The White House Nursery GDPR Privacy Policy
​
Introduction
The White House Nursery is dedicated to protecting the privacy and security of personal information pertaining to our employees, the children we care for, and their parents. This document serves as our Privacy Policy, outlining how we handle personal data in compliance with the General Data Protection Regulation (GDPR).
​
Data Controller
The White House Nursery, referred to as "we" or "the nursery," acts as the data controller. This means we determine the processes and purposes for which personal data is used and are committed to protecting this data under GDPR requirements.
​
Purpose of This Policy
This Privacy Policy informs you of our data protection and privacy practices, and your rights regarding your personal information. It does not form part of any contract of employment or service provision unless explicitly stated.
​
Changes to This Policy
We may update this policy to reflect changes in legislation or operational practices. Whenever we make significant changes, we will notify you promptly and provide an updated version.
​
Data Protection Principles
We adhere to the following GDPR principles:
-
Lawfulness, Fairness, and Transparency: Processing personal data in a lawful, fair, and transparent manner.
-
Purpose Limitation: Collecting data for legitimate, specified, and clear purposes.
-
Data Minimization: Ensuring personal data is adequate and limited to what is necessary.
-
Accuracy: Keeping personal data accurate and up-to-date.
-
Storage Limitation: Retaining personal data no longer than necessary.
-
Integrity and Confidentiality: Securing personal data against unauthorized or unlawful processing.
​
Information We Collect
​
-
Employees: Names, contact details, employment records, financial details for payroll, health information, and other necessary employment-related data.
-
Children: Names, birthdates, health data, attendance records, and developmental progress.
-
Parents: Contact details, financial data, and other necessary information to provide our services.
​
Collection Methods
We collect data through enrolment forms, direct communications, and through our website with technologies like cookies.
​
Use of Personal Information
​
-
To provide educational and care services to children.
-
To manage our workforce effectively.
-
To comply with our legal and regulatory obligations.
-
For the safety and security of the nursery environment.
​
Data Sharing and Disclosure
We share data with third-party service providers who assist with our operations, under strict confidentiality agreements. We may also disclose data to comply with legal obligations or to protect the rights, property, or safety of our nursery, our employees, or others.
Data Security
We implement robust technical and organisational measures to protect personal data from loss, misuse, alteration, or destruction.
​
Rights of Data Subjects
You have the right to:
-
Access: Request access to your personal data.
-
Correction: Request correction of incorrect data.
-
Erasure: Request deletion of data where processing is unnecessary.
-
Restriction: Request the restriction of processing.
-
Portability: Request data transfer to another organization.
-
Objection: Object to processing based on legitimate interests.
-
Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
​
Contact Us
For more information or to exercise your rights, please contact our Data Protection Officer at mike@whitehousenurseries.co.uk
​