Information we hold about you and your child
We have procedures in place for the recording and sharing of information [data] about you and your child that is compliant with the principles of the General Data Protection Regulations (2018) as follows:
The data is we collect is
- Processed fairly, lawfully and in a transparent manner in relation to the data subject you and your family
- Collected for specified, explicit and legitimate purposes and not further processed for other purposes incompatible with those purposes.
- Adequate, relevant and limited to what is necessary in relation to the purposes for which data is processed.
- Accurate and, where necessary, kept up to date.
- Kept in a form that permits identification of data subjects you and your family for no longer than is necessary for the purposes for which the personal data is processed.
- Processed in a way that ensures appropriate security of the personal data including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
St. Mary’s Osterley Playgroup’s Privacy Notice
St. Mary’s Osterley Playgroup, St. Mary’s Parish Centre, Osterley Road, Isleworth, Middlesex TW7 4PW.
We are committed to ensuring that any personal data we hold about you and your child is protected in accordance with data protection laws and is used in line with your expectations. We process all personal data in line with the UK Data Protection Act 2018 (GDPR)
This privacy notice explains what personal data we collect, why we collect it, how we use it and how we protect it.
What personal data do we collect?
We collect personal data about you and your child to provide care and learning that is tailored to meet your child’s individual needs. We also collect information in order to verify your eligibility for free childcare as applicable.
Personal details that we collect about your child include:
- your child’s name, date of birth, address, health and medical needs, development needs, and any special educational needs.
Where applicable we will obtain child protection plans from social care and health care plans from health professionals.
We will also ask for information about who has parental responsibility for your child and any court orders pertaining to your child.
Personal details that we collect about you include:
- your name, home and work address, phone numbers, emergency contact details, family details and childminders details.
This information will be collected from you directly in the registration form.
If you apply for up to 30 hours free childcare, we will also collect:
- your national insurance number or unique taxpayer reference (UTR), if you’re self-employed. We may also collect information regarding benefits and family credits that you are in receipt of.
Why we collect this information and the legal basis for handling your data
We use personal data about you and your child in order to provide childcare services and fulfil the contractual arrangement you have entered into. This includes using your data to:
- contact you in case of an emergency
- to support your child’s wellbeing and development
- to manage any special educational, health or medical needs of your child whilst at our setting
- to carry out regular assessment of your child’s progress and to identify any areas of concern
- to maintain contact with you about your child’s progress and respond to any questions you may have
- to process your claim for up to 30 hours free childcare (only where applicable)
- to keep you updated with information about our service
With your consent, we will also record your child’s activities for their individual learning record. This may include photographs. You will have the opportunity to withdraw your consent at any time, for images taken by confirming so in writing.
We have a legal obligation to process safeguarding related data about your child should we have concerns about their welfare. We also have a legal obligation to transfer records and certain information about your child to the school that your child will be attending (see Transfer of Records policy).
Who we share your data with
In order for us to deliver childcare services we will also share your data as required with the following categories of recipients:
- Ofsted – during an inspection or following a complaint about our service
- banking services to process standing orders and/or direct debit payments and childcare voucher payments (as applicable)
- the Local Authority (where you claim up to 30 hours free childcare as applicable)
- the government’s eligibility checker (as above)
- our insurance underwriter (if applicable)
- The auditor will see what personal details are on bank statements and children’s reference on financial records
- the school that your child will be attending
we will also share your data if:
- we are legally required to do so, for example, by law, by a court or the Charity Commission;
- to enforce or apply the terms and conditions of your contract with us;
- to protect your child and other children; for example by sharing information with social care or the police;
- it is necessary to protect our rights, property or safety
- we transfer the management of the setting, in which case we may disclose your personal data to the prospective buyer so they may continue the service in the same way.
we will never share your data with any other organisation to use for their own purposes
How do we protect your data?
We protect unauthorised access to your personal data and prevent it from being lost, accidentally destroyed, misused, or disclosed by:
Storing all data in a locked tin in a locked cupboard. Any data kept electronically is password protected. We minimise access to on-line data and whilst we do our best to keep data secure in whatever form we acknowledge that we cannot guarantee against data breaches, either accidental or deliberate. If one were to happen we would notify the ICO within 72 hours if it risks people’s rights and freedoms and the individuals concerned if necessary. We would document the breach and decision, along with the remedial and preventative action taken which we would take as necessary.
How long do we retain your data?
We retain your child’s personal data for up to 3 years after your child no longer uses our setting, or until our next Ofsted inspection after your child leaves our setting. Medication records and accident records are kept for longer according to legal requirements. Your child’s learning and development records are maintained by us and handed to you when your child leaves. All paper data is shredded.
Financial records are kept for 7 years according to legal requirements.
In some instances (child protection, or other support service referrals) we are obliged to keep your data for longer if it is necessary to comply with legal requirements (see our Children’s and Provider Records policies).
We do not make any decisions about your child based solely on automated decision-making.
Your rights with respect to your data
You have the right to:
- request access, amend or correct your/your child’s personal data
- request that we delete or stop processing your/your child’s personal data, for example where the data is no longer necessary for the purposes of processing; and
- request that we transfer your, and your child’s personal data to another person
If you wish to exercise any of these rights at any time or if you have any questions, comments or concerns about this privacy notice, or how we handle your data please contact us. If you have continue to have concerns about the way your data is handled and remain dissatisfied after raising your concern with us, you have the right to complain to the Information Commissioner Office (ICO). We are registered with the ICO and you can view our ICO certificate. The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or ico.org.uk/
Changes to this notice
We keep this notice under regular review. You will be notified of any changes where appropriate.