Privacy Notice

Millie’s Mark is delivered by NDNA on behalf of Millie’s Trust and supported by the Department for Education (DfE). NDNA is a not-for-profit membership association providing services to day nurseries and early years or childcare providers.

This Privacy Notice explains our practices, including your choices, regarding the collection, use and disclosure of certain information, including your personal information, by National Day Nurseries Association (NDNA) when using the Millie’s Mark website.

We reserve the right to change or update this Privacy Notice at any time.

Please read this Privacy Notice carefully to understand how we will use your personal information.

Contacting us

If you have general questions about your use of Millie’s Mark contact info@milliesmark.com or by phoning the NDNA Head Office on 01484 407070.

The data controller of your personal information is National Day Nurseries Association (NDNA), Longbow Close, Huddersfield HD2 1GQ. For questions specifically about this Privacy Notice, or our use of your personal information, cookies or similar technologies, please contact us by email at privacy@NDNA.org.uk.

Data Protection principles

We will comply with UK and EU data protection law. This says that the personal information we hold about you must be:

Used lawfully, fairly and in a transparent way
Collected only for valid purposes that we have clearly explained
Relevant to the purposes we have told you about and limited to those purposes
Accurate and kept up-to-date
Kept only as long as necessary for the purposes we have told you about
Kept securely.

We collect and use personal information relating to nurseries, childcare settings and individuals such as childminders as part of our activities. This is generally in order to manage and deliver Millie’s Mark.

Collection of information

We receive and store information about you such as:

Information you provide to us:
Your name, email address, postal address, telephone number, payment method and certain information about you and/or your business such as number of childcare places. We collect this information online when you enter it or give it to us while accessing our website or applying for Millie’s Mark accreditation or buying associated products in the Millie’s Mark online shop.

We may collect the following information about you: Your name, job title, address, date of birth, email address, phone number, financial and debit card information.

Information we collect automatically via the use of cookies for example:

Information about your use of the website
The requested web page or download with date and time you accessed the website
The internet IP address from which you accessed the website
Details about your device, browser and operating system for support purposes
Use of cookies.

In order to do this, we may send cookies to your device. Cookies are text files that let us identify your device, carry out transactions and capture the information above. You can adjust the settings on your device to decline use of cookies by the Millie’s Mark website however this may limit your ability to buy products and services and carry out certain functions of the website. Please contact the supplier of your device for instructions on how to do this.

Information from other sources: We might supplement the information described above with information we obtain from other sources, such as Ofsted.

Use of information

Most of the personal information we process is provided to us directly by you, usually when you take advantage of our products and services via our online platforms or participate in surveys or promotions. We collect the information for one of the following reasons:

To deliver products and services you purchased
To keep you updated with new developments on Millie’s Mark and to communicate with you.
To administer, evaluate and improve the products and services we provide to you and the early years sector
To process your orders, bookings, and payments
To communicate with you in relation to the products and services you have purchased.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You can remove your consent at any time. You can do this by contacting privacy@ndna.org.uk. You can also remove consent by following the links provided in all our marketing email communications.

Consent is used to enable us to communicate with you about our products and services.

(b) We have a contractual obligation.

Contractual obligation is used for providing you the products and services that you have purchased.

This is used in circumstances such as processing financial data.

(d) We have a legitimate interest.

All our email communications include clearly visible unsubscribe and opt-out links for changing preferences. You can opt-out of communications or update your preferences at any time by emailing  privacy@ndna.org.uk.

Consent – your choices

We will only contact your personal email address if we have your consent to do so. All our marketing email communications include clearly visible unsubscribe and opt-out links for changing preferences. You can opt out of communications at any time by emailing privacy@ndna.org.uk.

Sharing of information

Personal Information collected by us will be used only to communicate with you about Millie’s Mark and not passed to third parties unless you have given consent, except where the product or service is delivered by a third party on our behalf, or we are obliged by law to do so. If those third parties are based outside the EU, we will ensure that their data processing activities are compliant with EU law. We will only keep data for as long as necessary.

Storage and Retention of information

Your information is securely stored. All our information is stored in accordance with UK law.

We keep your information for as long as required either by UK or EU law and as long as we need it to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements and to support the delivery of products and services and fulfilling contractual requirements, and for the legitimate running of Millie’s Mark. In line with UK GDPR, personal data will not be stored longer than necessary for the purposes for which it was collected.

Data relating to safeguarding concerns reported to Millie’s Mark/ NDNA are held for up to 25 years.

We will then dispose of your information by secure electronic file deletion methods.

If we hold your personal information in a physical format this will be securely held and disposed of when required.

Use of the Millie’s Mark website

Within our website, we link to other useful organisations’ websites that may be of use to you; however we do not endorse the information on these websites and are not responsible for the websites’ content. NDNA cannot be held responsible for the privacy of data collected by these sites. You should review their privacy policy before sending them any personal data.

We make every effort to ensure that viruses, malware and other malicious software is excluded from our website, however we advise that you take appropriate precautions to protect your device. NDNA cannot be held responsible for any consequential damage from malicious software or any other use of our website, products or services.

We use Stripe to collect/process transaction information. Please view Stripe’s security policy. NDNA are responsible for the transaction. Credit card details are entered on a secured page, and they are transferred using SSL. We accept 3D Secure transactions

Your information and rights

You have the right to access any information we hold relating to you. You can request access to personal information or details of any transfers to third parties by emailing our Data Protection Officer at privacy@ndna.org.uk. You also have the right to ask us not to process your personal data for direct marketing purposes and that we delete personal information that we hold about you.

If you choose to make a request to us, we will aim to respond to you within one week. We will not charge a fee for dealing with your request.

We may reject requests that are unreasonable or not required by law, including those that would be extremely impractical or could require disproportionate technical effort.

If you are dissatisfied with how we are using your personal information or if you wish to complain about how we have handled a request, then please contact GDPR@ndna.org.uk and we will try to resolve any issues you may have.

You also have the right to complain to the Information Commissioner’s Office, which is the statutory regulator for data protection law. Find details of how to complain to the ICO.