What is this guide for?
Whenever we need to collect any of your data, we will let you at that point why we need to do so and what it will be used for, but this guide provides a useful overview of all of those situations and provides more detail on how we keep your data secure and up to date, how long we might hold it for, and what your rights are in relation to it.
El Club Lopez is committed to protecting your personal data and will use any personal or sensitive data we collect from you in line with the General Data Protection Regulations (GDPR).
Who we are
We are El Club Lopez, run by Mrs Marisa Lopez (marisa@clublopez.co.uk). Our website address is: https://clublopez.co.uk.
The site is managed by Mrs Rachel Goode, a parent at Balfour and Mrs Lopez’s sister-in-law (rachel@red-code.co.uk)
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
When your child registers to join an after school club with El Club Lopez, we ask your permission to use photographs of your child on our website. We will ask your permission before putting a photograph of your child on the site and even if permission is granted you can ask us to remove the photograph at any time by contacting marisa@clublopez.co.uk.
Contact forms
Contact forms are used to gather information about you and your child. They are sent to marisa@clublopez.co.uk. They are used to find out your contact details in order to contact you about classes, and to know where to collect your child to bring them to class.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We use google analytics to track how many visitors come to the site. This data is anonymous.
Who we share your data with
The site administrators have access to your data (Mrs Marisa Lopez and Mrs Rachel Goode). We do not share your data with anyone outside of El Club Lopez.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
We sometimes use third party services to process your data (e.g. MailChimp and Stripe). We will always make sure any third parties we use are reputable, secure, and process your data in accordance with your rights under GDPR.
We use Stripe to collect payments. Payment information is passed to Stripe securely and is PCI compliant. Card details are not stored on our website.
Your contact information
We use your contact information to contact you about club activities.
We offer everybody the opportunity to sign up (consent) to receive marketing and promotional information on the group’s activities (e.g. emails about forthcoming events).
When you sign-up to our marketing mailing list we will ask for your name, email, phone number, address and will use this data to send you information about our events and activities (e.g. forthcoming performances, social events and fundraising events). We may also ask for your preferred topics and communication methods. These allow us to tailor the information we provide to suit your preferences (e.g. email vs post).
We will only send you information that is related to the group (e.g. we will not use your data to send you marketing messages from 3rd parties).
Additional information
How we protect your data
We ensure that your data is password protected and will use any personal or sensitive data we collect from you in line with the General Data Protection Regulations (GDPR).
Are there special measures for children’s data?
Where we knowingly collect or store data of children under 13 we will ensure the person with parental responsibility for the child has seen the relevant information relating to the child data or has given consent on behalf of the child.
Once a child is over 13 years old, parental consent to use their data will no longer be sufficient. We will only continue to hold/use the data if the child themselves also gives their consent.
How can you update your data?
You can contact us at any time at marisa@clublopez.co.uk to update or correct the data we hold on you.
How long we will hold your data?
Our data retention policy is to review all data held on individuals at least every two years and remove data where we no longer have a legitimate reason to keep it.
Where you have withdrawn your consent for us to use your data for a particular purpose (e.g. unsubscribed from a mailing list) we may retain some of your data for up to two years in order to preserve a record of your consent having been withdrawn.
What rights do you have?
Under the GDPR, you have the following rights over your data and its use:
- The right to be informed about what data we are collecting on you and how we will use it
- The right of access – you can ask to see the data we hold on you
- The right to rectification – you can ask that we update or correct your data
- The right to object – you can ask that we stop using your data for a particular purpose
- The right to erasure – you can ask us to delete the data we hold on you
- The right to restrict processing – you can ask that we temporarily stop using your data while the reason for its use or its accuracy are investigated
- Though unlikely to apply to the data we hold and process on you, you also have rights related to portability and automated decision making (including profiling)
All requests related to your rights should be made to marisa@clublopez.co.uk. We will respond within one month.
You can find out more about your rights on the Information Commission’s Office website
What will we do if anything changes?
If we make changes to our privacy statements or processes we will post the changes here. Where the changes are significant, we may also choose to email individuals affected with the new details. Where required by law, will we ask for your consent to continue processing your data after these changes are made.