Privacy Policy


This Privacy Policy explains what of your personal data we collect and how we use and store it.

Last updated: January 2022

 

Privacy Policy

Your privacy is really important to us. With this in mind, we have written this privacy policy to explain what personal data we collect and how we use and store it.

This policy only refers to this Tapestry CPD website. Data stored on Tapestry (https://tapestryjournal.com) is covered by a completely different policy. You can access that from https://tapestry.info/security.html or from within your Tapestry account.

We are The Foundation Stage Forum Limited. We are registered at WaterCourt, 65 High Street, Lewes, BN7 1XG.  If you have any questions about anything in this policy please contact us by emailing customer.service@eyfs.info. Our data protection officer is called Lauren Foley and can be contacted directly by emailing dpo@eyfs.info.

What data we collect and how

If you sign in using your Tapestry details (Single Sign On):

·       We collect your email address and your first and last names as used on your staff/manager Tapestry account. You consent to these being shared with us when you sign in.

·       We collect your first and last names if you update them within your user account preferences. You give these to us.

·       We record which courses you have enrolled on, your progress in the courses, and your attainment for each. This information is collected by us through our database driven website.

·       We collect anything you submit in the form of:

o   Coursework (answers to questions set by our course tutors)

o    File uploads (video, audio, documents such as Word or Excel files)

o   Comments in forums or other comment-enabled areas of the site

You give this to us.

·       We record, in our server logs, the time and nature of every interaction you perform on our site, such as logging in, viewing a course, and submitting an answer to a question within a course.

·       Raw access logs: in common with the majority of websites, our servers record a log of every access request a visitor’s browser or device makes of our site.  This record will include the request details (for example the type of page you are visiting), date and time, the IP address associated with the request (which may be your computer’s current public IP address), and the name, type, and version of the browser you are using (this latter information is supplied by your browser).

·       Canva, Google, and Siren Films may collect some statistical data from certain course pages you visit and videos you watch. For example, your IP address and information about the device you are using. They may use a variety of industry standard technologies to do this.

If you access a course as a guest:

·       We record statistical information about the courses you look at. This is collected by us through our database driven website.

·       Raw access logs: in common with the majority of websites, our servers record a log of every access request a visitor’s browser or device makes of our site. This record will include the request details (for example the type of page you are visiting), date and time, the IP address associated with the request (which may be your computer’s current public IP address), and the name, type, and version of the browser you are using (this latter information is supplied by your browser).

·       Canva, Google, and Siren Films may collect some statistical data from certain course pages you visit and videos you watch. For example, your IP address and information about the device you are using. They may use a variety of industry standard technologies to do this.

We and our third parties also use cookies. Please see our separate Cookies Policy for details on those.

 

Why we collect it

We need your email address to authenticate you, send you the notifications you request e.g. reminders and updates for the courses you are signed up to, and to tie the work you’ve done to you. This is so:

·       You can leave the site then continue where you left off on your return.

·       You can be notified about the things you’d like to be notified of (you can change your notification preferences within your account).

We need your first name and last name to:

·       Personalise the site for you

·       Address you in any email communication we may send

·       Add your name to any certificates you may earn on completing certain courses

·       Identify you and your achievements to course tutors and administrators

 

We collect which courses you have enrolled on and your attainment for each so we can:

·       Show you what you’ve already completed and let you pick up where you left off on your last visit.

·       Issue certificates when you successfully complete certain courses.

·       See which courses are most popular. That helps us understand what content visitors want to see and therefore gives us an idea of what we should make more of.

·       Analyse the content of the courses and whether the interactive elements are being used.

 

We collect anything you submit in the form of file uploads or comments in forum areas so we can:

·       Analyse the response to our courses.

·       Store and show you the work you have completed as part of your learning. 

 

We use cookies to remember your username and whether you are logged in so we can:

·       Make it quicker for you to log in on subsequent occasions.

