Privacy Policy
This Privacy Policy explains what of your personal data we collect and how we use and store it.
Last updated: January 2022
Privacy Policy
Your privacy is really important to us. With this in mind, we have written this privacy policy to explain what personal data we collect and how we use and store it.
This policy only refers to this Tapestry CPD website. Data stored on Tapestry (https://tapestryjournal.com) is covered by a completely different policy. You can access that from https://tapestry.info/security.html or from within your Tapestry account.
We are
The Foundation Stage Forum Limited. We are registered at WaterCourt, 65 High
Street, Lewes, BN7 1XG. If you have any questions about anything in this
policy please contact us by emailing customer.service@eyfs.info. Our data protection officer is called Lauren Foley
and can be contacted directly by emailing dpo@eyfs.info.
What data we collect and how
If you
sign in using your Tapestry details (Single Sign On):
· We collect your email address and your first and last
names as used on your staff/manager Tapestry account. You consent to these being
shared with us when you sign in.
· We collect your first and last names if you update
them within your user account preferences. You give these to us.
· We record which courses you have enrolled on, your
progress in the courses, and your attainment for each. This information is
collected by us through our database driven website.
· We collect anything you submit in the form of:
o Coursework (answers to questions set by our course tutors)
o File uploads (video, audio, documents such as Word or Excel files)
o Comments in forums or other comment-enabled areas of the site
You give this to us.
· We record, in our server logs, the time and nature of
every interaction you perform on our site, such as logging in, viewing a
course, and submitting an answer to a question within a course.
· Raw access logs: in common with the majority of
websites, our servers record a log of every access request a visitor’s browser
or device makes of our site. This record
will include the request details (for example the type of page you are visiting),
date and time, the IP address associated with the request (which may be your
computer’s current public IP address), and the name, type, and version of the
browser you are using (this latter information is supplied by your browser).
· Canva, Google, and Siren Films may collect some
statistical data from certain course pages you visit and videos you watch. For
example, your IP address and information about the device you are using. They
may use a variety of industry standard technologies to do this.
If you access a course as a guest:
· We record statistical information about the courses you look at. This is collected by us through our database driven website.
· Raw access logs: in common with the majority of
websites, our servers record a log of every access request a visitor’s browser
or device makes of our site. This record will include the request details (for
example the type of page you are visiting), date and time, the IP address
associated with the request (which may be your computer’s current public IP
address), and the name, type, and version of the browser you are using (this
latter information is supplied by your browser).
· Canva, Google, and Siren Films may collect some
statistical data from certain course pages you visit and videos you watch. For
example, your IP address and information about the device you are using. They
may use a variety of industry standard technologies to do this.
We and our third parties also use
cookies. Please see our separate Cookies Policy for details on those.
Why we collect it
We need your email address to authenticate you, send you the notifications you request e.g. reminders and updates for the courses you are signed up to, and to tie the work you’ve done to you. This is so:
· You can leave the site then continue where you left off on your return.
· You can be notified about the things you’d like to be notified of (you can change your notification preferences within your account).
We need your first name and last name to:
· Personalise the site for you
· Address you in any email communication we may send
· Add your name to any certificates you may earn on completing certain courses
· Identify you and your achievements to course tutors and administrators
We collect which courses you have enrolled on and your attainment for each so we can:
· Show you what you’ve already completed and let you pick up where you left off on your last visit.
· Issue certificates when you successfully complete certain courses.
· See which courses are most popular. That helps us understand what content visitors want to see and therefore gives us an idea of what we should make more of.
· Analyse the content of the courses and whether the interactive elements are being used.
We collect anything you submit in the form of file uploads or comments in forum areas so we can:
· Analyse the response to our courses.
· Store and show you the work you have completed as part of your learning.
We use cookies to remember your username and whether you are logged in so we can:
· Make it quicker for you to log in on subsequent occasions.
· Keep you logged in when you navigate through the CPD site.
