Privacy policy

EYFS with Mrs S is run by me, Laura Shepherd, in the UK. I’m the data controller for the personal information collected through eyfswithmrss.com. That means I decide how it’s used and I’m responsible for looking after it.

You can reach me at the email address at the bottom of this page.

• Your account: your name, email address, password (stored scrambled, never as you typed it) and, if you give it, your school’s name. If you sign in with Google, Google tells me your name and email address.
• Membership and purchases: your plan, what you’ve bought, payment dates and amounts, and any invoice details you add, such as a school address or purchase order number. Your card details stay with Stripe; I only see the card type and its last four digits.
• Downloads and videos: which resources you download and which videos you watch, when, and the IP address and country they came from. Your name, and your school’s if you’ve given it, is printed on PDFs you download.
• Devices: the devices you’re signed in on, with the browser and device type, IP address, country and when each was last used, so you can see them and sign them out.
• Free resources and sign-ups: your name and email address, whether you agreed to my emails, the exact wording you agreed to, when, and your IP address.
• What you agree to at checkout: that your membership or purchase starts straight away, with the wording, the time and your IP address.
• Reviews, wishlists and messages: reviews you write, resources you save, and anything you send me, such as a cancellation request.
• Security: your IP address and browser while you’re signed in, and a record of changes made in the site’s admin area.
• Searches: what people search the library for, counted by day. Searches aren’t linked to you, and anything that looks like an email address or phone number is dropped.

If you look after a school membership, I also hold the email addresses of the teachers you invite.

UK data protection law says I need a lawful reason for each use of your information:

• To provide what you’ve signed up for (contract): your account, membership, purchases, downloads, invoices, school seats, and emails about them such as receipts and renewal reminders.
• To meet my legal obligations: keeping financial records for HMRC, and a record of what you agreed to at checkout.
• For my legitimate interests: protecting the resources from being shared or copied (download limits, device limits, your name on PDFs and download records), keeping the site secure, counting searches and visits to improve the library, and asking how you got on with a resource a few days after you download it. You can ask me to stop any of these that don’t protect the resources.
• With your consent: sending you my emails if you tick the box, and analytics and marketing cookies if you allow them. You can withdraw consent at any time, using the unsubscribe link in any email or the cookie settings.

Only with the services I need to run the site, each bound by contract to look after your information:

• Stripe, for payments, subscriptions and invoices.
• Amazon Web Services, in London, for hosting, the database and file storage.
• Cloudflare, which protects the site from attacks and automated tools and sees your IP address when you visit.
• Bunny.net, which hosts and streams videos.
• Google, if you sign in with Google, and, only if you allow cookies, for Google Analytics and advert measurement through Google Tag Manager.
• Meta, only if you allow marketing cookies, to measure adverts on Facebook and Instagram.
• An email delivery service for account emails, and my email newsletter service if you’ve agreed to my emails.
• Branch Agency, who build and look after the website and may see information while fixing a problem.

I’ll also share information if the law requires it. I never sell it.

Some of these companies are based in the US or handle data there. Where that happens, your information is protected by the UK–US data bridge or the UK’s International Data Transfer Agreement.

• Your account, membership, downloads, devices, reviews and wishlists: while your account is open. If you ask me to close it, I’ll delete or anonymise them, apart from what I have to keep below.
• Financial records (payments, invoices and what you agreed to at checkout): six years after the end of the tax year they relate to, as HMRC requires.
• Free resource and sign-up details: until you unsubscribe or ask me to delete them. Download links stop working after seven days.
• Signing in: your session ends after two hours without activity, or after up to 400 days if you tick “Keep me logged in”.
• Messages: as long as I need them to help you.

You have the right to see the information I hold about you, to have it corrected or deleted, to restrict or object to how I use it, and to have a copy to take elsewhere. You can change your name, email address and school yourself from your account. For anything else, email me and I’ll reply within one month.

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

The site is for adults who work in early years. I don’t knowingly collect information about children, so please don’t include children’s names or photos in reviews or messages.

The site uses a secure connection, passwords are stored scrambled, and payments go through Stripe rather than this site. Resource files are stored privately and are only ever handed to someone allowed to download them.

Which cookies the site uses, and how to change your choices, is explained in my cookie policy.

If I make significant changes, I’ll email members before they take effect. The date at the top shows when this policy last changed.