Privacy Policy — Connect 2 Out of School Care

1. Who we are

Connect 2 Out of School Care SCIO is a Scottish Charitable Incorporated Organisation based in Glasgow. We are the data controller for the personal data collected through this website.

If you have any questions about this policy or how we handle your data, please contact us via the contact form on our website.

2. What data we collect

We collect the following personal data through our website:

Your name and email address (via the contact form)
Child's name, date of birth, school, and class (via the registration form)
Parent/guardian name, address, phone number, and email (via the registration form)
Emergency contact details (via the registration form)
Special category data including medical conditions, medications, allergies, and dietary requirements (via the registration form)
Consent preferences (cookies, photography, emergency medical)

3. Why we collect it

To respond to enquiries submitted via the contact form
To process registrations for our out of school care services
To ensure the safety and wellbeing of children in our care
To contact parents and guardians in case of emergency
To comply with our legal obligations as a childcare provider regulated by the Care Inspectorate

4. Lawful basis for processing

We process your data on the following lawful bases under UK GDPR:

Consent — for contact form enquiries and cookie preferences
Contract — to deliver the childcare service you have registered for
Legal obligation — to meet our duties as a Care Inspectorate regulated provider
Vital interests — for medical and emergency information to protect children in our care

Special category data (medical information) is processed under Article 9(2)(c) of UK GDPR — protection of vital interests — and with explicit parental consent.

5. How we store and protect your data

Registration data is received by our staff via secure email and stored in our internal records system. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. How long we keep your data

Contact form enquiries: up to 12 months
Registration records: for the duration of the child's time with us, plus 3 years after they leave
Medical records: as required by Care Inspectorate regulations

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (where legally permitted)
Object to or restrict how we process your data
Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, please contact us via our contact form.

8. Cookies

This website uses only essential cookies required for the site to function. We do not use advertising, tracking, or analytics cookies. Your cookie preference is stored in your browser's local storage.

9. Children's privacy

We collect data about children only with the explicit consent of a parent or guardian via our registration form. We do not knowingly collect data directly from children.

10. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.