1 Keeping your data safe
1.2 Please click on the headings below for full information about how your personal data is processed.
Who runs Mas and Pas?
Who’s in control of my personal data?
Who can see my personal data?
What data do you collect and where from?
Can I post information about other people?
Can other people post information about me?
What do you use my personal data for?
What is your legal basis for using my personal data?
Who do you share my personal data with?
How long do you keep my personal data for?
What rights do I have?
How can I contact you?
2 Who runs Mas and Pas?
2.1 Mas & Pas (the Website) is provided by Mas & Pas Limited (we or us). We are registered in England and Wales under company number 11130731 and registered office address Ground Floor, 2 Woodberry Grove, London, England, N12 0DR.
3 Who’s in control of my personal data?
3.2 Although we are legally the “controller”, you can control the personal data that we have access to. Most of the personal data that we will be able to access is personal data that you voluntarily provide, such as in posts, comments, photos and videos on your profile. You have certain rights in relation to your personal data which are detailed in this policy, but if you decide you don’t want us to process personal data about you anymore, you can delete posts containing personal data or close your account entirely at any time.
4 Who can see my personal data?
4.1 Your profile picture and username are publicly viewable and are visible by anyone visiting the site. They are visible whenever you post in sections around the site. They may also be picked up by search engines. For example, if someone searches on Google for a search term matching your username, your username and profile picture may be shown in the search results. Please ensure you have selected profile picture and username that you are comfortable with being viewed publicly. Registered users can see certain additional elements of your profile, as set out below.
4.2 Your profile
4.2.1. All registered users of the Website can see your profile with the following fields: landscape photograph, profile picture, username, heart count, description (if added) and About section. Please make sure these are all fields you are happy to be seen publicly. All other fields are private and are viewable only by yourself. They are not visible to any other users.
4.2.2. Registered users have the option to send each other private messages. Any users you do not wish to message you can be blocked or reported as being spammers.
4.3. Articles and features
4.3.1. Articles and features that you submit will be visible (and attributable to you) by everyone, including people who do not have a Mas & Pas account. Your profile picture and username will be posted with the article unless you have specifically requested for the article to be posted anonymously. For example, if you submit an article about how to help a baby to sleep and someone Googles “how to help a baby to sleep”, your article may appear in the search results and that person will be able to see the article and your username and profile picture as author of that article. You should therefore make sure that if you include any personal data about yourself or someone else in an article or features, you and/or they are happy for that information to be made public. Users can also comment on articles as set out below.
4.3.2. You can ask us to anonymise articles or features you have submitted at any time and we will do so by removing your username and profile picture and showing the article as “anonymous”. Please note that if you have included personal data about yourself or anyone else within the article or feature, we will not generally anonymise this information.
4.4. Public chat rooms
4.4.1. Posts or comments that you make in a public chat group will be visible by everyone, including people who do not have a Mas & Pas account. Posts will appear with your username and profile picture at the bottom. As with articles, these posts may be publicly searchable, for example on Google.
4.4.2. You should always make sure that if you include any personal data about yourself or someone else in a public chat room post, you and/or they are happy for that information to be made public.
4.5. Other users’ public posts or articles
4.5.1. If you like or leave a comment on a public post or article, anyone (including individuals who do not have a Mas & Pas account) will be able to see that post.
4.6. Reviews of service providers’ products and services
4.6.1 If you like or review of a product or service featured on the Website, anyone (including users who do not have a Mas and Pas account) will be able to see that review or post.
4.7 If you are a business and you have signed up for a Service Provider Account on our Website, we will collect basic personal data that you use to sign up (such as a business email address or other business contact details). You must ensure you are authorised to provide this information. You are responsible for keeping your details up to date and we will not be liable for any consequences of your failure to do so. Service Provider profiles are public and may show up in public search results.
4.7. If you are a business and you have signed up for a Service Provider Account on our Website, we will collect basic personal data that you use to sign up (such as a business email address or other business contact details). You must ensure you are authorised to provide this information. You are responsible for keeping your details up to date and we will not be liable for any consequences of your failure to do so. Service Provider profiles are public and may show up in public search results.
5. What data do you collect and where from?
5.2. We collect some personal data directly from you when you register for an account with Mas & Pas. The data that we need in order to set up your account includes the following:
5.2.1. your full name;
5.2.2. your username
5.2.3. your email address;
5.2.4. the password you set up to access your account.
