Our Parent and Attendee Privacy Notice
PA03 – Parent and Attendee Privacy Notice
Organisation: Eudaiton Ltd, trading as Eudaiton Education
Document owner: Taleisha Hutton, Director
Version: 1.0
Effective date: 21 July 2026
Review date: July 2027
Classification: Public
This notice is designed specifically for the Parent Education Programme.
1. About this notice
This notice explains how Eudaiton Education collects, uses, stores and shares personal information when you:
Register for a parent event, workshop or series.
Pay for an event.
Attend an online or in-person event.
Submit questions or feedback.
Request an accessibility adjustment.
Receive event communications or joining details.
It supplements Eudaiton Education’s general Privacy Notice.
UK data-protection rules require organisations to explain their purposes, lawful bases, recipients, international transfers, retention periods and individual rights in clear and accessible language.
2. Who we are
The data controller is:
Eudaiton Ltd, trading as Eudaiton Education Company number: 16640259
Registered office: Office 1, Izabella House 24–26 Regent Place City Centre Birmingham B1 3NJ
Email: admin@eudaitoneducation.co.uk Telephone: 07831 553354 Website:www.eudaitoneducation.co.uk
The person responsible for data-protection enquiries is:
Taleisha Hutton Director
3. Who this notice applies to
This notice applies to:
The person completing the booking form.
The parent, carer or professional making the booking.
Any other adult named as an attendee.
A child or young person where limited information about them is included in the form or in a question submitted to Eudaiton Education.
Where you provide another adult’s personal information, please ensure they know that you have provided it and make this notice available to them.
4. Information we may collect
We may collect the following information.
Contact and identity information
Title.
First name and surname.
Public or preferred name.
Email address.
Telephone number and country code.
Relationship to the child or young person.
Names of other adults attending.
Booking and payment information
Event or events selected.
Booking date.
Registration reference.
Amount due and paid.
Payment status.
Refund or transfer information.
Stripe transaction or payment reference.
Discount, complimentary-place or payment-waiver information.
Eudaiton Education does not receive or store your full debit or credit card details.
Educational and event information
Your child’s year group or educational stage.
Subjects or areas in which you would like guidance.
Questions you would like addressed.
Information about school choices, examinations or educational concerns that you choose to provide.
Attendance, cancellation or non-attendance information.
Feedback about the event.
You should not provide your child’s full name, school, address or other identifying information unless it is genuinely necessary.
Accessibility and sensitive information
You may choose to provide information about:
Disability.
Health.
Accessibility or reasonable-adjustment requirements.
SEND or additional needs.
Other relevant personal circumstances.
Health and disability information may be special-category data and requires additional protection. Eudaiton Education’s internal policy also treats disability and SEND information as information requiring additional safeguards. Special-category information requires both an Article 6 lawful basis and an additional Article 9 condition; explicit consent is one available condition.
Technical and communication information
Depending on the systems used, we may also collect:
Form submission date and time.
Email delivery and opening information.
Communications sent and received.
Internet Protocol address.
Browser, device or basic security information.
Joining-details delivery status.
Records of consent and acceptance of terms.
5. Why we use your information
To process and administer your booking
We use your information to:
Register you for the selected event.
Take payment.
Issue confirmations and receipts.
Manage capacity and waiting lists.
Send reminders, joining details and event updates.
Process cancellations, transfers and refunds.
Our lawful basis is normally contract, because the processing is necessary to provide the event you have booked.
To manage named attendees and event security
We use attendee names and contact details to:
Confirm who is authorised to attend.
Reduce unauthorised sharing of joining links.
Contact attendees about significant event changes.
Maintain an accurate attendance record.
Our lawful basis is contract where the attendee made the booking and legitimate interests where another adult is named. Our legitimate interest is delivering secure and properly administered events.
To understand the audience and prepare useful content
We may use year-group information, questions and educational interests to:
Plan relevant event content.
Brief speakers.
Group similar questions.
Improve future events and resources.
Our lawful basis is legitimate interests. We have a legitimate interest in ensuring that our events are relevant, useful and responsive to parents’ needs.
Where practical, questions will be shared with speakers without the parent’s contact details or other unnecessary identifying information.
To provide accessibility support
We use accessibility, health, disability or SEND information only where needed to:
Consider a reasonable adjustment.
Provide accessible documents, captions or alternative participation arrangements.
Respond appropriately to a request.
For ordinary personal information, our lawful basis is contract or legitimate interests.
Where the information is special-category data, our Article 9 condition will normally be explicit consent.
Providing this information is optional. However, we may be unable to arrange the requested support without sufficient information.
To meet legal and financial obligations
We may retain and use information to:
Maintain accounting and tax records.
Respond to complaints or legal claims.
Prevent or investigate fraud.
Comply with court orders or regulatory requirements.
Protect children or adults at risk where a safeguarding concern arises.
Our lawful bases may include legal obligation, legitimate interests or another lawful basis permitted by data-protection legislation.
