Snuggles Nursery is committed to protecting and respecting your privacy.
This policy (together with our cookie policy and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
The General Data Protection Regulation ((EU) 2016/679) (GDPR), effective on 25 May 2018, gives data subjects (living individuals in respect of whom personal data is processed) enhanced rights and protections in relation to their personal data. We are committed to safeguarding the privacy of the users of our services. Therefore, we have updated our Privacy Policy so we are completely clear as to what personal data we collect, why we collect that personal data and how we handle it. We are the Data Controller (as that term is defined in data protection legislation).
Please read this privacy policy carefully. By visiting any of our websites (www.snugglesdaynursery.co.uk ) you are accepting and consenting to the practices described in this policy.
1.0 What information do we collect?
The following tables set out what personal information we may process, why we process that personal information and the legal basis for such processing:
- Information you give us.
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Child and parent Data: Information about you or your child which relates to their placement with us . This information may include your name, your postal address, your email address and your telephone and/or mobile number, and such other information as we determine is needed to verify the identity of our child placements. | We will process this data to verify your identity, maintain your case with us, to provide our services, to communicate with you and to back up our database. The reason we process this data is to ensure the proper administration and safeguarding of the child’s placement and our business and, where you have entered into an agreement with us, for the purposes of fulfilling our contract with you. | The legal basis we rely on for processing this data is as follows:- Our legitimate interests; or- Fulfilment of our agreement with you; or- Complying with our legal obligations in ensuring the correct parental and background information is stored on behalf of our child placements |
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Registration Data: Information you provide when you register to use our website, enter a competition, promotion or survey, or when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number. | We will process this data so we can deal with your registration, or other communications or applications, or to address your query or concern. The reason we process this data is to ensure the proper administration of your registration and our business. | The legal basis we rely on for processing this data is as follows:- Our legitimate interests; or- Consent. If for example you have requested further information, registered a complaint, or consented to profiling or marketing undertaken by us |
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Communication Data: If you communicate with us (through our website contact form, via email, phone, post or any other means of communication by which you choose to contact us), we will process the information contained in your communication. This information may include your name and contact information, the content of your communication and any metadata our website generates where you communicate with us using the contact form available on our website. | We will process that information so we can correspond with you and keep records of such correspondence, in keeping with the type of consent provided by you. It is the responsibility of the parent/guardian to keep this information up to date and accurate. | The legal basis we rely on for processing this data is as follows:- Our legitimate interests; or- Consent. Out of necessity and for safeguarding considerations up to date communication data with parent and guardians must be retained, when the child is in placement. |
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Recruitment Data: Where you register your interest in a current or potential job or role with us, or otherwise provide us with information in relation to a job or role (either directly, indirectly or through an agent who you have instructed for this purpose) we will process your data so that we can access your suitability for the job or role with us. The data we will retain will include your name, your contact details and your curriculum vitae (CV). | We will process this information so that we can access your suitability for any current or potential job or roles with us and so that we can contact you about any such opportunities. The reason we are processing this data is to ensure the proper administration of our business. You have also consented to us using your data for these purposes where you have applied for a vacancy or role with us. | The legal basis we rely on for processing this data is as follows:- Consent; and/or- Our legitimate interests. It is our legal responsibility to ensure the highest quality qualified staff are engaged in order to provide our service. |
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Notification Data: Where you have purchased services from us, or where you subscribe to receive our email notifications and/or newsletters, we will process your data so that we can send such email notifications and/or newsletters to you. | We will only process such personal information where you have consented to us doing so or where we have already been sending you information and material over a period of time. | The legal basis we rely on for processing this data is as follows:- Consent, in that only those who wish to receive our latest material , actually receive it. |
| What personal data might be supplied to us? | Why we process that personal data: | The legal basis for processing that personal data. |
| Regulatory Data: We may process your data if we need to do so in order to comply with our legal and/or regulatory obligations, and/or so that we can protect the vital interests of you or another natural person. | The reason we will process such data is to protect the vital interests of you or another natural person, or in order to comply with our legal and/or regulatory obligations. | The legal basis we rely on for processing this data is as follows:- Vital interests; or- Our legitimate interests; or- Compliance with our legal and regulatory and safeguarding obligations. |
