Last updated: January 2025
Data Controller
Little Dreamers Day Care Ltd
123 Nursery Lane, Education Quarter
London [POSTCODE TBC]
Tel: 01234 567890
Email: privacy@littledreamersdaycare.co.uk
Information We Collect
We collect and process the following information:
- Child information: Name, date of birth, medical needs, dietary requirements, development records, photographs (with consent)
- Parent/guardian details: Names, addresses, contact details, emergency contacts, occupation (for funding purposes)
- Financial information: Bank details for fee payment (processed securely)
- CCTV footage: For security purposes (retained for 30 days)
- Website cookies: For website functionality only
Legal Basis for Processing
We process your data under the following legal bases:
- Contract: To provide childcare services as agreed
- Legal obligation: EYFS requirements, safeguarding duties, health and safety regulations
- Vital interests: Medical emergencies and child protection
- Legitimate interests: Operating our nursery effectively
- Consent: Photos, marketing communications, sharing with external parties
How We Use Your Information
- Providing safe, quality childcare and education
- Meeting EYFS statutory requirements
- Safeguarding and promoting child welfare
- Managing fees, funding claims, and financial records
- Communicating about your child's progress and wellbeing
- Emergency contact purposes
- Complying with health and safety requirements
Data Sharing
We only share information when necessary with:
- Local Authority (funding, safeguarding, SEND support)
- Schools (transition information - with consent)
- Health professionals (with consent or for safeguarding)
- Emergency services (when necessary)
- Insurance providers (anonymised for claims)
We never sell your data or share it for marketing purposes.
Data Retention
- Children's learning records: 3 years after leaving
- Safeguarding records: Until child's 25th birthday
- Accident/incident records: 21 years from child's 18th birthday
- Financial records: 6 years (HMRC requirement)
- CCTV footage: 30 days unless required for incident
- Staff records: 7 years after employment ends
Your Rights
Under GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Correct inaccurate information
- Request deletion (where legally possible)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent (where consent is the legal basis)
Children's Privacy
We take extra care with children's data:
- Only collect necessary information
- Enhanced security measures
- Staff training on data protection
- Clear photo/video consent procedures
- Never share publicly without explicit consent
Data Security
We protect your data through:
- Locked filing cabinets for paper records
- Password-protected, encrypted computer systems
- Staff confidentiality agreements and training
- Secure disposal/shredding procedures
- Limited access on need-to-know basis
- Regular security reviews
Complaints
If you have concerns about how we handle your data:
- Contact our Data Protection Officer at privacy@littledreamersdaycare.co.uk
- If not satisfied, you can complain to the Information Commissioner's Office:
ICO
Wycliffe House, Water Lane, Wilmslow SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk