To comply with the UK General Data Protection Regulation, we have created a new Privacy Notice to inform you on how we use and protect your information.
We are not changing the ways we use your personal information, the notice is being shared to inform you of your increased rights in relation to the information held on you, including what information we collect about parents/carers and their children, how we use it and the legal grounds for this.
We are registered with the ICO
How we use parents/carers and children’s information
All information that we collect is necessary to meet our contractual and legal requirements as an Early Years Setting, from Ofsted, Local Authorities and the EYFS. The categories of information that we collect, hold and share include:
Why we collect and use this information
We use the data:
The lawful basis on which we use this information
We collect and use children’s information under the Statutory Framework for the Early Years Foundation Stage (given legal force by the Childcare Act 2006), The Limitation Act 1980. By completing and signing the nursery registration form you are giving consent for us to process yours and your child’s personal data for the specific purposes of being part of the nursery setting. The processing of the information you have provided about yourself and your child is necessary for the contract you have completed in the registration form. We have a legal obligation to process the information provided we comply with the law.
Collecting Children’s Information
Whilst the majority of children’s information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.
Storing children’s data
We hold children’s data securely. Paper records are kept in a locked office and digital data is on password protected devices. Online learning journals are hosted by a secure web platform. Data is retained for as long as nesacary depending on the type of data this could be between 3 year after the child leaves the setting up to until the child has reached the age of 21 (this will be the age of 24 years regarding child protection). Learning and assessment will be kept for 3 months after the child leaves.
Who we share children’s information with
We routinely share children’s information with:
Why we share pupil information
We do not share information about children with anyone without consent unless we are obliged to as part of a lawful process/investigation.
You also have the right to:
Data Protection regulations
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance at email@example.com
Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/
GDPR Compliance Officer Rachel Parker
If you would like to discuss anything in this privacy notice, please contact our Compliance Officer firstname.lastname@example.org or on 01689896135
Please contact us, if you have any questions, enquires or would like to come and look round the nursery
Tel: 01689 896135
Mrs Bond's Village Nursery
177 High Street
St Mary Cray