right to lodge a complaint with the Information Commissioner’s Office, the supervisory authority for data protection issues in England and Wales.
You can exercise such rights by contacting us at email@example.com