5.3. Once you have set up your account, you can choose to provide further information to personalise your profile if you wish. The information that you can (but do not have to) provide is as follows:
5.3.1. a profile photograph;
5.3.2. a cover photograph;
5.3.3. a description;
5.3.4. your mobile number;
5.3.5. your postcode;
5.3.6. your “ages of interest”. These are the ages that you are interested in obtaining information and recommendations about through the Website and are therefore likely to reflect the ages of your child(ren). If you do not want to specify the age of your child(ren), you can select “all ages”. Please note it is your responsible to update your ages of interest as your child(ren)’s age(s) change;
5.3.7. other photographs you choose to upload;
5.3.8. categories of interest;
5.3.9. categories you are following;
5.3.10. date of birth;
5.3.11. an “about me” paragraph giving brief information about yourself;
5.3.12. you can follow public chat groups. The public chat groups you follow will be visible on your profile but only to you.
5.4. We collect information about your use of Mas & Pas, your activity and interactions on the Website and we use this to deduce further information about you. For example, if you have clicked on lots of articles about attachment parenting, we can deduce that you are interested in attachment parenting. This helps us to make sure our Website is as relevant to you as possible, as set out under “Profiling and targeted advertising” below. This includes:
5.4.1. information you post in comments, reviews and chat rooms;
5.4.2. articles and features that you upload;
5.4.3. your “likes” of other profiles, posts and comments (shown by a heart);
5.4.4. photos and videos of yourself, your family and others that you post;
5.4.5. any personal data that you send to other users as a private message;
5.4.6. responses to polls that you participate in; and
5.4.7. personal data that you provide to us when you contact us with queries, complaints, comments or praise.
Some of the personal data that you upload might be “special category” personal data. This is personal data relating to your, or someone else’s, race, religion, political opinions, trade union membership, health, sex life, sexual orientation, genetic data or biometric data. These types of personal data are more heavily protected by data protection laws because they are more sensitive. You must make sure that if you upload special category personal data about yourself or someone else, you or they are happy for that special category personal data to be uploaded and viewed by others publicly.
5.5. We collect information about your use of Mas & Pas, your activity and interactions on the Website and we use this to deduce further information about you. For example, if you have clicked on lots of articles about attachment parenting, we can deduce that you are interested in attachment parenting. This helps us to make sure our Website is as relevant to you as possible, as set out under “Profiling and targeted advertising” below.
5.6. We collect technical information about how you use Mas & Pas. This includes your IP addresses, device identifiers and information about how long you have stayed on certain pages or what pages you have clicked on.
5.7. We collect information about you when you participate in competitions, such as your contact information. This data is only used for the purposes of the relevant competition and will be subject to our Competition Terms and Conditions, which will be notified to you when you enter the competition.
5.8. We also collect data about how you use Mas & Pas by using cookies and other similar technologies.
6. Can I post information about other people?
6.3. You should be particularly careful about posting “special category” personal data about other people (i.e. information relating to their race, religion, political opinions, trade union membership, health, sex life, sexual orientation, genetic data or biometric data). This information is more sensitive so you will need to obtain explicit consent from someone if you want to post information like this about them. You should never post financial details about anyone else on the Website.
6.4. If someone else asks you to remove information that you have posted about them, you should do so as soon as you can.
7. Can other people post information about me?
7.2. Other users might also upload personal data about you or tag you in posts and if they do so, they are responsible for ensuring you are happy for them to do that. If you want someone to remove a post or comment which includes personal data about you, we recommend that you ask them first to take the post or comment down. If they refuse, you can report the post or comment to us by using the “report” option on the post or comment.
8. What do you use my personal data for?
8.2. It is important that you understand how and why we use the personal data that we collect about you. This section sets out the different purposes for which we process personal data and which types of personal data we need for each purpose.
8.3. Managing your account and providing you with our services
8.3.1. We use the personal data that you provide to set up your account and your profile, together with any information you voluntarily upload in posts, comments or direct messages to set up, manage and administer your account, to log you into your account and to allow you to use Mas & Pas and all its features.
8.3.2. We use your postcode and your ages of interest (if you choose to provide them) to show you listings, recommendations and services that are local and relevant to you.
8.3.3. If you opt into our “Parents Near Me” function in your account settings, we will use your postcode to show other parents who use the function to find users near them that you are based nearby. We will never give any other users your exact location or postcode.
8.3.4. We use your email address to contact you occasionally with service messages about Mas & Pas, for example to provide you with password reminders, where your account is due to expire or to contact you about content you have submitted to us.
8.3.5. We use information you voluntarily provide to us when contacting us with queries, comments or complaints to enable us to respond to those queries, complaints or comments and to make sure that these are appropriately dealt with.
