Privacy Policy

This privacy policy outlines how First In Class Limited, the data controller, collects, uses, and protects the personal data of users of the Family & Education and iChild website. This policy is designed to be fully compliant with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). As our services are likely to be accessed by children, we also adhere to the standards of the ICO’s Children’s Code (Age-Appropriate Design Code).

1. Introduction

The Family & Education and iChild website (the “Website”) is operated by First In Class Limited (“FIC”) (Company Number: 16271975) whose registered office is at Unit 7a Waterside Business Park, Waterside, Chesham, Buckinghamshire, England, HP5 1PE. Family & Education, iChild and Captivating Classrooms are trading names of First In Class Limited (“FIC”).

FIC is the data controller of the Website (acting alone or jointly with others). FIC’s ICO Registration number is ZB973038. In this Privacy Policy, “we” “us” and “our” mean FIC.

We have nominated a Data Protection Lead to oversee compliance. The contact for this individual is info@familyandeducation.co.uk or you can call 020 4584 0600. Our website and services are targeted at persons over the age of 15. If we have reason to believe that we hold personal data of a person under that age in our databases, we will delete that personal data.

We take your privacy seriously and this Privacy Policy explains the steps we take to ensure information about you is kept secure and confidential.

2. The Data We Collect and Our Legal Basis for Processing

We collect and process various types of personal data for specific purposes. Our legal basis for processing each type of data is outlined below:

2.1 Usage data

We collect data about your use of our website, such as your IP address, location, browser type, and interaction with our pages. The source of the usage data is Google Analytics.

Purpose: to analyse and improve our website’s performance and services.

Legal Basis: this data is collected using analytics cookies. We process this data only with your explicit consent, which you provide via our cookie consent banner.

2.2 Service data

This includes personal data you provide during transactions, education programme sign-ups, or competitions (e.g., name, email, phone number).
Purpose: to operate the website, provide our services and resources, and ensure security.
Legal Basis: the performance of a contract with you, and where applicable, with your explicit consent.

2.3 Transaction data

Information related to purchases you make.
Purpose: to process your payments and maintain records of transactions.
Legal Basis: the performance of a contract and compliance with our legal obligations.

2.4 Notification data

Your email address provided for notifications or newsletters.
Purpose: to send you communications about our services or promotions.
Legal Basis: your explicit consent. You have the right to withdraw your consent at any time by using the ‘unsubscribe’ link in our emails.

2.5 Correspondence data

Information you send us via email, survey, booking form or other communications.
Purpose: to record and respond to your enquiries.
Legal Basis: our legitimate interests in the proper administration of our communications with you.

3. Providing Personal Data to Others

We may share your personal data with third-party organizations to facilitate our services. We have contractual agreements in place with these third parties to ensure they protect your data in accordance with our standards. The categories of recipients are:

Professional Advisors: such as insurers and lawyers, to manage our risks and legal affairs.
Technical Providers: such as data centre, telephony, and CRM providers, for the safe and efficient storage and operation of our services.
Payment Providers: we share your transaction data with our payment providers, PayPal and World Pay, to process payments. Their use of your data is governed by their own privacy policies, which are available on their respective websites.
Legal Obligations: we may disclose your data if legally required to do so.

4. International Transfers of Your Data

We do not anticipate transferring your personal data outside the UK or the EEA. If such a transfer were to occur, we would ensure appropriate safeguards are in place, such as transferring data to countries with an adequacy decision or using specific approved contractual clauses. We would update this policy and inform you before any such transfer occurs.

5. How We Protect and Retain Your Data

We are committed to taking appropriate technical and organisational precautions to secure your personal data. We use encryption for financial transactions and store data on secure servers and in secure manual systems. However, no data transmission over the internet can be guaranteed to be 100% secure.

Data is retained until you withdraw your consent and you no longer want to hear about our offers, competitions, free education resources and education programmes.

6. Your Rights

You have principal rights under data protection law concerning your personal data. A summary of these rights and how to exercise them is provided in the table below.

Your Right	What it Means	How to Exercise this Right
Right to be Informed	The right to know how your personal data is collected, used, and stored.	This Privacy Policy serves to inform you of these practices.
Right of Access	The right to obtain confirmation that your data is being processed and to receive a copy of that data, along with supplementary information.	Contact the Data Protection Officer using the details provided above to request a copy of your data.
Right to Rectification	The right to have any inaccurate or incomplete personal data corrected without undue delay.	Contact the Data Protection Officer to request that your data be corrected.
Right to Erasure (`Right to be Forgotten`)	The right to request the deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.	Contact the Data Protection Officer to request the erasure of your data.
Right to Restrict Processing	The right to request that the use of your personal data be limited in certain circumstances, such as if you contest its accuracy.	Contact the Data Protection Officer to request a restriction of processing.
Right to Data Portability	The right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transferred to another controller where the legal basis is consent or contract.	Contact the Data Protection Officer to request a copy of your data in a portable format.
Right to Object	The right to object to the processing of your personal data in certain circumstances, including for direct marketing.	Contact the Data Protection Officer or use the unsubscribe link in our marketing emails.
Right to Withdraw Consent	The right to withdraw your consent to data processing at any time, where consent is the legal basis for processing.	Contact the Data Protection Officer or use our consent management tools.
Right to Complain to the ICO	The right to lodge a complaint with the ICO if you believe your data has been misused or mishandled.	Contact the ICO directly at `https://ico.org.uk/make-a-complaint/`.