Privacy notice

Who we are

National Parents Alliance Ltd (company number 17456903) is the data controller for personal information collected through this website. We are a company limited by guarantee, registered in England and Wales. Our registered office is 12 Fratton Road, Portsmouth, England, PO1 5BX.

Michelle is our privacy lead and handles data-protection enquiries on the company's behalf. You can write to her at the registered office, marking your letter “Privacy enquiry”. A dedicated privacy email address will be added before public launch.

Registration and communications

Our Founding Community registration asks for your title, name, email address, participation route and, where relevant, organisation and role. We record volunteering interest, your optional communications preference, the wording presented to you and the submission and verification times. Registering interest creates neither paid membership nor formal organisational affiliation.

We send a verification email and a welcome message to complete your registration. Ongoing updates follow the communications choice you make. Unverified registrations are not added to a general mailing list.

Enquiries and listening responses

Contact enquiries contain your chosen category, name, email address, optional organisation, subject and message. We use these to manage and respond to your enquiry. Our optional welcome question is stored separately from contact details but linked internally to your registration. Please do not include sensitive information about children in either form.

Services and storage

Ghost publishes the website on infrastructure hosted by Hetzner. The NPA registration service stores registration records, contact enquiries and listening responses in a separate database on that infrastructure. Mailgun is the intended provider for verification, welcome messages and delivery of enquiries to NPA. Delivery is enabled only after the sending domain and inboxes are configured. Email open and click tracking are disabled in this service.

The service uses short-lived, hashed rate-limit identifiers to help prevent abuse. Security logs and protected backups may also contain operational information. No advertising integrations are included in this build. We do not sell parent data.

Retention and launch review

The development configuration removes unverified registrations after 14 days. Verification links expire after 24 hours; listening links expire after 30 days. These periods, the retention of verified records, enquiries, responses, server logs and backups, and the lawful basis for each processing purpose must be confirmed in the approved launch policy.

Before public launch, NPA will confirm supplier processing locations, any international transfer safeguards, the privacy contact address and the complete retention schedule.

Your choices and rights

You can unsubscribe from optional emails using the link in the message. Depending on the circumstances, you may ask to access, correct or erase your information, restrict or object to its use, or receive a portable copy. Where we rely on consent, you can withdraw it at any time. To make a request, write to Michelle at the address above. We may need to verify your identity.

You can also complain to the Information Commissioner's Office. We would welcome the chance to address your concern first.

Cookies and changes

Our cookie notice explains the site's use of cookies. We will update this privacy notice as NPA's services and suppliers develop, and show the revision date when the notice is approved for launch.