Privacy & Data Protection Notice
Last updated 28 September 2026
In short
- Your child's name is never shown publicly. Other registered parents see a Rebel code name — plus first name only if you choose.
- Your email address and phone number are never shown to other parents or the public.
- Your details are never shared with schools, Smartphone Free Childhood Ireland or any other organisation.
- You can see, change or delete your information at any time — email info@eastcorkreclaimchildhood.ie.
Who is responsible for your information
East Cork Reclaim Childhood (ECRC) is a voluntary, parent-led initiative. The person responsible for your information (the “data controller”) is Peter O'Sullivan, Interim Convenor. For anything about your information, email info@eastcorkreclaimchildhood.ie.
What we collect, and why
When you register as a parent
Your name, email address and password, and — if you give them — your phone number and how you'd like to be contacted. We use these to run your account and contact you about ECRC. Your password is stored in a form nobody can read, including us.
When you register a child
Your child's first name, and last name if you give it; a Rebel code name; their school and class; for 6th class, the secondary school they intend to go to; and who their parents are. We use these to record participation, show support within schools and classes, help parents form local groups, and bring together Rebels going to the same secondary school.
Activities, groups and events
If you sign your child up for an activity, we record which child is coming so the convenor knows who to expect. If you volunteer, we record your name, email, phone number and any note, so the convenor can organise helpers. If you join an Action Group, we record your membership. If you RSVP to a meeting or send in a suggestion, we record what you send.
Supporters
If you join as a supporter, we record your name, email, any phone number and message, how you'd like to help, and how you'd like to be contacted.
Schools
The school contact details used to invite schools to take part (names and work email addresses of principals and secretaries), and the details of anyone who asks for a school to be added.
Who can see what
- The public sees only numbers — how many children are registered at each school and class — plus activity headcounts and approved suggestions, never with names.
- Other registered parents, when logged in, see children in each class by Rebel code name, and by first name only where the parent chose that. Surnames are never shown.
- Action Group pages show members by name only if they choose “show my name”; otherwise by an anonymous code.
- Activity WhatsApp group links are shown only to parents who have signed up for, or volunteered for, that activity. If you join a WhatsApp group, other members can see your phone number — that is part of how WhatsApp works.
- ECRC's administrator can see all the details above, to run the site and the activities.
Our legal basis
For everything you sign up for — your account, registering your child, what other parents see, activities, volunteering, groups, supporting, updates and RSVPs — we rely on your consent. You can withdraw it at any time; we will then delete the information concerned.
For keeping the site secure (a short-lived record of each visit, including its IP address and browser type, and a record of administrative actions) and for school contact details used to invite schools, we rely on our legitimate interests in running a safe site and reaching schools. You can object to this at any time.
Who we share it with
Nobody. We never share, sell or pass on your information to schools, Smartphone Free Childhood Ireland, or any other organisation. The only outside services involved are the ones that run the site for us:
- Vultr — hosts the website and its database.
- RunCloud — the panel used to manage the server.
- Resend — sends the site's emails.
- Zoho — hosts the info@ mailbox, which receives copies of some site emails.
Where it is stored
The website and its database are on a server in the United States, and Resend stores sent emails in the United States. These transfers are covered by each provider's GDPR data processing agreement. Resend's includes the European Commission's Standard Contractual Clauses, and Resend is also certified under the EU–US Data Privacy Framework. If ECRC becomes established as a registered not-for-profit organisation, the site will move to a server in the European Union.
How long we keep it
| Your child's registration | Until you delete it, or the end of your child's first year in secondary school |
|---|---|
| Your parent account | While you have a registered child, or until you close it; deleted 12 months after your last child's registration ends |
| Activity sign-ups and volunteers | Deleted 3 months after the activity; for weekly activities, when you withdraw |
| Meeting RSVPs | Deleted 3 months after the meetings |
| Supporters | Until you ask to be removed, or after 2 years with no contact |
| Registrations never completed | Deleted after 9 days |
| Record of administrative actions | 2 years |
Your rights
You can ask us, at any time and free of charge, to:
- see the information we hold about you or your child;
- correct anything that's wrong;
- delete it;
- withdraw your consent, or object to our use of it;
- give you a copy to take elsewhere.
You can edit or delete your child's details yourself from your account. For anything else, email info@eastcorkreclaimchildhood.ie. We will reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Data Protection Commission, Ireland's data protection regulator.
Children
Children are registered by a parent or guardian, never by themselves. Children have the same rights over their information as adults, and a child can ask — directly or through a parent — for their information to be changed or deleted. There is a short explanation written for children on the For Kids page.
Cookies and analytics
The site uses only the cookies it needs to work: one that runs your visit and keeps you logged in, and one that protects its forms against misuse. It also remembers in your browser whether you've already seen the welcome messages, so they don't keep reappearing; that stays on your device. We count visits with Plausible, which uses no cookies and collects no personal information, so no cookie banner is needed.
Changes to this notice
If we change how we use your information, we'll update this page and the date at the top.