We record statistical information about the courses you look at so we can:
· See which courses are most popular. That helps us understand what content visitors want to see and therefore gives us an idea of what we should make more of.
· Continually improve all aspects of our service.
We record server access logs so we can perform analysis to manage the operational integrity of our services, ensuring that our server resources are adequate to provide the service, to guard against malicious access which may impact on security of the site and its data, and to plan for future enhancements to the service and our infrastructure.
Our lawful basis for collecting data you give us is consent.
Our lawful
basis for collecting data regarding your interactions with the site is
legitimate interest.
You can withdraw your consent at any time by emailing us to ask us to delete
your account and the data associated with it.
Canva, Google, and Siren Films collect some statistical data around the course pages you visit and videos or presentations you have watched in order to:
· Maintain and improve their services.
· Siren films also track how many views videos have for
the purposes of billing us for their services.
Their lawful basis for this is legitimate
interest.
How the above third parties connected to the CPD service
· Canva provides presentation creation software, and in
some courses we may embed our course materials directly from Canva’s servers.
· Google: Some videos within our courses may be
provided by YouTube, which is a video streaming and advertising platform owned
by Alphabet, the parent company of Google and YouTube.
· Siren Films: Some of our courses feature educational videos provided under license by Siren Films. These videos are embedded directly from the Siren Films website. Siren Films may use a number of video streaming services to provide their videos, including YouTube and Vimeo.
Where we store your data
Your data
is stored and processed within the Republic of Ireland and the UK,
predominantly on servers provided by Amazon Web Services but sometimes also on
the devices of our staff here in the UK.
Who we share your data with
We use Amazon Web Services as a subcontractor to host https://cpd.tapestry.info/ and the data added to it. They are ISO 27001 compliant. Their address is 410 Terry Avenue North Seattle WA 98109-5210.
We use Canva to create our course material, YouTube (Google) to store and display some videos, and Siren Films for other videos. We do not pass on any of your personally identifying information to these companies but they will collect statistical data for establishing patterns via cookies.
You can find their privacy policies
here:
https://www.canva.com/policies/privacy-policy/
https://policies.google.com/privacy
https://www.sirenfilms.co.uk/privacy-policy/
We do not
share your data with any other company. This includes Moodle – you may
recognise that Tapestry CPD is built on the Moodle Learning Management System,
but no data added to Tapestry CPD is made available to the creators/owners of
Moodle.
When we delete it
We delete
your account and the data on it when you request it or automatically after a 3
year period of inactivity. We will email you to warn you 30 days before we do
that.
The count on those 3 years begins when you have unenrolled from all courses.
You will automatically be unenrolled from a course after 120 days of inactivity
on it. Therefore the maximum amount of time we will hold onto your data for
after your last login is 3 years and 120 days.
Preventing more data from being collected and deleting the existing data we have for you
You can ask us to delete your account at any point, just email customer.service@eyfs.info.
Your rights
If you are based in the European Union or the UK, you have a number of rights under the data protection law (GDPR and the Data Protection Act 2018 which is the UK’s implementation of the GDPR). They include the right to be informed of how and why we collect your data, the right to access the data we collect for you, the right to correct inaccurate or incomplete data we hold on you, and the right to have us delete any data we hold on you. You can see a full list of your rights and more detail about what they mean here:
If you would like to enforce any of your rights, you can do so by emailing customer.service@eyfs.info or dpo@eyfs.info with your request.
You can submit a Subject Access Request from within your account.
You
also you have the right to lodge a complaint with a supervisory authority if
you think we have misused your data. For the UK that is the ICO: https://ico.org.uk/make-a-complaint/
Changes to this privacy policy
If we change anything about what data we collect or how we handle it, we will update this policy to reflect that. If you sign in we will notify you when you next sign in. If you are a guest user, you will be able to see when we last updated this policy from the date at the very start of this policy. Please review it regularly.