Children & Young People’s Privacy

What this notice is for

This notice explains how MIPACE handles personal information when a profile relates to a child or young person. It should be read with our Privacy Policy. We use additional safeguards because children’s information deserves particular care.

Who creates and manages a child profile

A child profile is created and managed through the account of a parent, guardian or other appropriately authorised adult. Organisations cannot create personal or medical profiles for children on their own behalf. The adult managing the profile is responsible for making sure they are entitled to provide and manage the child’s information.

Information that may be included

The profile manager chooses what information to add. This can include the child’s first name, photograph, communication preferences, accessibility or support needs, emergency contacts, and health or medical information where the adult decides it is useful to share.

MIPACE does not diagnose a child, decide what medical information should be entered or create a medical record on the child’s behalf.

Reduced identification

Child profiles are designed to use the child’s first name rather than displaying a full legal name. Profile managers should avoid adding unnecessary identifying information to free-text fields or photographs.

Who can see a child profile

A child profile is not listed as part of a public people directory. Information becomes available through an activated MIPACE device or another access route deliberately connected to the profile. A person who can access that route can see the fields the profile manager has chosen to make available.

Profile managers should therefore include only information that is appropriate to be seen by a person who may be helping the child.

Additional child-profile safeguards

• Child-profile access uses a shorter 15-minute session timeout.
• Child profiles are managed by the authorised adult account rather than being independently administered by an organisation.
• MIPACE uses controlled profile access rather than a browsable directory of children.
• Profile images and account information are handled through the platform’s protected data and media controls.

Location Assist

Where Location Assist is enabled for an eligible profile, the helper chooses whether to share the location of their own device and the browser asks that helper for permission. Location information is sent only through the configured Location Assist process to verified contacts. The feature is intended to help reconnect or support a person; it is not continuous tracking of the child.

The child’s data-protection rights

Children have data-protection rights in their own information. Depending on the child’s age, understanding and the circumstances, a request may be made by the child or by an adult authorised to act for them. Rights can include access, correction, erasure, restriction and objection where the law provides them.

To ask about a child profile or exercise a privacy right, contact [email protected]. We may need information to verify identity and authority before acting on a request.

What parents and guardians should do

• Keep the profile accurate and remove information that is no longer needed.
• Only add sensitive information that has a genuine support, communication, safety or accessibility purpose.
• Review which profile is assigned to each MIPACE device.
• Remove access or unlink a device if it is lost, transferred or no longer needed.
• Talk to the child about the profile in an age-appropriate way wherever possible.

Questions or concerns

For questions about a child’s information, privacy or the way a child profile works, contact [email protected]. You can also read our Data Protection & Security page.