Privacy Notice for Website Users, Customers and Potential Customers
Index
- Who are we?
- How do we process your personal data?
- How long do we keep your personal data?
- How do we communicate with you?
- Who has access to your personal data?
- What are your rights?
- How can you submit a query or complaint?
- Changes to this privacy notice?
1. Who are we?
Inspire Cornwall CIC T/A DadPad (Registered Address is The Old Carriage Works, Moresk Road, Truro, Cornwall, United Kingdom, TR1 1DG. Company Registration Number is 07307740) have created this Privacy Notice to help you understand what personal data we process and how we use it when you register on DadPad. We are registered with the ICO Z3329637.
If you have any questions about this Privacy Notice, you can contact our Data Protection Manager hello@thedadpad.co.uk.
We are a Data Controller when we deal with the DadPad app and website user personal data. This means that we make decisions about the personal data we are accountable for. We work closely with Commissioners from the National Health Service (NHS) and UK Integrated Care Systems (ICS) as our mission is engage, include and support new dads as they transition to fatherhood.
- How do we process your personal data?
So that we can provide a service to you, we need to collect some of your personal data. We make sure that we only collect what we need and have outlined below the various ways in which we process your data and keep it safe.
We ensure that our systems are robust, and take great care when it comes to keeping your personal data safe. This means that we use strong passwords and other security methods such as Multi Factor Authentication. Our staff are trained on Data Protection and we ensure that our values are shared with the partners we work with.
When you visit our website and use our app: We use cookies which collect various types of personal data. This will include details about your visits to our website or app; page views, downloads, navigation, and exit; IP address; geographical location; browser type and version; operating system; referral source; length of your visit.
Some of these cookies are necessary to ensure that the website or app works correctly, and other cookies require your consent. You can find out more about our cookies and how you can manage your consent in our cookie policy here.
Our website or app may contain links to other external websites. We aren’t responsible for the practices, policies or content of such websites and suggest that you check their privacy notices to ensure that you are happy to click on the links.
When you register on DadPad we will collect
Details which identify you (name, username, date of birth, email address, postcode) which means you can create a login on the DadPad App. This is so that we can fulfil our contract to you, provide you helpful information about being a dad and answer any enquires you may have.
During the testing of the DadPad app, we will not be recruiting under 18s.
When you’ve created an account with the DadPad App there are a few optional details which you can choose to enter. This is so that we can show you content and information which we hope you will find helpful. These are:
- Ethnicity
- Age Categories of your baby
- Your child’s gender
- Details about you
- Areas of interest
We will ask for your consent when we collect each of these pieces of information. You can choose what you reveal to us and change your mind by returning to your account in your user profile page and changing your settings.
We will collect statistical information, because we want to understand how we can improve the DadPad App and help you further. We are careful to ensure that this information is anonymised.
When you log onto our Managed Community Group, we will process any personal data you submit to the group. You should be aware that the information you post on the group will be visible to other members of the DadPad community. Please take care when you are posting on the group and remember to follow our General Community Guidelines as well as any guidelines specific to your group/s (you can refer to these in your profile page at any time along with our Terms of Service.
Safeguarding on the Community Forum.
You can find out more about how we share data with organisations below in ‘Who do we share data with’. However, if there is a safeguarding issue, we may share your personal data with public authorities if we are required by the law to do so. We will share your personal data if we feel there is risk of harm to a child or vulnerable person. This may mean sharing location data, content you have created such as posts or direct messages and any other situation we feel is relevant.
You can read more about this in our Terms of Service.
When you buy our DadPad book on the website: We will process your name and contact details, so that we can fulfill our contract to you and answer any enquiries you may have. We will also process financial details about yourself to enable payment for our service. You can pay by PayPal or by direct bank transfer.
We keep records of your purchases so that we can manage and plan our business effectively. Keeping records such as this is in our legitimate interest as a business, and we make sure that none of this affects your individual rights.
We may send you a reminder email if you leave a product in the website cart. We do this under the lawful basis of legitimate interest. We will also offer you the option to opt out of marketing from us at the point of purchase. If you don’t opt out, you are welcome to unsubscribe at any time.
When you are a commissioner or one of our funders: We will collect and process your name and business contact details because we have a legitimate interest to do so. This is because we have a contract with your organisation so that we can work together to improve services to Dads.
When you join our marketing list: We will collect your name and contact details so that we can send you appropriate marketing communications. You are welcome to unsubscribe at any time. When you unsubscribe, your personal data will go onto our suppression list so that we don’t email you in error.
When you send us an enquiry: You may have sent us an enquiry via the contact page on our website. We will collect your name and contact details as it’s in our legitimate interest to do so that we can enter into correspondence with you and answer your enquiry.
