NATURE BASE PRIVACY POLICY AND TERMS

The Business:

Registration of Business Names (Jersey) Law 1956 ‘Nature Base’ Registration Certificate no. 34405, registered on the 25th February 2022.

Nature Base Business of Undertakings licence No. 137939, granted on 25th February; for the undertaking of carrying out the provision of nature based workshops, play sessions, activities and a Forest School for children and adults.

General Privacy Notice

Nature Base is committed to protecting the privacy and security of your personal information.

Your personal data – what is it?

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address). Identification can be by the information alone or in conjunction with any other information. The processing of personal data is governed by the DATA PROTECTION (JERSEY) LAW 2018 (and other legislation relating to personal data and rights such as the HUMAN RIGHTS (JERSEY) LAW 2000).

Who are we?

This Privacy Notice is provided to you by Nature Base which is the data controller for your data. This means we are responsible for how we process your data within the registered company: In order to deliver our services, we will be required to process your data.

What data do the data controllers listed above process?

They will process some or all of the following types of data, where necessary to perform their tasks:

• Names, titles, and aliases, photographs.

• Contact details such as telephone numbers, addresses, and email addresses.

• Where they are relevant to our services, or where you provide them to us, we may process demographic information such as gender, age, date of birth, marital status, nationality, education, academic/professional qualifications, hobbies, family composition, and dependents.

• Where you pay for services, financial identifiers such as bank account numbers, payment card numbers, payment/transaction identifiers, policy numbers, and claim numbers.

• The data we process could constitute sensitive personal data due to the nature of some of our services, this may include information around your religious beliefs, racial or ethnic origin, sex life, mental and physical health, special educational needs, details of injuries, medication/treatment received, political beliefs, labour union affiliation, genetic data, biometric data, data concerning sexual orientation and criminal records, fines and other similar judicial records.

How do we process your personal data?

The data controllers will comply with their legal obligations to: keep personal data up to date; to store and destroy it securely; to not collect or retain excessive amounts of data; to keep personal data secure, and to protect personal data from loss, misuse, unauthorised access, and disclosure and to ensure that appropriate technical measures are in place to protect personal data.

We use your personal data for some or all of the following purposes:

• To enable us to compete booking requirements for services/sessions that you sign up to attend, including providing registers for these services.

• To carry out comprehensive safeguarding procedures (including due diligence and complaints handling) in accordance with best safeguarding practice from time to time with the aim of ensuring that all children and adults-at-risk are provided with safe environments.

• To promote the interests of the business

• To maintain our own accounts and records.

• To process a payment that you have made.

• To seek your views or comments.

• To notify you of changes to our services and events

• To send you communications around services which you have requested and that may be of interest to you.

• To enable us to provide a paid and/or voluntary service for the benefit of those attending and/or the general public in a particular geographical area as specified us

What is the legal basis for processing your personal data?

Most of our data is processed because it is necessary for our legitimate interests. An example of this would be the administration of registering to attend one of our events, workshops or sessions. We will always consider your interests, rights and freedoms.

Should we wish to process information other than in accordance with one of these legal bases, we will first obtain your consent to that use.

Sharing your personal data

Your personal data will be treated as strictly confidential. It will only be shared with third parties where it is necessary for the performance of our tasks or where you first give us your prior consent, an example of this would be to comply with the Safeguarding of children and adult requirements in accordance with local law.

It is likely that we will need to share your data with some or all of the following (but only where necessary):

• On occasion, we may work with another organization to run an event, workshop or session; this will be clearly advertised when you are booking the session.

How long do we keep your personal data?

We will keep some records permanently if we are legally required to do so. We may keep some other records for an extended period of time. For example, it is current best practice to keep financial records for a minimum period of 7 years. In general, we will endeavour to keep data only for as long as we need it. This means that we may delete it when it is no longer needed.

Your rights and your personal data

When exercising any of the rights listed below, in order to process your request, we may need to verify your identity for your security. In such cases we will need you to respond with proof of your identity before you can exercise these rights.

You have the following rights with respect to your personal data:

1. The right to access information we hold on you

• At any point you can contact us to request the information we hold on you as well as why we have that information, who has access to the information and where we obtained the information from. Once we have received your request we will respond within one month.

• There are no fees or charges for the first request but additional requests for the same data may be subject to an administrative fee.

2. The right to correct and update the information we hold on you. If the data we hold on you is out of date, incomplete or incorrect, you can inform us and your data will be updated.

3. The right to have your information erased

• If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold.

• When we receive your request, we will confirm whether the data has been deleted or the reason why it cannot be deleted (for example because we need it for our legitimate interests or regulatory purpose(s)).

