Privacy Policy
How Little Sunshines Daycare & Pre-School collects, uses and protects your personal information.
Last updated: May 2026
Your Privacy Matters to Us
This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully. If you have any questions, don't hesitate to contact us.
Who We Are
Little Sunshines Daycare & Pre-School is a childcare provider registered in England and Wales, located at Oakley Road, Keston, Bromley, BR2 8HQ. We are the data controller responsible for your personal information. You can contact us at littlesunshinesdaycare@hotmail.com or by calling 07857 416864.
What Information We Collect
We collect personal information from parents, guardians, and children when you enquire about or register for our services. This includes: full names and contact details (address, phone number, email); your child's date of birth, medical history, dietary requirements, allergies and emergency contact information; financial information for billing purposes; photographs and observations as part of your child's learning journey; and information provided through our contact or enquiry forms on this website.
How We Use Your Information
We use your personal information to: provide childcare and early education services to your child; communicate with you about your child's care, progress and any concerns; manage fees, invoices and payment records; comply with our legal obligations including safeguarding duties; send you important updates about the nursery; and respond to enquiries submitted via our website. We will never use your information for purposes unrelated to your child's care without your explicit consent.
Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR: Contract — to fulfil our childcare agreement with you; Legal Obligation — to comply with safeguarding, EYFS and Ofsted regulations; Legitimate Interests — to manage and improve our services; and Consent — for photographs, marketing communications and non-essential communications, which you may withdraw at any time.
Who We Share Your Information With
We may share your information with: Ofsted and relevant local authority bodies for inspection and regulatory compliance; the Bromley Safeguarding Children Partnership where we have a duty of care concern; healthcare professionals or specialists involved in your child's care; government funding bodies to process free entitlement hours; and our IT service providers who support the secure storage of your data. We do not sell your personal information to third parties.
How We Keep Your Data Safe
We take the security of your personal data seriously. All paper records are stored securely on-site with restricted access. Digital records are held on password-protected systems. Our staff are trained in data protection and confidentiality. We use reputable third-party platforms that comply with UK GDPR. We regularly review our security procedures to ensure your data is protected against unauthorised access, loss or disclosure.
How Long We Keep Your Data
We retain children's records for a minimum of three years after they leave our setting, in line with Ofsted requirements and guidance from the Early Years Alliance. Financial records are retained for seven years for tax and legal purposes. CCTV footage (if applicable) is retained for a maximum of 30 days unless required for an investigation. After these periods, data is securely deleted or destroyed.
Cookies & Website Tracking
Our website uses Google Analytics and Google Ads (via Google Tag Manager) to help us understand how visitors use our site and to measure the effectiveness of our advertising. These tools may set cookies on your device that collect anonymised data about your browsing behaviour, including pages visited and time spent on the site. We do not use this data to identify you personally. You can manage cookie preferences through your browser settings at any time. For more information on how Google uses your data, visit google.com/policies/privacy.
Your Rights
Under UK GDPR, you have the right to: access the personal data we hold about you (Subject Access Request); request correction of inaccurate or incomplete data; request deletion of your data where we no longer have a lawful basis to hold it; object to processing based on legitimate interests; withdraw consent at any time where consent is our legal basis; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. To exercise any of these rights, please contact us in writing at the address above.
Contact & Complaints
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: littlesunshinesdaycare@hotmail.com or 07857 416864. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection authority.