Privacy Policy
Effective Date: [01 September 2024]
At CMXSC, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). By using our services or accessing our website, you agree to the terms outlined here.
1. Who We Are
CMXSC (referred to as "we", "our", or "us") provides physical education services, Wraparound Care, and school holiday camps. We are the data controller responsible for your personal data collected through our website and services.
If you have any questions about this Privacy Policy, please contact us at: Email: admin@cmxsc.co.uk
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
Identity Data: Name, date of birth, gender.
Contact Data: Email address, phone number, postal address.
Payment Data: Bank account or payment card details are all through third party and we do not hold or collect this information(for processing bookings).
Child Information: Child’s name, age, medical conditions, dietary needs (for Wraparound Care, Activity Clubs and holiday camps).
Usage Data: Information about how you use our website, such as IP addresses and browser types.
Communications: Emails, messages, or inquiries sent to us.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
To provide services: Manage bookings, Wraparound Care, and holiday camp services.
To process payments: Handle registration fees, payments, and refunds.
To communicate with you: Respond to inquiries and send important service updates.
For safety and welfare: Manage medical or dietary requirements and ensure child safety.
To improve our website and services: Analyze usage data to enhance the user experience.
To comply with legal obligations: Maintain records for accounting and legal compliance.
We will only use your personal data where we have a lawful basis to do so, such as to fulfill a contract with you, with your consent, or to meet a legal obligation.
4. How We Share Your Data
We may share your data with the following third parties:
Service providers: Payment processors, IT service providers, and cloud storage providers.
Schools or educational partners: Where necessary to provide Wraparound Care services.
Law enforcement or regulatory authorities: If required by law or in response to legal requests.
We do not sell your personal data to third parties.
5. International Data Transfers
If we transfer your personal data outside the UK (e.g., to an IT service provider), we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) or other approved mechanisms.
6. How Long We Keep Your Data
We retain your personal data only as long as necessary for the purposes outlined in this policy, including legal, accounting, or reporting obligations.
Booking and Service Data: Retained for 6 years for tax and legal purposes.
Child-related Data: Retained for as long as the child is enrolled and deleted within 12 months of the end of the service.
Communication Data: Retained for 2 years from the last contact, unless required for legal purposes.
After these periods, data will be securely deleted or anonymised.
7. Your Data Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: Request a restriction on how we use your data.
Right to Data Portability: Receive your personal data in a machine-readable format.
Right to Object: Object to the processing of your data in certain situations (e.g., direct marketing).
Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
To exercise your rights, please contact us at admin@cmxsc.co.uk. We will respond within one month.
8. Data Security
We implement appropriate technical and organisational measures to safeguard your personal data from unauthorised access, alteration, disclosure, or loss.
These include:
Secure servers and encryption of sensitive data.
Restricted access to personal data based on role and responsibility.
Regular security assessments and updates.
9. Cookies and Tracking
Our website uses cookies to improve your experience and analyze traffic. For more information, please refer to our [Cookie Policy]. You can manage your cookie preferences through your browser settings.
10. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date.
If you have any questions about this Privacy Policy or your personal data, please contact us at:
Email: admin@cmxsc.co.uk