Privacy Notice

When you use Nessie Community, we may collect and use your personal information as described in this Privacy Notice and in accordance with UK data protection legislation. This notice explains what we collect, why we collect it, how we use it, how we protect it and your rights.

Nessie Community is operated by Nessie in Ed CIC.

Data Controller

Nessie in Ed CIC

Registered Office

King James Academy Royston (Senior Site), Garden Walk, Royston, Hertfordshire, SG8 7JH

Company Number

11719406 (England & Wales)

ICO Registration Number

ZA778551

Email

hello@nessieined.com

We may collect contact details, account information, membership information, bookings, payment records, training records, certificates, event attendance, community participation, feedback, cookies and website analytics.

We may also process information relating to your membership level, joining date, 12-month membership term, payment plan, upgrades, renewal date, payment status and transaction history.

Payments are processed securely by authorised third-party payment providers. Nessie does not ordinarily receive or store your full payment card details.

We may receive and retain information needed to administer your membership, such as whether a payment has been made, failed, refunded or remains outstanding, and whether you have chosen monthly or annual payment.

Members may share information relating to children’s mental health, wellbeing, neurodivergence, education or family circumstances. We only process this information where necessary, lawful and with appropriate safeguards.

We may use personal information to provide and administer membership; manage membership terms, payments, upgrades and renewals; deliver training and learning; issue certificates; manage events and live sessions; respond to enquiries; provide technical and member support; improve our services; monitor impact; meet safeguarding responsibilities; and comply with legal and regulatory obligations.

Depending on the information and purpose, we may rely on one or more lawful bases under UK data protection law, including contract, legitimate interests, consent, legal obligation and vital interests.

Where special category information is processed, Nessie will also identify an appropriate additional condition for processing as required by law.

We may send newsletters, programme updates or other marketing communications where you have opted in or where another lawful basis permits us to do so.

You can unsubscribe from marketing communications at any time. Ending marketing communications does not prevent Nessie from sending essential service messages relating to your membership, payments, training, safeguarding or account.

We do not sell personal information.

We may share personal information with trusted service providers where necessary to operate Nessie Community, including providers supporting membership administration, payments, email communications, website or portal services, training delivery and other digital tools.

Where providers process personal information outside the UK, appropriate safeguards will be used where required by UK data protection law.

Members decide what they share within Community discussions and live sessions. Please avoid sharing unnecessary identifying information about children and young people.

Community areas and sessions may be moderated or facilitated by authorised Nessie staff, trainers or team members. Information shared by other members should be treated respectfully and confidentially.

Posts and comments you share in Community Corner are checked automatically by an AI service before they are published, so that nothing unkind or unsafe is shown to other members. Only the text of your post and the display name you chose are sent for this check — never your name, email address or membership details. Anything the check is unsure about is read by a member of the Nessie team before it appears.

The check is carried out by Anthropic, the company behind the Claude AI models, acting as our processor. Anthropic keeps the text sent for the check for up to 30 days, only so that misuse of its service can be detected, and then deletes it. It is not used to train AI models.

If you post as Anonymous or under a display name, your name is hidden from other members. The Nessie team can still see who posted, so that we can keep the space safe and meet our safeguarding responsibilities.

Confidentiality may need to be broken where necessary to protect a child, young person or vulnerable individual or where Nessie has another legal obligation to share information.

Any safeguarding-related information sharing will be handled lawfully, proportionately and with regard to Nessie’s safeguarding responsibilities.

We take appropriate technical and organisational measures to protect personal information.

Access is limited to authorised staff, trainers, contractors and service providers who need the information to deliver Nessie Community or meet Nessie’s legal, contractual or safeguarding responsibilities.

We retain personal information only for as long as necessary for the purposes for which it was collected and in accordance with Nessie’s Data Retention Policy and applicable legal requirements.

This may include membership, payment and financial records, training and certification records, marketing preferences, safeguarding records and records needed to manage or evidence membership agreements.

Under UK data protection law, you may have rights including access to your personal information, correction of inaccurate information, erasure where appropriate, restriction of processing, objection to certain processing, data portability where applicable and withdrawal of consent where processing is based on consent.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your personal information has been handled.

Our website may use cookies and similar technologies. Please see Nessie’s Cookie Policy for further information about the cookies used and the choices available to you.

Nessie Community is designed for adults. Information about children and young people may nevertheless be shared by parents, carers or professionals during training, community discussions, support sessions or safeguarding processes where appropriate.

Members should avoid sharing unnecessary identifying information about children and young people.

Nessie may use trusted digital tools and third-party systems to administer membership, process payments, communicate with members, deliver training and resources, manage events and support Community participation.

Appropriate contractual, data protection and security safeguards will be used where required.

We may update this Privacy Notice from time to time to reflect changes to Nessie Community, our systems, legal requirements or the way we process personal information.

The latest version will be made available through Nessie’s website or Community portal as appropriate.

If you have questions about this Privacy Notice or how Nessie uses your personal information, please contact:

Nessie in Ed CIC

Email: hello@nessieined.com

If your concern is not resolved, you may complain to the Information Commissioner’s Office (ICO).