Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the visit form we collect your name, phone number, email address and postcode, your child\'s age, the days you are thinking of, a visit date if you give one, and anything you write. The form also records the time it was sent and your IP address, used only to block automated submissions.
When a child starts we hold their name, date of birth, address, the names and contact details of parents and of everyone on the collection list, the password, GP details, immunisations, allergies, dietary needs and medical conditions, any additional learning needs you tell us about, the settling-in notes, the daily diaries and learning records with photographs, accident and medicine records, attendance, the funding claim details for the Childcare Offer and early education, and the parent\'s invoices and payments. Photographs are taken on nursery devices only and used in your child\'s record and on the room walls; nothing goes on social media without your written consent, given separately and withdrawable at any time.
Why we use it
- To care for your child safely and keep the record Care Inspectorate Wales requires of us (a legal obligation and our contract with you).
- To meet our safeguarding duties, including keeping a record of any concern and sharing it with the appropriate authority where the law requires (a legal obligation and the vital interests of the child).
- To claim the Childcare Offer and early education funding on your behalf, which means sharing your child\'s name, date of birth and attendance with Cardiff Council and the Welsh Government (a legal obligation and your consent, given on the application).
- To keep accounting records (a legal obligation).
- Health, dietary and additional-needs information is special category data and is held with your explicit consent, to care for your child properly.
Who sees it
Your child\'s key person and the staff in their room, the manager and deputy as safeguarding leads, the cook for dietary needs, and the office for invoicing. Care Inspectorate Wales may read records at inspection. Cardiff Council and the Welsh Government receive the funding claim. We share information with your child\'s school or health visitor only when you ask us to, except where safeguarding law requires it. The review platform receives your email address once after the first half term, and you can decline by replying. The visit form sends an email to us through the web host. We never sell your details or your child\'s, and we never share a child\'s photograph without written consent.
How long we keep it
Visit enquiries that do not become places are deleted after six months. A child\'s record is kept until their twenty-fifth birthday, as the statutory guidance for early years settings requires for accident and safeguarding records; learning records and daily diaries are given to you when your child leaves and our copy is deleted after two years; accounting records are kept for six years; funding claim records for the period the Welsh Government sets, currently seven years.
Your rights, and the child\'s
You can ask for a copy of what we hold about you and your child, ask us to correct or delete it, object to our using it, or withdraw consent for photographs or special category data. Email hello@littleacornsnursery.co.uk or write to the nursery. We answer within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner\'s Office at ico.org.uk.
Cookies
This website sets a session cookie only when you send the visit form, to limit repeat submissions; it expires when you close the browser. There are no analytics or advertising cookies. The map on the find-us page is loaded from Google, which may set its own cookies when it is displayed; the page works without it.