Privacy Notice

Department for Education Privacy Notice

The Bristol & Beyond Early Years Stronger Practice Hub is part of the national Early Years Stronger Practice Hubs programme, which is funded and overseen by the Department for Education (DfE). For any personal data processed through the programme, the DfE acts as the data controller.

The DfE’s privacy notice explains how it collects and uses personal information across the programme. In summary, it sets out that:

  • The DfE’s lawful basis for processing your data is Public Task, under Article 6(1)(e) of the UK GDPR.
  • The information collected may include your name, email address, telephone number, organisation name and address, and job role. For some parties it may also include salary information (to evidence grant claims) and bank details.
  • This data is used to manage, quality assure and evaluate the programme, to handle grant claims and payments, and to support engagement with local authorities, settings, practitioners and community organisations.
  • Personal data is kept for up to 12 months after the programme ends (currently estimated to be March 2029), then securely deleted.
  • The DfE uses data processors to deliver the programme, including its delivery partner Ambition Institute and the Stronger Practice Hubs themselves.
  • Data may be shared within the DfE and with other government departments where the law allows, for purposes such as preventing crime or fraud and safeguarding children.

You can read the full notice, including how to make a subject access request and how to contact the DfE’s Data Protection Officer, here.

Bristol Early Years Teaching Hub Privacy Policy

The Bristol & Beyond Early Years Stronger Practice Hub follows the Department for Education Privacy Notice for the Stronger Practice Hubs Programme.

The Bristol & Beyond Early Years Stronger Practice Hub aims to ensure that all personal data collected through the mailbase and hub activities is collected, stored and processed in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).

How we use your details

By signing up on our form, you agree that your contact details will be kept by the Bristol Early Years Teaching Hub and Bristol & Beyond Stronger Practice Hub at St. Paul’s Nursery School and Children’s Centre. Your details will be kept for the purpose of communicating with you about the services of the hub.

We use HubSpot as our marketing platform, and your information will be transferred to HubSpot for processing. You can read HubSpot’s Privacy Policy here.

Who is responsible for your data

The Bristol Early Years Teaching Hub is based at St. Paul’s Nursery School and Children’s Centre and currently follows the school’s Data Protection Policy. St. Paul’s Nursery School and Children’s Centre is the data controller and is registered with the Information Commissioner’s Office (ICO). The school’s Data Protection Officer is the DPO Centre, who can be contacted at advice@dpocentre.com.

Our data protection principles

In line with the UK GDPR, we make sure that any personal data we hold is:

  • processed lawfully, fairly and transparently;
  • collected only for specified, explicit and legitimate purposes;
  • limited to what is necessary for those purposes;
  • accurate and, where needed, kept up to date;
  • kept no longer than necessary; and
  • kept secure.

Keeping your data secure

We take appropriate steps to protect your information from unauthorised access, loss or misuse. This includes storing data securely, limiting access to those who need it, and using passwords and encryption to protect devices and systems.

Your rights

You have a number of rights over the personal data we hold about you. You can:

  • ask to see the personal data we hold about you (a subject access request);
  • ask us to correct information that is inaccurate or incomplete;
  • ask us to erase or restrict how we use your data in certain circumstances;
  • object to your data being used for direct marketing;
  • withdraw your consent at any time; and
  • make a complaint to the ICO.

To exercise any of these rights, please contact us at sph@beyth.co.uk. You can also unsubscribe from our emails at any time using the link at the bottom of any message we send you.

Data breaches

We take all reasonable steps to keep your data safe. In the unlikely event of a personal data breach, we will follow the school’s data breach procedure and, where required, report it to the ICO within 72 hours of becoming aware of it.

Cookie Policy

Our website, beyth.co.uk, uses cookies and similar technologies (such as scripts and web beacons) to help the site work properly, to understand how it is being used, and to support our communications. Some cookies are also placed by third parties whose services we use.

In summary, the cookies on our website fall into a few categories:

  • Functional cookies, which are needed for the site to work properly. These may be placed without your consent.
  • Statistics cookies, such as Google Analytics, which help us understand how the site is used. We ask your permission before placing these.
  • Marketing and tracking cookies, along with social media content embedded from platforms such as Facebook and X, which may place their own cookies.

When you first visit our website, a pop-up lets you choose which categories of cookies you are happy to accept. You can change your preferences at any time, and you can also control or delete cookies through your browser settings, although the site may not work as smoothly if some cookies are disabled.

You can read our full Cookie Policy, including a complete list of the cookies we use and your rights over your personal data, here.