Privacy Policy

To comply with the UK General Data Protection Regulation (GDPR), we have created a new
Privacy Notice to inform you on how we use and protect your information.
We are not changing the ways we use your personal information. The notice is being shared
to inform you of your increased rights concerning the information held about you, including
what information we collect about parents, carers, and their children, how we use it, and the
legal grounds for this.
We are registered with the ICO under the Registered name Glenangels Childcare Limited.
We are the controller of your personal data. For more information on controllers and their
responsibilities, please see Key data protection terms you need to know.
This privacy notice tells you what we expect to do with your personal information.

• Contact details
• What information do we collect, use, and why
• Lawful bases and data protection rights
• Where do we get personal information from
• How long do we keep information
• Who we share information with
• How to complain
  Contact details
  Post: Glen Anton, Horsley Road, Downside, COBHAM, Surrey, KT11 3JZ, GB
  Telephone: 01932867990
  Email: caroline@glenangels.co.uk
  What information do we collect, use, and why
  How we use parents, carers and children’s information
  All information that we collect is necessary to meet our contractual and legal requirements as
  an Early Years Setting, as mandated by Ofsted, Local Authorities, and the EYFS. The
  categories of information that we collect, hold, and share include:

9 June 2025

• Personal information (such as name, date of birth and address)
• Characteristics (such as ethnicity, language, nationality, country of birth and funding
  eligibility) for children
• Attendance information (such as sessions attended, number of absences and absence
  reasons) for children
• Relevant Medical information for children
• Special Educational Needs information for children
• Assessment information for children
• Adult Bank Details and NI Numbers
• Proof of identity for children (Birth Certificates/Passport)
• Adults contact details
• Details of any accidents/incidents / existing injuries
• Relevant documentation for child protection and safeguarding concerns
• Funding information and details
• Photographs of children for learning journals

Why do we collect and use this information
We use the data:

• to support children’s learning
• to monitor and report on their progress
• to provide appropriate pastoral care
• to assess the quality of our services
• to comply with the law regarding data sharing
• to comply with the requirements of the Early Years Foundation Stage Statutory
  Requirements and Ofsted
• to ensure children are eligible for funding
• to process nursery fees
• to ensure children’s health, safety and wellbeing
  •

Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your
personal information. There is a list of possible lawful bases in the UK GDPR. You can find
out more about lawful bases on the ICO’s website.
The lawful basis we rely on may affect your data protection rights, which are outlined briefly
below. You can find out more about your data protection rights and the exemptions which
may apply on the ICO’s website:
We collect and use children’s information under the Statutory Framework for the Early Years
Foundation Stage (given legal force by the Childcare Act 2006), and the Limitation Act 1980.
By completing and signing the nursery registration form, you are giving consent for us to
process your and your child’s data for the specific purposes of being part of the nursery

9 June 2025
setting. The processing of the information you have provided about yourself and your child is
necessary for the contract you have completed in the registration form. We have a legal
obligation to process the information provided, and we comply with all applicable laws.
Collecting Children’s Information
Whilst most of the information you provide about the children is mandatory, some of it is
provided to us voluntarily. To comply with the General Data Protection Regulation, we will
inform you whether you are required to provide certain information to us or if you have a
choice in this.
Storing children’s data
We hold children’s data securely. Paper records are kept in a locked office, and digital data is
on password-protected devices. A secure web platform hosts online learning journals. Data is
retained for as long as necessary, depending on the type of data. This could be between 3
years after the child leaves the setting and up to the child’s 21st birthday (or 24 years
regarding child protection). Learning and assessment will be kept for 3 months after the child
leaves.

Who we share information with

• Our local authority- Funding Team
• Schools that the children attend after leaving us
• Ofsted
• Health Visitors
• Social Workers
• Inclusion teams, SEN panels, funding, etc
• Local Children’s Safeguarding Boards / LADO
• Other providers that children attend
• Multi agency professionals working with individual children
• Area SENCO’s

Why do we share children’s information
We only share children’s information with their consent, or as required by law or in the
course of a lawful investigation.

How to complain
You also have the right to:

• object to the processing of personal data that is likely to cause, or is causing, damage
  or distress
• prevent processing for direct marketing
• Object to decisions being taken by automated means

9 June 2025

• in certain circumstances, have inaccurate personal data rectified, blocked, erased or
  destroyed; and claim compensation for damages caused by a breach of the General
  Data Protection Regulations

Data Protection regulations
If you have a concern about the way we are collecting or using your data, we request that you
raise your concern with us in the first instance at caroline@glenangels.co.uk
Alternatively, you can contact the Information Commissioner’s Office
at https://ico.org.uk/concerns/
If you have any concerns about our use of your personal data, you can make a complaint to us
using the contact details at the top of this privacy notice.

Compliance Officer
GDPR Compliance Officer Caroline Deanna Betancourth
Contact
If you would like to discuss anything in this privacy notice, please get in touch with our
Compliance Officer at caroline@glenangels.co.uk or on 01932867990
If you remain unhappy with how we’ve used your data after raising a complaint with us, you
can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated 09 June 2025