At Happy Me Parenting and www.happymeparenting.com, data protection and data security when using my website are very important to me, Fiona Ng, and the third parties involved in the process (for readability, collectively “we”, “us”, or “our”).
This Privacy Policy describes our privacy practices in plain language, keeping legal and technical jargon to a minimum, to make sure you understand the information provided. However, to achieve this objective we would like to explain you the following concepts.
What is Personal Data?
Personal Data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute Personal Data.
What is Processing?
“Processing” means and covers virtually any handling of data.
What law applies?
In principle, we will only use your Personal Data in accordance with the applicable data protection laws, in particular the UK`s Data Protection Act (“DPA”) and EU`s General Data Protection Regulation (“GDPR”).
Who is responsible for data processing?
The responsible person is: Fiona Ng of Happy Me Parenting. If you have any questions or if you wish to exercise your rights, please contact me using fiona@happymeparenting.com, or call 07980 381664, or write to me at the above address.
Purpose and legal basis of processing
We need to have both a purpose and a legal basis to process Personal Data. The purposes are: a) providing the website and its functions and contents; b) providing my services; c) responding to contact requests and communicating with our users, if required; and d) security measures.
Of course, we can only do that if we have at least one of the following legal bases or in other words lawful reasons to do so. As such we typically link the above purposes to one of the following: a) your consent; b) to fulfil my services and carry out contractual obligations; c) to fulfil our legal obligations; and d) to protect our legitimate interests.
Categories of data subjects and types of data processed
During the course of using my website, we process the following types of data from visitors and users: a) contact data, if provided; b) contract data, if required; b) content data, if provided; c) usage data; and d) meta/communication data.
Security
My website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, login data or contact requests that you send to us. We have also implemented numerous security measures (“technical and organisational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Data processed through this website.
Retention and Storage
We retain your Personal Data as necessary in connection with the purposes described in this Privacy Policy, and in accordance with the UK’s Statutory Retention Periods and other applicable laws for up to 6 years.
Sharing and Disclosure
We will not disclose or otherwise distribute your Personal Data to third parties unless this is a) necessary for the performance of our services including the website; b) you have consented to the disclosure; c) or if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or other legal proceedings; as required by law or regulation; if Happy Me Parenting (or a part of Happy Me Parenting) is sold to or merged with another legal entity; or proceedings at home or abroad or to fulfil our legitimate interests.
Minors
We do not request Personal Data from minors and children and do not knowingly collect such data or pass it on to third parties.
Automated decision-making
Automated decision-making including profiling does not take place.
Do Not Sell
We do not sell your Personal Data.
Special Category Data
Unless specifically required and consent is obtained, for a particular service, we do not process special category data.
Log files
When you visit my website, we collect the Personal Data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. This includes: a) IP address of the requesting computer; b) Date and time of access; c) name and URL of the file accessed; d) website from which the access was made (referrer URL); e) browser used and, if applicable, the operating system of your device as well as the name of your access provider. The processing is necessary for the provision of a website and thus serves to protect our legitimate interest.
Content Management System (CMS)
We use the Content Management System (CMS) of WordPress a service provided by Automattic Inc, to publish and maintain the created and edited content and texts on my website. This means that all content and texts submitted to my website is transferred to WordPress. The legal basis for this processing is our legitimate interest.
Cookies
We use so-called cookies on my web site. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.
Contacting me
We may ask you for Personal Data when you contact me. Categories of Personal Data we collect may include your name, email address, phone number and IP addresses and your message. The legal basis for the use of your contact data is your consent, our legitimate interest, the provision of a contractual or precontractual measure and our legal obligation in case of a Data Subject Access request, as applicable.
I`m present on social media on the basis of my legitimate interest (currently Facebook, Instagram, LinkedIn, and Twitter). If you contact or connect with me via social media platforms, the relevant social media platform and I are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The legal basis is my legitimate interest, your consent or, in some cases, the initiation of a contractual service, if any.
Data processing in the context of providing my services
The protection of your Personal Data is particularly important in the performance of my services. We therefore only want to process as much Personal Data (for example, your name, address, e-mail address or telephone number) as is absolutely necessary. Nevertheless, we rely on the processing of certain Personal Data, to fulfil my contractual obligations to you or to carry out pre-contractual measures and in the context of administrative tasks as well as organisation of our business, and compliance with legal obligations, such as archiving.
