Our Privacy Policy
Last updated: 23 July 2025
Introduction
Little Curiosities Nursery & Preschool is committed to protecting your privacy and the privacy of your children. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website (www.littlecuriosities.co.uk) and our nursery services.
Data Controller: Little Curiosities Nursery & Preschool
Address: Little Curiosities Nursery & Preschool, Holy Trinity Church Rooms, Church Lane, Bromley BR2 8LB
Email: info@littlecuriosities.co.uk
Phone: 020 8051 0201
Information we collect
Website visitors
When you visit our website, we may collect:
-
Contact information: Name, email address, phone number (when you complete enquiry forms)
-
Technical information: IP address, browser type, device information, pages visited
-
Communication records: Messages sent through contact forms or email
Nursery families
When you enrol your child with us, we collect:
Parent/Guardian information:
-
Names, addresses, phone numbers, email addresses
-
Emergency contact details
-
Employment information (for funding eligibility)
-
Financial information for fee payments
-
Communication preferences
Child information:
-
Full name, date of birth, address
-
Medical information, allergies, dietary requirements
-
Special educational needs or disabilities
-
Development records and observations
-
Photographs and videos for learning journeys
-
Emergency contact information
-
Previous nursery/childcare history
Additional records:
-
Attendance records
-
Incident and accident reports
-
Safeguarding records (if applicable)
-
Transition information for schools
How we use your information
Website enquiries
We use your information to:
-
Respond to your enquiries about our services
-
Provide information about availability and fees
-
Arrange nursery visits
-
Send you our newsletter (with your consent)
Nursery services
We use your child’s and family’s information to:
-
Provide high-quality childcare and education
-
Ensure your child’s health, safety, and well-being
-
Track your child’s development and learning
-
Communicate with you about your child’s progress
-
Manage fees and funding
-
Meet our legal obligations under childcare regulations
-
Share information with Ofsted during inspections
-
Facilitate transitions to school
-
Handle emergencies and safeguarding concerns
Our legal basis for processing
We process your information based on:
Contract: To provide nursery services as agreed in your contract
Legal obligation: To comply with childcare regulations, safeguarding duties, and Ofsted requirements
Vital interests: To protect your child’s health and safety
Legitimate interests: To operate our nursery effectively and improve our services
Consent: For marketing communications and non-essential photographs
Sharing your information
We may share your information with:
Regulatory bodies:
-
Ofsted (for inspections and registration)
-
Local Authority (for funding and safeguarding)
-
Health and Safety Executive (if required)
Healthcare providers:
-
NHS services (in medical emergencies)
-
Your child’s GP or health visitor (with consent)
-
Speech and language therapists, occupational therapists
Educational settings:
-
Schools your child will transition to
-
Special educational needs coordinators
Professional services:
-
Our insurance company (for claims)
-
Legal advisors (if required)
-
Accountants (for financial records)
Emergency services:
-
Police, fire, or ambulance services (if required)
We never sell your personal information to third parties.
International transfers
We do not routinely transfer your personal information outside the UK. If we need to do so, we will ensure appropriate safeguards are in place and inform you beforehand.
Data retention
We keep your information for as long as necessary:
Website enquiries: Up to 2 years from last contact
Current families: Throughout your child’s time with us, plus:
-
Child development records: Until your child’s 25th birthday
-
Safeguarding records: Until your child’s 25th birthday (or longer if serious concerns)
-
Financial records: 7 years after your child leaves
-
General records: 3 years after your child leaves
CCTV footage: Up to 30 days (unless needed for safeguarding)
Your rights
Under GDPR and UK data protection law, you have the right to:
Access: Request a copy of the personal information we hold about you and your child
Rectification: Ask us to correct inaccurate information
Erasure: Request deletion of your information (subject to legal requirements)
Restriction: Ask us to limit how we use your information
Portability: Request your information in a portable format
Objection: Object to certain types of processing
Withdraw consent: For processing based on consent (this won’t affect lawful processing already undertaken)
To exercise these rights, please contact us using the details above.
Children’s privacy
We take special care with children’s information:
-
We only collect information necessary for childcare and education
-
Photographs and videos are used for learning purposes and with parental consent
-
We never share children’s images on social media without explicit consent
-
Children’s records are stored securely and accessed only by authorised staff
-
We teach children age-appropriate lessons about privacy and online safety
Photography and social media
Learning journeys: We take photographs and videos to document your child’s learning and development. These are shared with parents through our secure parent app.
Marketing materials: We only use children’s images in marketing materials (website, leaflets) with explicit written consent from parents.
Social media: We do not post identifiable images of children on our social media accounts without specific consent.
You can withdraw consent for photography at any time.
Data security
We protect your information through:
-
Secure, password-protected computer systems
-
Encrypted data transmission
-
Limited access to authorised staff only
-
Regular staff training on data protection
-
Secure physical storage of paper records
-
Regular security updates and backups
-
CCTV systems with restricted access
Website security
Our website uses:
-
SSL encryption for data transmission
-
Secure hosting with regular updates
-
Limited data collection through forms
-
Cookie consent management
-
Regular security monitoring
Complaints
If you’re unhappy with how we’ve handled your personal information, you can:
-
Contact us directly: We’ll investigate and respond within one month
-
Contact the ICO: Information Commissioner’s Office
-
Website: www.ico.org.uk
-
Phone: 0303 123 1113
-
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow SK9 5AF
-
Changes to this policy
We may update this privacy policy to reflect:
-
Changes in law or regulation
-
Changes to our services
-
Improvements to our data protection practices
When we make significant changes, we’ll:
-
Update the “Last updated” date
-
Notify current families by email or letter
-
Post a notice on our website
Contact us
If you have questions about this privacy policy or how we handle your information, please contact us:
-
Email: info@littlecuriosities.co.uk
-
Phone: 020 8051 0201
-
Address: Little Curiosities Nursery & Preschool, Holy Trinity Church Rooms, Church Lane, Bromley BR2 8LB
For data protection queries specifically, please mark your communication “Data Protection Query.”
This policy works alongside our Cookie Policy and Terms & Conditions to explain how we protect your privacy and handle your information.