PRIVACY NOTICE

Introduction

Kids&Code takes the protection of your privacy seriously. We exclusively collect, store, and retain the personal data of our website/platform users to provide the best possible service and treat this data with the utmost care. This Privacy Notice is subject to UK GDPR Data Protection Act 2018.

Kids&Code is responsible (as the "data controller") for processing your personal data as explained in this Privacy Notice.

This Privacy Notice outlines the policies by which Kids&Code collects, manages, and uses the personal data provided to us by the website/platform users, and how users may exercise their data protection rights.

Topics

  1. When do we collect and process your personal data?
  2. What personal data do we collect and why?
  3. The legal basis of data processing
  4. How long do we store your personal data?
  5. Who do we share your personal data with?
  6. Data Transfers
  7. What are your data protection rights?
  8. Cookies
  9. Data Security
  10. Minors Notice
  11. Privacy Policies of Other Websites
  12. Changes within this Privacy Notice
  13. Contacting Kids&Code
  14. Making an Official Complaint

1. When do we collect and process your personal data?

We collect the information you provide us on an inquiry or upon your registration to a course:

Contact Form Information on the website):

When you submit an inquiry about the service through our website or on a landing page that you were directed to from an online ad, you will be asked to provide us with your contact information, such as your name, email address, phone number, and age in order to provide the right service for you (age and time appropriate required services)

Registering Information through the registration form:

We will ask you to provide your contact information as well as additional information, such as your child's name (for registration of minors), date of birth, place of birth, email address, and phone number in order to choose the right activity and course they wish to enroll in.

Platform Profile and Course Forum:

We operate a Learning Management System platform that organizes your child's user account and course information. Having an account on the platform is not publicly through our website, but its created by you (only parents can control the account) after enrolling your child in a course, we will send you an invitation to enroll your child in the platform ( note that you can create the password and access your child's account and control it) we don't have access to your child's account. However, Your child may participate in forum discussions with their classmates. All discussions are monitored by the platform admin and related to course materilas.

Feedback:

If your child is a student in one of our courses, we may contact you to tell you about the possibility of providing a review for promotional purposes. If you agree (implying your child's agreement), we will collect the review from you after you sign a written parental consent with the date (which you have the right to cancel at any time by sending an email requesting to delete all shared feedback)

2. What personal data do we collect and why?

When you visit our website, you may contact us directly via contact forms or e-mail.

If you choose to contact us directly, we will only use the personal data you provided us with to respond to your message and, in case, provide the service you require.

Submission of the registration form sent to you by us after contacting the website (to ensure you have the appropriate service you are asking for) may contain the following information:

Basic personal information ( Name, Age, Country, Email Address, Phone number)

We only need your email address to create invoices(a link is electronically generated), we don't collect any financial details or data related to your bank account/credit card details)

We may ask you to provide us with personal photos and videos for promotional purposes, a consent form with the date and signature should be submitted by you whenever you send any personal photos and videos.

3. The legal basis of data processing?

The legal basis for using our contact form on the website to get in touch with you in response to your inquiry and to determine when we should get in touch with you is our legitimate interest in prioritizing and responding to inquiries.

The legal basis for processing the Registration Information and Course Information for course teaching, management, and administration is the performance of our contract with you to provide the e-learning course and the steps necessary before entering the contract.

The legal basis for processing LMS Profile and Course Forum to facilitate student interaction and discussions on course topics is our legitimate interest in fostering an active and vibrant e-learning environment for students.

The legal basis for processing your Registration Information and Contact Information to provide you with customer support, send you administrative reminders and notifications by email and SMS, and handle your inquiries effectively is our legitimate organization's interest in promoting your engagement with and active participation in the e-learning course.

The legal basis for using Feedback is your explicit consent expressed when you voluntarily submit the Feedback.

The legal basis for using and sharing your information with authorities, for the purpose of handling violations of law or to assert or defend against legal claims such as in case our terms of service were violated, or in case of misuse of our Service, is our legitimate interests in protecting our business against violations, as well as protecting the vital interests of others.

The legal basis for sharing information we have about you if we are required to do so by a judicial, governmental, or regulatory authority, is the legitimate interests of the authority that seeks the information, our legitimate interests in complying with mandatory legal requirements imposed on us.