1.2 Information we collect from other sources.
| What personal data might we collect from other sources? | Why we process such personal data: | The legal basis for processing this personal data. |
| Transaction Data: When a parent or guardian or legal third party wishes to use our services, they will need to provide certain information to us so that we can supply those services. The personal information which may be communicated to us in the course of supplying services to the children may include a data subject’s name, contact details, payment card details and other personal information relevant to a transaction. | We will process that data in order to perform our contract with you and the child and to fulfil the transaction. We also need to comply with our regulatory obligations when administering our business. | The legal basis we rely on for processing this data is as follows:- Performance of our contract with you as parent or guardian; or- Our legitimate interests in keeping this information for the duration of the nursery placement |
| What personal data might we collect from other sources? | Why we process such personal data: | The legal basis for processing this personal data. |
| Technical Data: Technical information relating to your use of our websites, including (1) the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. We may obtain this data through our analytics tracking system; and (2) information about your visit to our website(s), including the full Uniform Resource Locators (URL), clickstream to, through and from our website(s) (including date and time), products and services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page. | We occasionally may process this data so we can monitor and analyse how our websites are used so we can improve our websites and our services. This helps us to administer our business and improve the services we offer. | The legal basis we rely on for processing this data is as follows:- Our legitimate interests in maintaining the effectiveness of our services and to ensure that marketing material is utilised effectively, and feedback acted upon as required. |
| What personal data might we collect from other sources? | Why we process such personal data: | The legal basis for processing this personal data. |
| Third Party Data: This is information we receive about you if you use any of the websites we operate or the services we provide. We sometimes work closely with third parties (including, for example, social services, health professionals, trainers local businesses, charities and other professionals, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies. We may receive personal data about you from these organisations. Those organisations will have their own privacy policies detailing how they process personal data. | We process this data so that we can properly administer our business, and ensure it complies with existing regulatory requirements | The legal basis we rely on for processing this data is as follows:- Our legitimate interests in ensuring the protection and care for the children and staff using and employed by our service, and that the business is efficiently run. |
2.0 Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our cookie policy.
3.0 When will we disclose your personal data to others?
3.1 We may need to, out of necessity, share your personal information with external agencies including: suppliers, social services and other regulatory bodies. The sharing of your personal information with these agencies will purely be in the interests of the children in the nursery or to ensure the efficient administration of the business, or to fulfil some other regulatory requirement.
3.2 We may need to share your personal information with certain selected third parties including:
(a) Medical professionals who are engaged by us to deliver medical emergency services in order to protect the children in our care. We engage these people, and they need to process personal data and in particular, special category data on our behalf, in order to perform any required medical service.
(b) (1) Regulatory or commissioning services to whom you have may have provided consent for your details to be passed to us, (2) other providers and other services ancillary but vital to the effective running of the nursery and provision of service.
(b) Our business partners, suppliers and sub-contractors for the purpose of performing any contract we have with you or them. In particular, we may use third party companies to process your personal data in order: (1) to provide our IT management system support for us, (2) to carry out our identity and credit verification checks : (3) legal support services (including the processing of information by the courts service and legal advisers), (4) confidential information destruction and deletion services; (5) data storage services; (6) communication facilities; (7) document production services; (8) event support and management services; (9) public relations services; (10) banking services; (11) to manage legal filings and registrations; (12) legal search services; (13) conferencing facilities and call answering facilities; and (14) any other services which we deem are necessary to properly manage our business and comply with our legal and regulatory obligations.
(c) Analytics and search engine providers that assist us in the improvement and optimisation of our website.
3.3 We will also disclose your personal information to third parties in the following circumstances:
(a) If we sell or buy any business or assets, in which case we may need to disclose certain personal data to the prospective seller or buyer of such business or assets.
(b) If all or most of our assets are acquired by a third party, in which case personal data held by us about our service users will be one of the transferred assets.
