The White House Nursery GDPR Privacy Policy

Introduction

The White House Nursery is dedicated to protecting the privacy and security of personal information pertaining to our employees, the children we care for, and their parents. This document serves as our Privacy Policy, outlining how we handle personal data in compliance with the General Data Protection Regulation (GDPR).

Data Controller

The White House Nursery, referred to as "we" or "the nursery," acts as the data controller. This means we determine the processes and purposes for which personal data is used and are committed to protecting this data under GDPR requirements.

Purpose of This Policy

This Privacy Policy informs you of our data protection and privacy practices, and your rights regarding your personal information. It does not form part of any contract of employment or service provision unless explicitly stated.

Changes to This Policy

We may update this policy to reflect changes in legislation or operational practices. Whenever we make significant changes, we will notify you promptly and provide an updated version.

Data Protection Principles

We adhere to the following GDPR principles:

Lawfulness, Fairness, and Transparency: Processing personal data in a lawful, fair, and transparent manner.
Purpose Limitation: Collecting data for legitimate, specified, and clear purposes.
Data Minimization: Ensuring personal data is adequate and limited to what is necessary.
Accuracy: Keeping personal data accurate and up-to-date.
Storage Limitation: Retaining personal data no longer than necessary.
Integrity and Confidentiality: Securing personal data against unauthorized or unlawful processing.

Information We Collect

Employees: Names, contact details, employment records, financial details for payroll, health information, and other necessary employment-related data.
Children: Names, birthdates, health data, attendance records, and developmental progress.
Parents: Contact details, financial data, and other necessary information to provide our services.

Collection Methods

We collect data through enrolment forms, direct communications, and through our website with technologies like cookies.

Use of Personal Information

To provide educational and care services to children.
To manage our workforce effectively.
To comply with our legal and regulatory obligations.
For the safety and security of the nursery environment.

Data Sharing and Disclosure

We share data with third-party service providers who assist with our operations, under strict confidentiality agreements. We may also disclose data to comply with legal obligations or to protect the rights, property, or safety of our nursery, our employees, or others.

Data Security

We implement robust technical and organisational measures to protect personal data from loss, misuse, alteration, or destruction.

Rights of Data Subjects

You have the right to:

Access: Request access to your personal data.
Correction: Request correction of incorrect data.
Erasure: Request deletion of data where processing is unnecessary.
Restriction: Request the restriction of processing.
Portability: Request data transfer to another organization.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

Contact Us

For more information or to exercise your rights, please contact our Data Protection Officer at mike@whitehousenurseries.co.uk