To improve our services
We may use attendance information and feedback to:
Review event quality.
Address complaints or concerns.
Improve future workshops.
Produce anonymised business reports.
Our lawful basis is legitimate interests.
To send marketing communications
Where you separately choose to receive them, we may send:
Educational guidance.
Information about future events.
Useful resources.
Eudaiton Education news and updates.
Our lawful basis is consent.
Marketing consent is optional and is not required to attend an event. You may withdraw it at any time.
6. Information you must provide
To complete a paid event booking, you will normally need to provide:
Your name.
Email address.
Telephone number.
The event or events selected.
The name of the adult attending.
Required booking confirmations.
Payment information through the payment provider.
Without this information, we may be unable to process or confirm your booking.
Questions, educational context, accessibility information and marketing consent are normally optional.
7. Who we share information with
We may share information with trusted service providers that help us operate the event, including:
Fillout, for registration forms.
Stripe, for payment processing.
Squarespace, for website and embedded-form delivery.
Brevo, for confirmations, reminders and event communications.
Google Workspace, for approved email, document and administrative storage.
Zapier, where used to transfer information securely between approved systems.
Online meeting or event-platform providers.
Speakers and authorised event-support personnel, where they need limited information to deliver the event.
Professional advisers, insurers, auditors or regulators where necessary.
Safeguarding organisations, emergency services or public authorities where disclosure is necessary and lawful.
These systems are listed within Eudaiton Education’s Approved Business Applications and Third-Party Service Providers Register.
Speakers will not normally receive parent email addresses, telephone numbers or marketing lists.
We do not sell parent, attendee or child information.
8. International transfers
Some service providers may store or access personal information outside the United Kingdom.
Where this occurs, Eudaiton Education will take reasonable steps to ensure that an appropriate lawful transfer mechanism and contractual or organisational safeguards are in place.
You may contact us using the details in this notice for further information about the safeguards used for international transfers.
9. Workshop recordings, chat and questions
Some events may be recorded.
Where recording is planned, this will be explained through the event information and the separate Recording and Participation Notice.
A recording may include:
The speaker’s presentation.
Moderated questions and answers.
An attendee’s voice or image where they actively participate.
We will take reasonable steps to avoid including unnecessary attendee names, faces, voices or personal information in recordings intended for wider use.
You should not disclose confidential or identifying information about a child, school, family member or other person during an event.
10. How long we keep information
We keep information only for as long as it is reasonably needed.
Our normal retention periods are:
Booking, payment, refund, contractual and terms-acceptance records: normally up to six years from the end of the relevant company financial year.
Accounting and financial records: at least six years where required for company and tax records.
Event attendance, joining-details and security records: normally up to 12 months after the event.
Unsuccessful or abandoned booking information: normally up to 90 days.
Accessibility, health, disability or SEND information: normally deleted within three months after the event, unless it is needed for a complaint, safeguarding matter, legal obligation or continuing service.
Questions and feedback: normally up to three years, or anonymised sooner where practical.
Marketing records: until you withdraw consent, unsubscribe or the information is no longer required.
Complaints, incidents or safeguarding information: retained in accordance with the relevant legal, safeguarding and retention requirements.
Information may be kept for longer where required by law, a legal claim, an investigation or a formal retention hold.
11. How we protect information
We use reasonable technical and organisational measures to protect personal information, including:
Access controls.
Password protection and multi-factor authentication where available.
Approved cloud systems.
Restricted sharing.
Secure payment providers.
Staff and contractor confidentiality requirements.
Data-breach and incident-management processes.
No electronic system can be guaranteed to be completely secure, but we take proportionate steps to reduce the risks of loss, misuse or unauthorised access.
12. Your rights
Depending on the circumstances and lawful basis used, you may have the right to:
Be informed about how your information is used.
Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Request deletion of information.
Ask us to restrict how information is used.
Object to certain processing.
Request data portability.
Withdraw consent where processing is based on consent.
Raise concerns about automated decision-making.
These rights are not absolute and exemptions may apply. The ICO confirms that individuals have rights of access, rectification, erasure, restriction, portability and objection under the UK GDPR.
To exercise a right, contact:
Taleisha Hutton Email: admin@eudaitoneducation.co.uk Telephone: 07831 553354
We may need to confirm your identity before responding.
Where we rely on legitimate interests, you have the right to object to that processing.
13. Automated decision-making
Eudaiton Education does not use parent-event registration information to make solely automated decisions that produce legal or similarly significant effects.
Payment providers may use automated security or fraud-prevention tools under their own privacy arrangements.
14. Complaints
Please contact Eudaiton Education first so that we have an opportunity to address your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
15. Changes to this notice
We may update this notice when:
Our events or services change.
We introduce new technology or suppliers.
Our legal obligations change.
We change how information is used.
The current version will be made available through the booking form or Eudaiton Education website. Where a change is significant, we will take reasonable steps to inform affected individuals before the new use begins.