4. The right to object to processing of your data.

You have the right to request that we stop processing your data. Upon receiving the request, we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or to bring or defend legal claims.

5. The right to data portability

You have the right to request that we transfer some of your data to another controller. We will comply with your request, where it is feasible to do so, within one month of receiving your request.

6. The right to withdraw your consent to the processing at any time for any processing of data for which consent was sought. You can withdraw your consent easily by telephone, email, or by post (see Contact Details below).

7. The right to object to the processing of personal data where applicable.

8. The right to lodge a complaint with the Information Commissioner’s Office at the Office of the Information Commissioner, Brunel House, Old Street, St Helier, Jersey JE2 3RG, or online at https://oicjersey.org/online-enquiry/#/complain/form

Transfer of Data Abroad

Any electronic personal data transferred to countries or territories outside the EU will only be placed on systems complying with measures giving equivalent protection of personal rights either through international agreements or contracts approved by the European Union. Our website is also accessible from overseas so on occasion some personal data (for example in a newsletter) may be accessed from overseas.

Further processing

If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

Website Data Storage:

Our Website is designed by Squarespace, the data on the website is stored in multiple Tier III data centres across the United States. They serve images and other static assets via multiple geographically distributed content delivery networks (CDNs). This system ensures that the data in each page view is served from the data centre closest to the visitor’s location. All Squarespace sites are hosted across private cloud with full redundancy. If a primary service fails, they can switch to a backup service. The Operations team monitors Squarespace sites 24x7 and is ready to respond to incidents within minutes of detecting an anomaly. When booking services through the website you are agreeing that your data will be stored and processed in accordance to their processing.

What does this mean?

Analytics

This website collects personal data to power our site analytics, including:

• Information about your browser, network, and device

• Web pages you visited prior to coming to this website

• Your IP address

This information may also include details about your use of this website, including:

• Clicks

• Internal links

• Pages visited

• Scrolling

• Searches

• Timestamps

• We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

Personal Data

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

• These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

• These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

Visitor Data:

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:

• Information about your browser, network and device.

• Web pages you visited prior to coming to this website.

• Web pages you view while on this website.

• Your IP address.

Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyses the data in a de-personalized form.

Fonts:

This website uses font files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where the font files are stored may receive personal information about you, including:

• Information about your browser, network, or device

• Your IP address

Booking a session:

When you schedule an appointment/complete a booking on this website, we collect personal information from you to complete the booking. We may collect information like you and your child(rens):

• Name

• Email address

• Phone number

• Information relating to your appointment/booking; Such as Special Educational Needs, ages of children

• We may request further information be uploaded or sent to us for some of our Sessions like the Therapeutic Forest Workshops; to include more sensitive data on SEN, Health and Well-being, a photograph of you and your child.

We share this information with Squarespace, our scheduling service provider, so that they can provide online booking services to us.

When you make payment through our scheduling system on this website, we collect personal information from you to fulfil the booking. We may collect information like your:

• Billing and shipping address

• Details relating to your session booking

• Email address

• Name

• Phone number

We share this information with Squarespace, our online hosting provider, so that they can provide website services to us.

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with [storage methods(s)] for storage and with Zapier for data porting.

Contact Details

Please contact us if you have any questions about this Privacy Notice or the information we hold about you or to exercise all relevant rights, queries or complaints at: The Data Controller, Nature Base Email: info@naturebase.je Telephone: 07700888076

You can contact the Information Commissioners Office on 01534 716530, via email at enquiries@oicjersey.org or at the Office of the Information Commissioner, Brunel House, Old Street, St Helier, Jersey JE2 3RG.

Nature Base Website Terms:

In accessing, registering and using our website you are agreeing to our website terms.

When ‘registering’ to attend an event, workshop or session; a 48 hour cancellation notice prior to the ‘registered’ event, workshop or session is required in order to issue a refund. If you are now unable to attend an event, workshop or session please contact info@naturebase.je , you may like to inform us of the reason you can no longer attend and we may be able to move you to another similar event, workshop or session. Payment should be made prior to attending, unless it is marked clearly as one of our ‘Free or Sponsored Community’ events, Workshops or Sessions.

If you ‘like’ and/or ‘follow’ one of our social media accounts @naturebase.je please note that: Please note that comments should be respectful to the general public, noting that any comment that includes copyright infringement is not allowed.

If you want to contact us to report a copyright infringement, please contact consulting@naturebase.je

The content of our website and social media posts is protected by copyright laws, we are happy for this information to be shared directly from our pages and where images are copied we would ask that you use those in accordance with naming #naturebase.je.

Contact Details

Please contact us if you have any questions about these Terms.

Email: info@naturebase.je