3. How long do we keep your personal data?
If you are on our marketing list: If you remain part of our active marketing list, we will keep your personal data until you opt out. At that point we will use a suppression list to ensure that we don’t contact you in error.
If you have consented to non-essential cookies: We will keep your data in accordance with our cookie notice. You can update your preference on our Cookies Consent Management Platform.
If you are registered on ‘Dad Pad’: We will keep your personal data for as long as we have a contract with you. If you delete your account, we will contact you to confirm that this hasn’t been deleted in error. If we do not hear from you, we will retain your data for a further 30 days and then securely delete.
If you are part of our Test Flight community: We will offer you the option to stay on and participate as part of DadPads continuing improvement. If you choose not to take part, we will securely delete your data after 6 months.
If you purchase a ‘Dad Pad’ book: We will keep your personal data for 7 years in accordance with HMRC guidelines.
4. How do we communicate with you?
Non-Marketing Communications include: service messages, acknowledgement of purchase in the case of the Dad Pad book, confirmation of registration on the DadPad app, answers to enquiries and other communications to ensure that we deliver the services you expect from us.
Marketing Communications include: Emails, In App notifications or SMS regarding other services we offer as well as content marketing we hope you will find useful. You are welcome to unsubscribe from marketing messages at any time.
Social Media: We use Facebook, Twitter, LinkedIn, Instagram and YouTube. We sometimes use paid advertising on these platforms, but we will only use custom audiences with your consent. You can find a copy of this Privacy Notice on our Facebook page in the ‘About’ section.
5. Who do we share your personal data with?
We share your personal data with various organisations so we can fulfill our contract with you to help us run DadPad and to fulfill our legal obligations.
These include: Marketing Agencies, Accountants and Webhosts. We also use Google, DropBox, Email Marketing Platforms and Project Management systems to help us in the running of DadPad. It is possible that if we are obliged by law, we will disclose your personal details to the authorities.
We also share aggregated data with Health Service Commissioners and Funders. This means that we summarise data from the DadPad App so that commissioners are able to fund our services in your various of the UK. The data we share doesn’t contain any of your personal data. The funding they provide helps Dads like yourselves to access services free at the point of use so that you can get more support in your parenting journey.
We will also share anonymised quotes from the DadPad app to help our funders understand how their funding has helped Dads and what they can do to improve the services they offer.
We use PayPal as a third-party payment processor to process credit card payments. You can find more about how PayPal processes your personal data on their privacy notice here. We do not store your credit card details.
We will only share your data with organisations who have appropriate safeguarding mechanisms in place such as Standard Contractual Clauses. We have Data Processing Agreements with our Data Processors and never sell personal data to third parties.
In the event that DadPad is sold or transfers its assets to another party, your personal data could be one of the transferred assets. If your personal data is transferred it will remain subject to this Privacy Notice and you will be advised at the time of the sale. Your personal data will be passed onto a successor in the event of a liquidation or administration.
6. What are your rights?
You have several rights which you can access free of charge. In certain circumstances we reserve the right to charge a reasonable fee if your requests are unfounded or excessive.
You have the right:
- Right of access: You are able to ask us questions about what personal data we hold on you and request a copy of it.
- Right to rectification: If the personal data we have on you is inaccurate or incomplete, you can ask us to put this right.
- Right to be forgotten/erasure: You are able to ask us to delete your personal data. This right isn’t absolute and there will be situations where we still have a right to keep your personal data.
- Right of restriction: If you object to the use of your personal data, you are able to ask us to restrict its processing. We will do this if we have no legal basis for processing your personal data.
- Right to data portability: In some circumstances, you are able to ask us to transfer the personal data we hold about you to another Data Controller.
- Right to object: You can object to us sending you marketing messages.
- Automated decision making: You have a right not to be subjected to automated decision making and profiling in certain circumstances. DadPad does not use your personal data to make automated decisions about you.
For more information about these rights and when you can request them, please visit the Information Commissioners Guide to Data Subject Rights
Not all of these rights are ‘absolute’ and some won’t be applicable. If you wish to exercise any of these rights, please contact us at hello@thedadpad.co.uk. We will respond to you within one month. If your request is complex and we require more time, we will contact you and let you know within the first month.
7. How can you submit a query or a complaint?
We are always happy to answer your queries regarding privacy. Please contact our DPM on hello@thedadpad.co.uk
If you have a complaint, please get in touch with us so that we can resolve any concerns. You also have a right to lodge a complaint with the Information Commissioner’s Office if you believe your personal data has been processed in a way which does not comply with Data Protection Legislation. You can call the ICO helpline on 0303 123 1113 or visit their website here.
8. Changes to this privacy notice
We keep this Privacy Notice under regular review. The most recent update is [03/03/2023]