Privacy Policy for EPFIRST

Last Updated: [14.03.2026]

At EPFIRST, we are committed to protecting and respecting your privacy. This policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

1. Who Are We?

EPFIRS (Educational Psychology First) provides psychological resources and interventions for educational settings. We are the "Data Controller" for any personal data you provide to us through epfirst.org.

Contact Details: admin@epfirst.org

2. Information We Collect

We may collect and process the following data:

• Personal Identity Data: Name, job title, and organisation (if you are a teacher/professional).

• Contact Data: Email address and phone number.

• Transaction Data: Details about payments to and from you and other details of products or services you have purchased from us.

• Technical Data: Your IP address, browser type, and usage data via cookies.

3. How We Use Your Information

We use your information to:

• Process Orders: To deliver the digital or physical workbooks (e.g., Poke-mind, Mind-Craft) you have purchased.

• Customer Support: To respond to your enquiries or provide help with your "Admin/Trainer" account.

• Marketing: If you have opted in, to send you updates about new resources or "System Updates" for our kits.

• Site Improvement: To ensure our content is presented in the most effective manner for your device.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

• Contractual Necessity: To fulfill your order.

• Legitimate Interests: To improve our services and keep our website secure.

• Consent: Where you have explicitly signed up for our newsletter.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Third-Party Sharing

We do not sell your data. However, we may share your information with trusted third parties to run our site, such as:

• Payment Processors: (e.g., Stripe or PayPal) to handle secure transactions.

• Email Providers: (e.g., Mailchimp) to send your digital downloads.

• Analytics: (e.g., Google Analytics) to see how the site is being used.

7. Your Rights

Under UK/EU data protection laws, you have rights including:

• Access: You can ask for a copy of your data.

• Correction: You can ask us to fix inaccurate data.

• Erasure: You can ask us to delete your data (the "Right to be Forgotten").

• Withdrawal of Consent: You can unsubscribe from emails at any time.

8. Cookies

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our site. You can set your browser to refuse all or some browser cookies.

9. Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

10. Changes to This Policy

Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates.