Data Privacy & Protection
Last Updated: January 2025
About This Document
This Data Privacy & Protection page provides detailed information about how Early Tree Limited (Company Number: 14693946), trading as "Inspector Who", handles your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Early Tree Limited, 8 Oak Field, Brayton, Selby, England, YO8 9QZ
Directors: Paul Porter-Phillips and Stephanie Porter-Phillips
Service Data and Sources
Our service provides access to childcare and education inspection data. It's important to understand how this data is collected and processed:
- Source Data: All inspection data is sourced from publicly available reports published by Ofsted and other official regulatory bodies
- Processing: Data is processed, aggregated, and analyzed by our proprietary algorithms and systems
- Calculated Metrics: Performance metrics, statistics, and analytics are calculated and derived from source inspection reports and are not official Ofsted statistics
- Data Freshness: Data updates occur periodically with an approximate 7-day lag from the original publication date by regulatory authorities
Important: The inspection data we display is public information. This privacy policy covers your personal account data, not the publicly available inspection data that forms the core of our service.
Personal Data We Collect About You
| Data Type | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Account Information (Name, Email, Password) |
Service provision, authentication | Contract performance | Until account deletion |
| Payment Data (via Stripe) |
Subscription processing | Contract performance | 7 years (tax requirements) |
| Usage Data (Searches, views, follows) |
Service improvement, analytics | Legitimate interest | 2 years |
| Email Communications | Notifications, updates | Consent / Contract | Until unsubscribe |
| Cookies | Session management, preferences | Consent | Session or 1 year |
How We Protect Your Data
Encryption
- TLS/HTTPS for data in transit
- Encrypted database storage
- Bcrypt password hashing
Access Controls
- Role-based access control
- Multi-factor authentication
- Regular security audits
Infrastructure
- Secure cloud hosting
- Regular backups
- Disaster recovery plans
Privacy by Design
- Data minimization
- Anonymous analytics
- Privacy-first architecture
Your Data Rights
You have the following rights regarding your personal data:
How to Exercise Your Rights
To request access, rectification, or deletion of your data:
- Email privacy@inspectorwho.com with your request
- Include your account email for verification
- Specify which right you wish to exercise
- We will respond within 30 days
For account deletion, you can also use the "Delete Account" option in your account settings.
Data Breach Notification
In the unlikely event of a data breach that affects your personal data, we will:
- Notify affected users within 72 hours
- Report to relevant supervisory authorities as required
- Provide details of the breach and steps taken
- Offer guidance on protective measures
International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Data Processing Agreements with third parties
Contact Our Data Protection Officer
For any data privacy concerns, please contact:
Data Protection Officer
Early Tree Limited (trading as Inspector Who)
Email: dpo@inspectorwho.com
Address: 8 Oak Field, Brayton, Selby, England, YO8 9QZ
Company Number: 14693946
Directors: Paul Porter-Phillips and Stephanie Porter-Phillips
Information Commissioner's Office (ICO): If you are not satisfied with our response to your data privacy concerns, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
For general privacy information, see our Privacy Policy.