The legal basis for sharing your information in the event of a change in our corporate structure is our legitimate interests in our business continuity.

4. How long do we store your personal data?

We retain personal data for as long as necessary to provide our courses and services and to comply with legal obligations. We aim to review personal data and where relevant delete it automatically after a period of 5 years from its initial collection ( submission date).

Your child's account on the platform will be under your full control as a parent and automatically deleted when his/her courses are finished and wish not to continue (Not an active user anymore)

If you wish to withdraw your consent to shared feedback, you can send an email asking for that and your information will delete manually.

In addition, you may contact us to delete the personal data that you have provided during registration.

5. Who do we share your personal data with?

We do not currently share personal data with third-party service providers; however, personal data is shared with the staff of the organization where applicable to allow them to carry out their functions (this data is securely stored, and password protected). We may disclose personal data to law enforcement or government authorities if required by law.

Course Forum discussions are shared with and viewable by all users enrolled in the class as well as the course tutors.

Your Feedback is posted on social media, and on our Website, and thus is shared with and viewable by anyone on the Internet.

We will share information we have about you if we are required to do so by a judicial, governmental, or regulatory authority.

6. Data Transfers

Information we collect from you will be processed first and foremost in the United Kingdom. On 28 June 2021, the EU approved adequacy decisions for the EU GDPR and the Law Enforcement Directive (LED). This means data can continue to flow as it did before, in the majority of circumstances.

Both decisions are expected to last until 27 June 2025.

The General Data Protection Regulation has been kept in UK law as the UK GDPR.

We occasionally transfer personal data to our staff outside the EEA (a country that is covered by GDPR), to allow them to carry out their function within the organization (as before, securely stored and password protected).

No personal data going to be disclosed to users visiting the website, registering to the platform, or the courses outside of the EEA

7. What are your data protection rights?

Kids&Code would like to ensure you are fully aware of all your data protection rights. Every website user is entitled to the following:

  • The right to access – You have the right to request Kids&Code for copies of your personal data.
  • The right to rectification – You have the right to request that Kids&Code correct any information you believe is inaccurate. You also have the right to request Kids&Code to complete the information you believe is incomplete.
  • The right to erasure – You have the right to request that Kids&Code erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that Kids&Code restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to Kids&Code processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that Kids&Code transfer the data we have collected to another organization, or directly to you, under certain conditions.

Whenever we process your personal data based on your consent, you also have the right to withdraw your consent at any time. If you would like to exercise any of these rights, we ask that you send us an e-mail at info@kidsandcodes.com Your request should be dated and signed and should clearly state and specify which right you wish to exercise. We will notify you as soon as reasonably possible and at the latest thirty (30) days after having received the request. Please note that whenever you wish to exercise a right, we may ask you to provide proof of identity.

8. Cookies

We don't use Cookies

9. Data Security

We take appropriate measures to ensure the security of the personal data we collect, store, or share, including encryption, access controls, and regular security reviews.

10. MINORS Notice

The Service includes courses that are intended for children under 18. However, only parents can contact us and provide the information needed for their child to enroll in our courses and activity.

In case we have been contacted by a child under 18, we ask for the parent's contact information so we can provide the right service for their child.

The concept of the best interests of the child comes from Article 3 of the United Nations Convention on the Rights of the Child. Although it is not specifically referenced in the UK GDPR it is something that the Commissioner will take into account when considering compliance, and that you should consider when making decisions about the processing of children's personal data. It states that:

'In all actions concerning children, whether undertaken by public or private social welfare institutions, courts of law, administrative authorities or legislative bodies, the best interests of the child shall be a primary consideration.'

We have put in place appropriate technical and organizational measures to implement the data protection principles and safeguard individual rights. We incorporate child-friendly design into our LMS and take into account the rights and freedoms of the child so that their freedom to learn, develop and explore is only restricted when this is proportionate.

Transparency is also key. We raise children's (and their parent's) awareness of data protection risks, consequences, safeguards, and rights by telling them what we are doing with their personal data; being open about the risks and safeguards involved, and letting them know what to do if they are unhappy.

This will help them make informed decisions about what personal data they wish to share.

Our approach is privacy by design and by default, taking into account the age of the children as far as we can, and the personal data we will be processing.