(c) If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce any legal agreement we have with you; or to protect our rights or property, or the safety of us, our service users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
4.0 Where do we store your personal data?
We will always try to ensure that your personal data is processed within the European Economic Area. In some circumstances this will not be possible. In circumstances where it is necessary for us to transfer your personal outside the European Economic Area, we will only transfer such personal data to third parties where we have carried out due diligence on such third parties to ensure they will protect your personal data using similar standards and safeguards as we have. We will also have contractual provisions in place with such third parties to ensure your personal data is protected. Such contractual provisions will be based on the standard contractual clauses approved by the European Commission for the transfer of data outside the EEA or such other appropriate standards as are required from time to time by the European Commission or the UK Government. You consent to the transfer of your personal data outside of the EEA, as long as we comply with these requirements.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not always secure. Although we will do our best to protect your personal data, and we will maintain appropriate technical and organisational measures to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
5.0 Storage and deletion or removal of personal data
(a) Any personal data that we process for the above purposes will be deleted. Where this is not possible, it will not be kept for longer than is necessary. In those circumstances it will be removed from our live systems once we have completed the purpose for which we were processing the personal data. Your personal data and those of service users will then be put beyond use, and subject to clauses (b) and (c) below we will ensure:
(i) We will not be able (or attempt) to use the personal data to inform any decision in respect of any individual or in a manner that affects the individual in any way;
(ii) We will not give any other organisation access to the personal data;
(iii) We will surround the personal data with appropriate technical and organisational security; and
(iv) We commit to permanent deletion of the information if, or when, this becomes possible.
The purpose for which we are processing your personal data will last for a considerable period, (for example, if a child is a long term user, we will need to store their data up to the time the child reaches 21 years of age).
(b) We will determine the period for which we need to retain your data, acting reasonably, and taking into consideration a number of factors such as your relationship with us, your engagement with us, and the fulfilment of contracts/placements we have with you.
(c) We may need to retain your personal data where this is necessary to comply with our legal or regulatory obligations, or to protect the vital interest or the vital interests of another natural person, such as a child in our care.
6.0 Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7.0 Your rights
7.1 Under data protection laws you have the following fundamental rights:
(a) The right to access the personal data we hold about you;
(b) The right to have your personal data corrected if there are errors or inaccuracies in it, or your personal data is incomplete;
(c) The right to restrict the processing we carry out in relation to your personal data;
(d) The right to object to the processing we carry out in relation to your personal data;
(e) The right to have the personal data we hold about you provided to you in a useable format;
(f) The right to complain to a supervisory authority (in the UK this is the Information Commissioner’s Office) about how and/or why we are processing your personal data;
(g) The right to tell us you no longer consent to us processing your personal data. In practice you will usually agree in advance to us using your personal data for marketing purposes (unless you have already been a recipient of marketing material) and if you no longer wish us to use your personal data for marketing purposes, you can opt out of receiving such marketing messages at any time. You can do this either by unsubscribing from the marketing messages we send you, or notifying us.
7.2 You can ask us to provide you with details of any personal data we hold about you or your child. You do not have to pay us a fee to access your personal data unless we believe your access request is unfounded, repetitive or excessive. In this case we may charge you a reasonable fee to access your personal data or we may decide not to comply with your request. We will notify you if this is the case. We will require you to provide appropriate evidence of your identity before we respond to your request. Typically this identification evidence will be a photocopy of your passport or photo driving license, which a solicitor or bank has certified as being a true copy of the original and a copy of a recent utility bill detailing your current address.
7.3 If your personal data has been put beyond use, and the appropriate safeguards listed in 5. (a) (i) – (iv) have been put in place, you will not be able to have access to your personal information.
7.3 Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
7.4 If you think that any of the data we hold about you is incorrect or inaccurate, you can contact us to correct such data. Please contact us at (info@snugglesdaynursery.co.uk) for these purposes.
8.0 Changes to our privacy policy
Any changes we make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.
9.0 Information about us
This privacy policy relates to Snuggles Nursery, which is a privately owned company. Our trading address and our main place of business is at 1A Church Avenue, Bangor, Co. Down, BT20 3EQ and operates the following websites (www.snugglesdaynursery.co.uk ). You can contact us by phone 02891 272 900 or by email at: info@snugglesdaynursery.co.uk, or by post using the address as above.
Our data protection officer can be contacted at: info@snugglesdaynursery.co.uk or using the postal address below.
10.0 Any questions?
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to:
The Manager
Snuggles Day Nursery
1A Church Avenue
Bangor
County Down
Northern Ireland
BT20 3EQ