Policy Zone
Privacy Policy
.png)
Introduction
Little Lambs Nursery is committed to protecting the privacy, confidentiality, and security of personal data. This Website Privacy & Data Protection Policy explains how we collect, use, store, and protect personal information provided through our website, and how we meet our legal obligations under data protection law.
This policy applies to all visitors to our website, including parents, carers, prospective families, and members of the public. It should be read alongside our wider nursery policies, including our Confidentiality & Data Protection Policy, Safeguarding & Child Protection Policy, and Admissions Policy.
Legal Framework
This policy is written in accordance with the following legislation and statutory guidance:
• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Early Years Foundation Stage (EYFS) Statutory Framework 2025
• Human Rights Act 1998
• Freedom of Information principles (where applicable)
• Information Commissioner’s Office (ICO) guidance
Data Controller
Little Lambs Nursery is the Data Controller for all personal data collected through this website.
Data Controller:
Little Lambs Nursery
Unit 14, Home Farm, Main Street, Farrington Gurney, Bristol, BS39 6UB
E: info@littlelambsnursery.co.uk
T: 07985 564482
Responsibility for data protection sits with the nursery’s Directors and senior management team.
Types of Personal Data We Collect
Through our website, we may collect the following information:
• Names of parents, carers, or enquirers
• Contact details such as email addresses and telephone numbers
• Child details provided during enquiries or registration
• Preferred start dates and session information
• Information submitted via enquiry, registration, consent, or tour request forms
• Correspondence sent to us by email or website contact forms
We do not intentionally collect special category data (such as medical or safeguarding information) through the public website unless this is necessary for registration or consent processes.
How We Use Personal Data
We collect and use personal data for legitimate nursery purposes only, including:
• Responding to enquiries and tour requests
• Processing registration and enrolment applications
• Communicating with parents and carers
• Managing funded entitlement applications
• Fulfilling our legal and regulatory obligations
• Safeguarding children and families
• Maintaining accurate nursery records
We do not sell, rent, or trade personal data.
Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
• Consent – where you have actively provided permission
• Contract – where data is required to administer nursery services
• Legal obligation – where required by law or regulation
• Vital interests – where necessary to protect a child
• Legitimate interests – where processing is reasonable and expected
Website Security Measures
We take appropriate technical and organisational steps to protect personal data submitted via our website.
These measures include:
• Secure Socket Layer (SSL) encryption to protect data in transit
• Secure, reputable website hosting
• Restricted administrative access
• Password protection and access controls
• Regular system updates and monitoring
These measures are designed to reduce the risk of unauthorised access, loss, or misuse of data.
Online Forms and Data Submission
Any information submitted through website forms is:
• Transmitted securely
• Accessed only by authorised nursery staff
• Used solely for the purpose for which it was provided
• Stored securely in line with our data retention procedures
Website forms do not automatically place individuals on mailing lists or marketing databases.
Cookies and Analytics
Our website may use essential cookies to ensure it functions correctly and securely.
Where analytics tools are used, they are configured to:
• Collect anonymised or aggregated information
• Not identify individual users
• Help us understand website usage to improve accessibility and content
We do not use cookies for advertising, profiling, or behavioural tracking.
Visitors are informed about cookie use on first visit and can manage cookie preferences where applicable.
Third-Party Services and Links
Our website may contain links to third-party platforms such as:
• Online registration or booking systems
• Famly
• Social media pages
Once users leave our website, we are not responsible for the privacy practices of external sites. Users are encouraged to review third-party privacy policies.
Where third-party processors are used, we ensure appropriate data processing agreements are in place.
Email and Digital Communications
Emails sent via the website are handled securely and used only for legitimate nursery communication.
We do not send unsolicited marketing communications.
Data Sharing
We may share personal data only where necessary and lawful, including with:
• Local Authorities (e.g. funded entitlement claims)
• Ofsted
• Safeguarding partners
• Health professionals where required
• IT and system providers acting as data processors
Data is never shared without a lawful basis.
Data Retention
Personal data collected through the website is retained only for as long as necessary.
Retention periods align with:
• EYFS requirements
• Local Authority guidance
• Legal and safeguarding obligations
Once data is no longer required, it is securely deleted or destroyed.
Individual Rights
Under UK GDPR, individuals have the right to:
• Access their personal data
• Request correction of inaccurate data
• Request erasure (where applicable)
• Restrict or object to processing
• Withdraw consent (where consent is the basis)
• Lodge a complaint with the ICO
Requests should be made in writing and will be responded to within statutory timescales.
Safeguarding and Confidentiality
Where data relates to safeguarding or child welfare concerns, it may be shared without consent where necessary to protect a child, in line with statutory guidance.
Safeguarding considerations always override data protection concerns where there is risk of harm.
Changes to This Policy
This policy is reviewed regularly and may be updated to reflect changes in legislation, guidance, or nursery practice.
The most recent version will always be published on our website.
Contact and Complaints
If you have questions or concerns about how your data is handled, please contact us directly.
If concerns cannot be resolved, you have the right to contact the Information Commissioner’s Office (ICO):
ICO
Tel: 0303 123 1113
Policy Statement
Little Lambs Nursery is committed to openness, transparency, and respect for privacy. We recognise the importance of trust when families share personal information with us and take our responsibilities seriously.