Some of the Personal Data you provide may be considered “special” or “sensitive”. This includes Personal Data concerning for example your health, racial or ethnic origins, sexual orientation, and religious beliefs. By choosing to provide this data, you consent to the processing of that data.
You may withdraw your consent and request us to stop using your Special Category Data by submitting your request to me.
I also use Zoom or other similar services to conduct online meetings and various types of data are processed when using an online platform for meetings. The scope of the data depends on the information you provide before or during the online meeting.
Administration, financial accounting, office organisation, contact management
I process data in the context of administrative tasks as well as organisation of my operations, financial accounting and compliance with legal obligations, such as archiving. In this regard, I process the same data that I process in the course of providing my contractual services. The purpose and my interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of my services.
When you watch my videos
On my website, we implement videos of the video portal “YouTube” of the company Google LLC.
When you call up a page that has an embedded video, a connection is established to Google’s servers and in the process the content is displayed on the website by notifying your browser. According to Google’s information, in “extended data protection mode” your data – in particular which of our Internet pages you have visited as well as device-specific information including the IP address – is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission. If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your YouTube account before visiting my website.
Marketing
Insofar as you have also given me your consent to process your Personal Information for marketing and advertising purposes, I`m entitled to contact you for these purposes via the communication channels you have given your consent to.
Newsletter
If you have consented to receive my newsletter, we will use your e-mail address and, if applicable, your name to send you information about services, promotions, competitions, and news. You can revoke your consent to receive the newsletter at any time with effect for the future. You will find the unsubscribe link at the end of each newsletter.
Cooperation with processors and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g., if a transmission of the data to third parties, you have consented, a legal obligation provides for this or on the basis of our legitimate interests. If we commission third parties to process data on the basis of a so-called “processing agreement”.
Third-party services and content
We use content or service offers of third-party providers on the basis of our legitimate interests in order to integrate their content and services. This always requires that the third-party providers of this content are aware of your IP address, as without the IP address they would not be able to send the content to your browser. We use the following providers and would like to ask you to review their privacy policies, and which contain further information on the processing of Personal Data and so-called opt-out measures, if any.
- Analytics and Tracking: Google Analytics by Google LLC
- Fonts: Google Font API by Google LLC and Font Awesome by Fonticons Inc,
- Tag Management: Google Tag Manager and Google Site Tag by Google LLC,
- Forms: Contact Form 7 by Takayuki Miyoshi
- Content Management System (CMS): WordPress by Automattic Inc
- Spam protection: reCAPTCHA by Google LLC
International Transfer
In the course of my website operation, we process data. We usually do not transfer Personal Data to countries outside the UK and the EEA. However, if we do, we ensure that processing of your Personal Data is governed by Processing Agreements that include Standard Contractual Clauses to ensure a high level of data protection.
Privacy rights
You can exercise the following rights:
- Right to information
- Right to rectification
- Right to object to processing
- Right to deletion
- Right to data portability
- Right of objection
- Right to withdraw consent
- Right to complain to a supervisory authority
- Right not to be subject to a decision based solely on automated processing.
If you wish to exercise any of your rights, please contact me.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting me.
Withdrawing your consent
You can revoke consents you have given at any time by contacting me. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Access Request
In the event you want to make a Data Subject Access Request, please contact us. I will respond to requests regarding access and correction as soon as reasonably possible. Should I`m not be able to respond to your request within thirty (30) days, I will tell you why and when I will be able to respond to your request. If I`m unable to provide you with any Personal Data or to make a correction requested by you, I will tell you why.
Complaint to a supervisory authority
You have the right to complain about our processing of Personal Data to a supervisory authority responsible for data protection. The competent data protection authority in the UK is: The Information Commissioner`s Office (ICO) is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK www.ico.org.uk
Changes and Updates
Since changes in the law or in our internal processes may make it necessary to adapt this Privacy Policy from time to time, we ask you to read this Privacy Policy regularly.
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your Personal Data on our part, or any other questions or comments, you can contact me using fiona@happymeparenting.com, or call 07980 381664, or write to me at the above address.
Effective Date
This Privacy Policy was last updated on 23 February 2023.