8.4.1. We use personal data provided when you enter a competition for the purposes of allowing you to participate in competitions and to carry out any activities required in relation to those competitions, for example contacting you to let you know you have won a prize.
8.5. Improving our services
8.5.1. We use your personal data to help us monitor, analyse and improve Mas & Pas. This helps us to make sure that we are providing you with the best possible service.
8.5.2. We use the IP address of the device from which you access Mas & Pas to analyse use of Mas & Pas in certain regions to enable us to expand our “Local” sections effectively and appropriately.
8.6.1. Where you have consented to us doing so, we will use your email address to send you a daily email highlighting the latest posts and activity summary in the Topics and Chat Groups that you have chosen to follow. You can choose not to receive these emails by following the instructions in each email to unsubscribe.
8.6.2. Where you have consented to us doing so we will use your email address to send you our weekly newsletter.
8.6.3. Where you have consented to us doing so, we will also use your email address to send you emails about promotions or discounts that are being offered.
8.7. Profiling and targeted advertising
8.7.1. We use information about your location, ages of interest and categories of interest, together with other personal data we hold about you (including information about your Website activity and interactions), to build a profile of you so that we can understand what you are most interested in. This allows us to make our Website as useful and relevant as possible for you by showing you articles, features and content which we think you will be interested in, as well as advertisements from third party advertisers which are based on your interests.
8.7.2. You can choose not to receive targeted advertising by contacting us using the details set out under “Contacting us” below. Please note that if you opt out of targeted advertising, you may still see adverts on your page; they will just be less relevant to you as they will not be customised to your interests.
9. What is your legal basis for using my personal data?
9.2. Data protection law says that we have to tell you the legal basis that we rely on to process your personal data for the purposes that we have notified to you. The table below tells you what that legal basis is in relation to each of the purposes set out above.
Purpose Personal data used Legal basis
Running your account and allowing you to access and use the Website, including contacting you with service messages Name, username, email address, postcode and ages of interest We process this personal data for this purpose on the basis that this information is necessary in order to perform our contract with you to provide the Website and to allow you to use the Website.
All other profile information and all information you upload in posts and comments We process this personal data for this purpose on the basis that this information is necessary for our legitimate interests. We have an interest in ensuring that users can use the Website in a way that is useful and enjoyable for them.
Improving our services Your account and profile information plus the technical information that we collect about your device and how you use the Website We process this personal data for this purpose on the basis that this information is necessary for our legitimate interests. We have an interest in ensuring that we continue to improve our Website and provide our users with the best and most effective Website possible.
Competitions Your account information and any additional information you provide when you enter a competition We process this personal data for this purpose on the basis that this information in order to perform our contract with you to allow you to participate in the relevant competition.
Marketing Your email address We process this personal data for this purpose on the basis that we have your consent to do so. You can withdraw your consent at any time by following the “unsubscribe” instructions in marketing emails or by changing your account settings.
Profiling and targeted advertising Location, ages of interest, categories of interest, other profile information and information about activity and interactions We process this personal data for this purpose on the basis that it is necessary for our legitimate interests. We have an interest in making sure that Mas & Pas is as relevant and useful as possible for our users so that users continue to use the Website. We also have an interest in ensuring effective and relevant advertising so that we can generate advertising revenue and continue to provide Mas & Pas to you for free.
9.3. Special category personal data
9.3.1. Where any of the information above includes “special category” personal data (e.g. information about your or someone else’s race, religion, political opinions, trade union membership, health, sex life, sexual orientation, genetic data or biometric data) data protection law says that we have to fulfil an additional condition to allow us to do that.
9.3.2. We do not actively collect special category personal data and if you upload special category personal data about yourself, you must make sure that you are happy for us to use that special category personal data for the purposes set out above.
9.3.3. Where we process special category personal data that you have uploaded in a post, comment, chat room or group, we do this on the basis that you have manifestly made that special category personal data public.
9.3.4. If you provide special category personal data about your or someone else, you must make sure that you or they are happy for us to process it for the purposes set out above. If you or they no longer want us to process this data, you should delete the post, comment or message which contains the special category data that you no longer want us to process.
10. Who do you share my personal data with?
10.2. We need to share your personal data with some third parties in some circumstances. This includes where we use third party suppliers to perform various services for us. The only third party supplier we currently share your personal data with is our website designer and developer for the purposes of developing, hosting, supporting and maintaining the Website. Very occasionally your personal data may also be shared with the provider of the server on which the Website is hosted, but this would only be if strictly required in the event of an emergency.
