Privacy notice

This privacy notice explains how the Department for Education (DfE) collects, uses, and shares your personal data when you use the Early Years Stronger Practice Hubs Portal. The DfE is the data controller; Infonote DataSystems Ltd is the data processor.

What data we collect

• your name and email address
• your role on the programme (DfE Lead, hub lead, EYSPA, setting contact)
• your hub membership and skills (EYSPAs)
• the URN, address, contacts, Ofsted record, and IDACI score of any setting you administer
• support plans, support logs, time entries, check-ins, and response forms you create
• sign-in timestamps and IP addresses (for security audit)

Why we collect it

To deliver the Stronger Practice Hubs programme - allocating advisors to settings, recording support provided, evidencing outcomes, and producing programme-wide reporting.

How long we keep it

Programme records are retained for 7 years after the last allocation against the account, unless you exercise your right to erasure (see below).

Sharing

Programme data is shared internally with the DfE Early Years team. Aggregate (anonymised) statistics may be published in DfE programme reporting.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased (right to be forgotten)
• restrict or object to processing
• complain to the Information Commissioner's Office

To exercise any of these rights, email support@infonote.com.

Data Protection Impact Assessment

A DPIA covers this service and is reviewed annually. Contact the DfE Early Years team for a copy.