·       Keep you logged in when you navigate through the CPD site.

 

We record statistical information about the courses you look at so we can:

·       See which courses are most popular. That helps us understand what content visitors want to see and therefore gives us an idea of what we should make more of.

·       Continually improve all aspects of our service.

 

We record server access logs so we can perform analysis to manage the operational integrity of our services, ensuring that our server resources are adequate to provide the service, to guard against malicious access which may impact on security of the site and its data, and to plan for future enhancements to the service and our infrastructure.

Our lawful basis for collecting data you give us is consent.

Our lawful basis for collecting data regarding your interactions with the site is legitimate interest.

You can withdraw your consent at any time by emailing us to ask us to delete your account and the data associated with it.

Canva, Google, and Siren Films collect some statistical data around the course pages you visit and videos or presentations you have watched in order to:

·       Maintain and improve their services.

·       Siren films also track how many views videos have for the purposes of billing us for their services.

Their lawful basis for this is legitimate interest.

 

How the above third parties connected to the CPD service

·       Canva provides presentation creation software, and in some courses we may embed our course materials directly from Canva’s servers.

·       Google: Some videos within our courses may be provided by YouTube, which is a video streaming and advertising platform owned by Alphabet, the parent company of Google and YouTube.

·       Siren Films: Some of our courses feature educational videos provided under license by Siren Films.  These videos are embedded directly from the Siren Films website.  Siren Films may use a number of video streaming services to provide their videos, including YouTube and Vimeo.

 

Where we store your data

Your data is stored and processed within the Republic of Ireland and the UK, predominantly on servers provided by Amazon Web Services but sometimes also on the devices of our staff here in the UK.

Who we share your data with

We use Amazon Web Services as a subcontractor to host https://cpd.tapestry.info/ and the data added to it. They are ISO 27001 compliant. Their address is 410 Terry Avenue North Seattle WA 98109-5210.

We use Canva to create our course material, YouTube (Google) to store and display some videos, and Siren Films for other videos. We do not pass on any of your personally identifying information to these companies but they will collect statistical data for establishing patterns via cookies.

You can find their privacy policies here:

https://www.canva.com/policies/privacy-policy/

https://policies.google.com/privacy

https://www.sirenfilms.co.uk/privacy-policy/

We do not share your data with any other company. This includes Moodle – you may recognise that Tapestry CPD is built on the Moodle Learning Management System, but no data added to Tapestry CPD is made available to the creators/owners of Moodle.

When we delete it

We delete your account and the data on it when you request it or automatically after a 3 year period of inactivity. We will email you to warn you 30 days before we do that.

The count on those 3 years begins when you have unenrolled from all courses. You will automatically be unenrolled from a course after 120 days of inactivity on it. Therefore the maximum amount of time we will hold onto your data for after your last login is 3 years and 120 days.


Preventing more data from being collected and deleting the existing data we have for you

You can ask us to delete your account at any point, just email customer.service@eyfs.info.

 

Your rights

If you are based in the European Union or the UK, you have a number of rights under the data protection law (GDPR and the Data Protection Act 2018 which is the UK’s implementation of the GDPR). They include the right to be informed of how and why we collect your data, the right to access the data we collect for you, the right to correct inaccurate or incomplete data we hold on you, and the right to have us delete any data we hold on you. You can see a full list of your rights and more detail about what they mean here:

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you would like to enforce any of your rights, you can do so by emailing customer.service@eyfs.info or dpo@eyfs.info with your request.

You can submit a Subject Access Request from within your account.

You also you have the right to lodge a complaint with a supervisory authority if you think we have misused your data. For the UK that is the ICO: https://ico.org.uk/make-a-complaint/

Changes to this privacy policy

If we change anything about what data we collect or how we handle it, we will update this policy to reflect that. If you sign in we will notify you when you next sign in. If you are a guest user, you will be able to see when we last updated this policy from the date at the very start of this policy. Please review it regularly.