This notice applies to information collected from the child's use of the Service in respect of the course he or she is presently enrolled in, and in respect of courses he or she may be enrolled in in the future.

Information we collect from children and the ways we use it:

We collect the following information from children, for the purposes explained below:

  • During our onboarding interview with the parent, we may, with the parent's permission, speak with the child to obtain information regarding the child's level of knowledge and skills in order to assess his or her suitability for a given course level.
  • When the child logs into an online lesson, he or she is asked to provide a name or nickname. The name or nickname entered is presented to all other lesson participants during the lesson and is shown on the lesson's recorded footage.
  • At the child's choice, he or she may enter chat messages on a lesson's chat environment, which is presented to all other lesson participants during the lesson. When the child speaks during a lesson, whatever he or she says is heard by all other lesson participants during the lesson.
  • When the child presents his or her coursework during a lesson, his or her webcam feed or screen share is presented to all other lesson participants during a lesson.
  • At the child's choice, he or she may add a profile image to his or her profile page on the platform. The image is used only for the purpose of maintaining the child's profile page. As a parent, you may ask us to block your child from uploading a profile image on our Learning Management System (LMS).
  • At the child's choice, he or she may publish posts on the course's forum. In addition, the child may upload files to a shared environment. The content of such posts, uploads, and mind maps, which may include personal information, is determined by the posting child. The posts, uploads, and mind maps are used for the purpose of the course. Note that as a parent, you may ask us to block your child's ability to post on the course's forum on our Learning Management System (LMS).
  • The child receives the email address and telephone number of the course's instructor. When the child communicates with the course's instructor, he or she, at their choice, may communicate personal information concerning him or herself. That information is only used for the purpose of course instruction and administration.
  • The child's attendance information for the course and information concerning the child's viewership of course materials. This information is used only for course instruction and administration purposes.

Enabling the child to make personal information publicly available:

The child may make personal information available to the child's fellow peers on the course in the following instances:

  • The child's name, his or her lesson chat messages, and screen-share, as explained above. These are exposed to all lesson participants during the lesson.
  • Profile image that the child adds to his or her profile on the Service (if you have not asked us to block this choice).
  • Posts published by the child on the course's forum (if you have not asked us to block this choice).
  • Files uploaded by the child to the shared environment of the course.

To whom we disclose the information we collect from children:

The information outlined above in "Enabling the child to make personal information publicly available" is disclosed to the child's fellow peers on the course.

Parental rights regarding the information we collect from children.

As a parent, you may review or have the child's personal information deleted. You may also refuse to permit further collection of the child's information. In that case, we will remove your child from the course and block him or her from participating in the course.

To exercise any of these rights, contact us through any of the channels listed below.

11. Privacy Policies of Other Websites

The Kids&Code website contains links to other websites (such as partners). This Privacy Notice applies only to this website, so if you click on a link to another website, you should read their privacy policy.

Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their use of your data. We recommend that you read any privacy notices on their websites carefully. In addition, if you linked to the Kids&Code website from a third-party website, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party website and recommend that you check the privacy notice of that third-party website.

12. Changes within this Privacy Notice

This Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our personal information practices. Any and all changes to this Privacy Notice will be posted here, and if we make any substantial changes, we will provide additional notice by sending you an e-mail. Any and all changes to this Privacy Notice will take effect upon their publication. Your further use of this website and our services after a change to our Privacy Notice will be subject to the updated Privacy Notice. This Privacy Notice was last updated on 03/05/2023

13. Contacting Kids&Code

If you have any questions about this Privacy Notice, the processing of your personal data, if you would like to exercise one of your data protection rights, or if you have any complaint regarding the processing of your personal data by Kids&Code, you can always contact us:

Via email: info@kidsandcodes.com

Via telephone: +44 7427301201

Via post: Kids&Codes, S60 8BA, 7 Rosewood Drive, Rotherham, UK

14. Making an Official Complaint

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the UK, You can complain to the ICO about the way our organization has handled your personal information.

In most cases, before you complain to ICO you need to have Complained directly to us, asked for clarification from us if you have had a response you don't understand, followed up with us if you have not received a response after 30 days.

If you have followed all these steps or have not received a response from us, you can submit your complaint. You should do this within three months of your last contact with the Kids&Codes.