Privacy Policy | Little Acorns

Little Acorns Nursery School - Data Privacy Policy

Introduction

Little Acorns Nursery School ("We" or "Us") is committed to protecting the privacy and security of the personal data we collect, use and share about our children, parents/guardians (collectively referred to as "You" or "Your") and staff members. This Data Privacy Policy explains how we handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

What data do we collect?

We collect a variety of personal data to provide childcare services, ensure the safety and well-being of children and comply with legal requirements. This data may include:

Children's Data: Name, date of birth, emergency contact details, dietary requirements, health information (with parental consent) and photographic images (with parental consent).
Parent/Guardian Data: Name, contact details, emergency contact information and relationship to the child.
Staff Data: Name, contact details, qualifications, DBS checks and references.

How do we use your data?

We use your data for the following legitimate purposes:

To provide childcare services: This includes registration, attendance records, meal planning, communication with parents and guardians and progress reports.
To ensure the safety and well-being of children: This includes emergency contact procedures, administering medication (with parental consent) and accident or incident reports.
To comply with legal requirements: This includes safeguarding obligations and reporting to relevant authorities.
For internal administrative purposes: This includes record-keeping and staff training.

Sharing your data

We may share your data with third-party service providers who assist us in delivering our services, such as catering companies, software providers for registration and administration and healthcare professionals (with parental consent). We will only share the minimum data necessary and ensure these providers adhere to strict data security protocols.

Data Retention

We will only retain your data for as long as necessary for the purposes outlined above, or as required by law. We have a data retention policy in place that details how long we keep different types of data.

Your Rights

You have a number of rights under the UK GDPR, including:

The right to access your data: You can request a copy of the information we hold about you.
The right to rectification: You can request us to correct any inaccurate data we hold about you.
The right to erasure: In certain circumstances, you can request us to delete your data.
The right to restrict processing: You can request us to restrict the processing of your data.
The right to object to processing: You can object to the processing of your data in certain circumstances.
The right to data portability: You can request us to provide your data in a portable format.

Security Measures

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or destruction. This includes password protection, secure storage facilities and staff training on data security protocols.

Changes to this Policy

We may update this Data Privacy Policy from time to time. We will notify you of any significant changes.

If you have any questions about this Data Privacy Policy or your rights, please contact our Data Protection Officer through the contact form on our website.

Making a Complaint

If you are unhappy with how we handle your data, you can make a complaint to the Information Commissioner's Office (ICO): https://ico.org.uk/.