Privacy policy
How we collect, use and protect personal information about you and your child.
Last updated 27 September 2026
1. Who we are
Tiny Angels Day Nursery Ltd (company number 17071235), 6 Leeland Road, London W13 9HH, is the data controller for the personal information described in this policy. You can contact us about anything in this policy at info@tinyangelsdaynursery.com, on 07909 124072, or by post to the address above.
2. What we collect
When you enquire or join our waiting list
Your name, email address, phone number and postcode; your child’s first name and date of birth or due date; your preferred start date; whether you expect to use funded hours; how you heard about us; and anything you choose to tell us in your message.
When your child has a place with us
- Your child’s full name, date of birth, address and a photo for identification
- Parent and carer contact details, emergency contacts and the people allowed to collect your child, with collection passwords
- Health information, including allergies, dietary needs, medication, immunisations, your GP’s details and any additional needs
- Records of your child’s care and learning, including observations, progress reviews, accident and incident records, and daily records of feeds, sleep and nappy changes
- Information needed for funded hours, such as your eligibility code, National Insurance number and date of birth
- Billing and payment details
- Photos and videos of your child at nursery, only with your consent
Some of this is special category data, such as health information and information about religion or ethnicity where you choose to share it. We handle it with extra care.
3. How and why we use it
We only use personal information when UK data protection law allows it:
- To provide childcare under our contract with you: caring for your child, keeping records, invoicing and communicating with you.
- To meet our legal obligations: the Early Years Foundation Stage (EYFS), Ofsted registration, safeguarding and child protection, health and safety, and early years funding rules.
- To take steps before a contract at your request: answering enquiries and managing our waiting list.
- With your consent: for example, taking photos of your child or sending you news. You can withdraw consent at any time.
- To protect someone’s vital interests: for example, sharing information with medical staff in an emergency.
We use special category data where it is needed to meet our obligations for the health, safety and welfare of children, for safeguarding, or with your explicit consent.
4. Who we share it with
We never sell your information. We only share it when we need to, with:
- Ofsted, as our regulator
- London Borough of Ealing, to claim funded hours and for early years and SEND support
- HMRC, to confirm Tax-Free Childcare and funded-hours eligibility
- Children’s social care, the police or health professionals, where we must for safeguarding or in an emergency
- Trusted service providers who help us run the nursery, such as our website form service, email provider, and childcare management and payment systems. They only process data on our instructions.
Some service providers may store data outside the UK. When they do, we make sure appropriate safeguards are in place, such as UK-approved contract terms.
5. How long we keep it
- Enquiries and waiting list: up to 12 months after your preferred start date, unless your child takes up a place
- Children’s records: for a reasonable period after your child leaves, as required by the EYFS and our insurers
- Accident and incident records: until your child is 21 years and 3 months old
- Safeguarding records: as long as the law and statutory guidance require
- Financial records: 6 years after the end of the financial year they relate to
6. Keeping it safe
Paper records are kept in a locked office. Electronic records are protected by passwords and access is limited to staff who need them. Staff are trained in data protection and confidentiality, and we report serious data breaches to the Information Commissioner’s Office (ICO) where required.
7. Your rights
You have the right to:
- ask for a copy of the information we hold about you or your child
- ask us to correct information that is wrong or incomplete
- ask us to delete information, where we don’t need to keep it by law
- object to, or ask us to restrict, how we use it
- withdraw your consent at any time, where we rely on consent
- ask for information you gave us in a portable format
To use any of these rights, email info@tinyangelsdaynursery.com. We’ll reply within one month. If you’re not happy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
8. Cookies and this website
We ask before setting any non-essential cookies. When you first visit, a banner lets you accept or reject analytics cookies, and you can change your mind at any time using “Cookie settings” at the bottom of every page.
- Analytics cookies (only if you accept): we use Google Analytics to see which pages are visited and how people find us. It sets cookies named
_gaand_ga_*, which last up to 2 years. Google processes this data for us; see Google’s privacy policy. - Your cookie choice: we remember whether you accepted or rejected analytics in your browser’s local storage, so we don’t ask again on every page.
- Google Maps: our map only loads if you choose “Show the map”. Google may then set its own cookies.
- Google Fonts: our fonts load from Google, which means Google receives your device’s IP address. This doesn’t set cookies.
When you submit a form on this website, your details are sent to us through a secure form service and delivered to our email inbox.
9. Changes and contact
We may update this policy from time to time. The date at the top shows when it last changed. If you have any questions, please contact us.
