A new data privacy law is being introduced to the UK at the end of May 2018 (GDPR) General Data Protection Regulation and we have created a new Privacy Notice to inform you on how we use and protect your information.
We are not changing the ways we use your personal information, the notice is being shared to inform you of your increased rights in relation to the information held on you, including what information we collect about parents/carers and their children, how we use it and the legal grounds for this.
Privacy Notice (How we use parents/carers and children’s information)
All information that we collect is necessary to meet our contractual and legal requirements as an Early Years Setting and Out of School Club, from Ofsted, Local Authorities and the EYFS. The categories of information that we collect, hold and share include:
Why we collect and use this information
We use the data:
The lawful basis on which we use this information
We collect and use children’s information under the Statutory Framework for the Early Years Foundation Stage (given legal force by the Childcare Act 2006), The Limitation Act 1980. By completing and signing the nursery registration form you are giving consent for us to process yours and your child’s personal data for the specific purposes of being part of the nursery setting. The processing of the information you have provided about yourself and your child is necessary for the contract you have completed in the registration form. We have a legal obligation to process the information provided we comply with the law.
Collecting Children’s Information
Whilst the majority of children’s information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.
Storing children’s data
We hold children’s data such as their registration details, accidents and medication form etc, until each child has reached the age of 21 to 24 years regarding child protection. Learning and assessment will be kept for 3 months after the child leaves.
Who we share children’s information with
We routinely share children’s information with:
Why we share pupil information
We do not share information about children with anyone without consent unless we are obliged to as part of a lawful process/investigation.
Company Compliance Officer Gillian Isherwood email@example.com
You also have the right to:
Data Protection regulations
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance at firstname.lastname@example.org
Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/
Contact If you would like to discuss anything in this privacy notice, please contact our Compliance Officer email@example.com or telephone 01257 252647 Ext 2