Privacy Notice Parents
PRIVACY NOTICE FOR PARENTS
The Highwood House Nursery is registered with ICO under number: Z9596551
Personal data that we collect about you and your child
The Highwood House Nursery is the data controller for any personal information that you provide us regarding yourself as parent, and about your child.
We are committed to protecting your rights of freedom and privacy and in meeting the requirements of the General Data Protection Regulation 2018 (GDPR).
The personal data that we will collect about your child will include, but not necessarily limited to, the following;
• Personal information: gender, name and date of birth
• Personal characteristics
• Dietary requirements
• Medical and health information
• Special Education Needs
• Attendance information
Personal data that we will collect about you as parent, or guardian, will include:
• Personal information: name, date of birth, national insurance number
• Contact details: home address, phone number, email address
• Bank details: name of bank, sort code, account number
We also hold data about you and your child regarding your race, religion or ethnicity. This data will only be processed by us if it is essential in respect of your contract of attendance with us and will be adequately protected at all times due to is sensitive nature.
We will obtain most of this data directly from the Nursery Registration Form and at Induction. We are under a statutory obligation to request evidence of your identity in the form of either a Driving Licence or Passport and that of your child’s in the form of a Birth Certificate or Passport.
This information is required to enable us to provide appropriate care for you child, develop your child’s learning and to be able to report to you on their progress.
We ask for your child’s medical and health information so that your child can be kept safe when they attend the nursery.
We will always seek your consent where some data is to be processed additionally. For example, we will always seek your consent for photographs of your child to be taken.
You must let us know when any of your personal data changes so that we can maintain and update our records and ensure their accuracy.
In keeping with the obligations of GDPR we will not collect excessive data about you, it will be protected from loss, misuse or unauthorised access and disclosure. Following our retention policy personal data will be destroyed in a secure manner.
Personal data is either kept in our software systems or in paper format. Our software systems are securely protected by individual logins that are only given to those people who are required to access the data. Data stored in paper format is kept in locked filing cabinets.
We will only share your personal data and that of your child where we are obliged to pass on some of your details to third parties: the Local Authority, Ofsted, NHS, the police or other outside safeguarding agencies.
We will not give any information about you or your child to anyone outside of the nursery without having obtained your prior explicit consent to do so., unless the law or our terms and conditions allow us to.
Data Retention Periods
We are committed to ensuring that we do not hold your personal data for longer than is necessary.
You have the right to request access to any of the data that we may hold about you and your child. If you wish to do so please contact the Nursery Manager.
If you should feel that we have not handled your or your child’s personal details properly, or are unhappy with how your request has been dealt with please contact the Registered Providers.
As an employee you have the right to request access to any of the data that we may hold about you. If you wish to do so please contact the Nursery Manager.
If you should feel that we have not handled your personal details properly or are unhappy with how your data request has been dealt with please contact the Group HR Manager.
We will always ask for your consent if further data is required or the existing data is to be processed in a different way.