Bright Start Nursery is committed to protecting your privacy and keeping all personal information safe. This notice explains what data we collect, why we collect it, how we use it, and how we keep it secure. It applies to children, families, and staff, and is fully aligned with our internal Data Protection and Confidentiality Policy.
1. The Information We Collect
To provide high-quality childcare and meet legal requirements, we may collect:
For Children
- Name, date of birth and contact details
- Medical and dietary information
- Attendance, learning observations and assessments
- Safeguarding or welfare information (where relevant)
- Photos for learning journals and communication
For Parents/Carers
- Contact and emergency details
- Funding, invoicing and billing information
For Staff
- Employment details, training and qualifications
- DBS information
- Payroll and emergency contact details
These categories reflect our internal commitments to safe and appropriate data collection.
2. Why We Collect This Information
- We use personal data to:
- Provide safe, high-quality childcare and education
- Meet EYFS and legal requirements
- Support children’s wellbeing, learning and development
- Communicate with families through systems such as Famly
- Manage staffing, training and safeguarding needs
- Comply with Ofsted, health and safety, and legal obligations
This matches the purposes defined in our Data Protection Policy.
3. How We Store and Protect Your Data
We take confidentiality and security very seriously. We:
- Store paper files securely in locked cabinets
- Protect digital information with passwords and secure systems
- Limit access to staff on a strict need-to-know basis
- Train all staff in confidentiality and GDPR
- Never share information outside the nursery unless required for a child’s safety or with parental consent
These practices reflect the confidentiality and storage measures described in our policy.
4. When We Share Information
We only share information when it is necessary and lawful, for example with:
- Health professionals
- Local authority safeguarding teams
- Ofsted
- Emergency services
- Other early years settings (with consent)
We never share data for marketing purposes and we never sell personal information.
5. Legal Basis for Using Your Data
Under GDPR, we process data using the following lawful bases:
- Legal obligation (EYFS, safeguarding, Ofsted)
- Public task (delivery of education)
- Vital interests (where someone is at risk of harm)
- Contract (childcare agreement)
- Consent (for optional items such as photos)
Our internal policy also makes clear that confidentiality may be overridden for safeguarding reasons.
6. Your Rights
You have the right to:
- Access your own or your child’s information
- Request correction of inaccurate data
- Request deletion of data (where permitted)
- Withdraw consent for photographs or optional uses
- Ask how your information is used
Details of these rights are reflected in our Data Protection Policy.
7. Retention of Records
We keep information only for as long as legally required (e.g., safeguarding, accident records, development records, financial records) and securely destroy it when no longer needed.
8. Contact Us
If you have any questions about this Privacy Notice or how we handle data, please contact:
Bright Start Nursery Data Protection Lead
Bright Start Nursery
info@brightstart-nursery.com
07446663461
If you are not satisfied with our response, you may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.