10.3. If you contact a class or service provider with a query or to book a class or event and you choose to make that contact through our Website, we will need to send details of your query and your contact details to the relevant provider so that they can respond to you.
10.4. We will also share your personal data with third parties in the following circumstances:
10.4.1. where you have specifically consented to us sharing your data with a particular third party;
10.4.2. where we are required or permitted to do so by law or to protect or enforce our rights or the rights of any third party; and
10.4.3. if our business or any part of it is acquired by a third party, in which case we will need to share your personal data with that third party.
10.5. We do not transfer or store your personal data outside the European Economic Area (EEA). If we do transfer your data outside the EEA, we will inform you and we will ensure that equivalent protections to those in the UK are put in place to protect your personal data.
11. How long do you keep my personal data for?
11.2. We will keep all your personal data for as long as your account remains open. You can close your account at any time using the “Close account” option in your account settings. If you close your account, we will delete the personal data associated with your account. It will take 30 days for this personal data to be deleted. This will delete your profile and associated information, but please note that posts you have contributed to which involve other users (such as starting or contributing to chat threads or commenting on public posts) will be anonymised so that they show as having been contributed by “Mas & Pas User” (your name and profile picture will no longer be shown). Any personal data about yourself or others which you have included in the content of the post will not be deleted.
11.3. You can delete posts and comments that you have made by selecting the “delete” option on that post or comment.
11.4. If your account is inactive for a period of one year, we reserve the right to close your account and delete your personal data in accordance with section 11.1 above.
11.5. We may need to keep your data after account closure for limited purposes, for example if we need your data in order to respond to any complaints or claims that you make. If this is the case, we will only keep the data for as long as we need to in order to fulfil those purposes.
11.6. We have the right to delete any of your personal data at our discretion for any reason, including but not limited to where we exercise our rights to suspend or delete your account in accordance with our Terms and Conditions.
12. What rights do I have?
12.1 You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.
12.2 We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.
12.3. If you want to exercise any of these rights, please email us at firstname.lastname@example.org or write to us at Mas & Pas Ltd, Ground Floor, 2 Woodberry Grove, London, England, N12 0DR
12.4 A right to access your information
12.4.1 You have a right to ask us to send you a copy of all the personal data that we hold about you (subject to some exceptions).
12.5 A right to an electronic copy of your information
12.5.1 You can also ask us to send you the mandatory account information we hold about you and/or any information you provide for the purposes of a competition in a common electronic format, or to ask us to transfer that data to a third party if you want us to and if it is technically feasible for us to do so.
12.6 A right to object to us processing your information
12.6.1 You have a right to object to us processing any personal data that we process where we are relying on legitimate interests as the legal basis of our processing. This includes non-mandatory account and profile data, other personal data that you upload in posts, comments and messages, personal data we use for profiling and targeted advertising and the technical information that we collect for the purposes of analysing and improving the Website.
12.6.2 If we have compelling legitimate grounds to carry on processing your personal data, we will be able to continue to do so. Otherwise, we will cease processing your personal data.
12.6.3 Remember that you can always delete your account at any time through the “Deactivate account” section of your account settings. You can also delete posts and comments that you have made by selecting the “delete” option.
12.7 A right to ask us not to market to you
12.7.1 You can ask us not to send you direct marketing. You can do this by following the “unsubscribe” instructions in any marketing emails or by changing your account settings, or by contacting us using the details above.
12.8 A right to have inaccurate data corrected
12.8.1 You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.
12.8.2 You can update your own personal data at any time through your account settings. It is your responsibility to ensure that your personal data is accurate and up-to-date.
12.9 A right to have your data erased
12.9.2 We will delete the personal data associated with your account, including any posts you have made, when you close your account, as set out under “How long do we keep your data for?” above. Remember that you can close your account at any time and you can delete your own posts and comments individually by selecting the “delete” option on the relevant post or comment.
12.10 A right to have processing of your data restricted
12.10.1 You can ask us to restrict processing of your personal data in some circumstances, for example if you think the personal data is inaccurate and we need to verify its accuracy, or if we no longer need the data but you require us to keep it so that you can exercise your own legal rights.
12.10.2 Restricting your personal data means that we only store your personal data and don’t carry out any further processing on it unless you consent or we need to process the data to exercise a legal claim or to protect a third party or the public.
13. How can I contact you?
14. What if I have a complaint?
14.2. You have a right to complain to the Information Commissioner’s Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data.
14.3. You can find out how to do this by visiting www.ico.org.uk.
15. What if this policy changes?