Privacy Policy

Last updated: — Version 1

Introduction

The National Parent Forum of Scotland (NPFS) is committed to protecting and respecting your privacy. This policy explains how we collect, use and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The National Parent Forum of Scotland is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at admin@npfs.org.uk.

What data we collect

We may collect and process the following categories of personal data:

  • Identity data — name, job title, local authority area
  • Contact data — email address
  • Usage data — information about how you use our website and publications
  • Technical data — IP address, browser type, operating system, and similar technical information collected via cookies
  • Subscription data — newsletter preferences and engagement history

How we use your data

We process your personal data for the following purposes and lawful bases:

  • Providing our services (legitimate interest) — delivering educational publications and resources to parents and carers across Scotland
  • Newsletter communications (consent) — sending updates about new publications, events and education news
  • Website analytics (consent) — understanding how our website is used to improve our services
  • Legal obligations (legal obligation) — complying with applicable laws and regulations

Children's data

Our publications platform is aimed at parents, carers and education professionals. We do not knowingly collect personal data from children under the age of 13. If we become aware that a child has provided us with personal data, we will take steps to delete that information.

Data sharing

We do not sell your personal data to third parties. We may share your data with:

  • Service providers who assist in operating our website and delivering our services (under data processing agreements)
  • Scottish Government and Education Scotland where required for our statutory role
  • Law enforcement or regulatory bodies where required by law

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Newsletter subscriber data is retained until you unsubscribe. Website analytics data is anonymised after 26 months.

Your rights

Under UK GDPR, you have the right to:

  • Access your personal data (subject access request)
  • Rectify inaccurate personal data
  • Erase your personal data (right to be forgotten)
  • Restrict processing of your personal data
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, please email admin@npfs.org.uk. We will respond within one calendar month.

International transfers

We store and process your data within the United Kingdom and European Economic Area. Where data is transferred outside these areas, we ensure appropriate safeguards are in place.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The version number and date at the top of this page indicate when it was last revised.