Privacy Policy

1. Introduction

Radiant Catalyst Nursery ("RCN," "we," "our," or "us") is committed to protecting the privacy and security of the personal data we collect from parents, guardians, children, employees, and other stakeholders. This privacy policy explains how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, enrolling a child in our nursery, or interacting with us, you agree to the terms outlined in this policy.

2. Data We Collect

We collect various types of personal data to ensure the safety and well-being of children and to comply with legal and regulatory requirements. The categories of data we collect include:

2.1 Parents/Guardians:

• Full name, address, email, and phone number
• Emergency contact details
• Relationship to the child
• Financial information (for billing and payment processing)
• Identification documents (where legally required)

2.2 Children:

• Full name, date of birth, and gender
• Medical history, allergies, and dietary requirements
• Immunisation records and health information
• Learning progress, behavioural reports, and attendance records
• Special educational needs (if applicable)

2.3 Employees and Staff:

• Full name, contact details, and identification documents
• Employment history, references, and background checks (including DBS checks)
• Qualifications, training records, and payroll information
• Emergency contact details

3. How We Use Personal Data

We use the data collected for the following purposes:

• Childcare Services: To provide safe and high-quality childcare services, including education, welfare, and developmental support.
• Communication: To contact parents and guardians regarding a child's progress, health, emergencies, or administrative matters.
• Legal & Regulatory Compliance: To comply with safeguarding laws, health and safety regulations, and childcare legislation.
• Billing & Payments: To process invoices, manage fees, and handle payment transactions.
• Security & Safety: To ensure the well-being and protection of children, staff, and visitors at our premises.
• Employment & HR Management: To recruit, manage, and retain staff members in compliance with employment laws.

4. Legal Basis for Processing Personal Data

Under the UK GDPR, we rely on the following lawful bases for processing personal data:

• Contractual Obligation: When processing is necessary for the provision of childcare services.
• Legal Obligation: When required to comply with legal or regulatory obligations (e.g., safeguarding laws, tax regulations).
• Legitimate Interests: When processing is required for the smooth operation of RCN, including communication, record-keeping, and security.
• Consent: When explicit permission is required, such as for marketing communications or special categories of data.

5. Data Sharing & Third Parties

We do not sell, rent, or trade personal data. However, we may share information with the following third parties when necessary:

• Regulatory Authorities: Local authorities, Ofsted, and safeguarding agencies where legally required.
• Healthcare Providers: Medical professionals in case of emergencies.
• Payment Processors: Secure financial institutions for billing purposes.
• IT & Cloud Service Providers: To securely store and manage data.
• Law Enforcement Agencies: If required by law for investigations or legal proceedings.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. The retention periods include:

• Children's records: Retained for at least three years after the child leaves RCN (as per regulatory requirements).
• Financial records: Retained for six years for tax and accounting compliance.
• Employee records: Retained for six years after employment ends.

7. Data Security Measures

RCN implements strict security measures to safeguard personal data, including:

• Secure access controls and password protection.
• Encryption and firewall protection for digital data.
• Secure storage of physical documents.
• Regular staff training on data protection policies.

8. Your Data Protection Rights

Under the UK GDPR, individuals have the following rights:

• Right to Access: Request a copy of personal data held by RCN.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of personal data, subject to legal limitations.
• Right to Restrict Processing: Limit how data is used under certain circumstances.
• Right to Data Portability: Request transfer of data to another service provider.
• Right to Object: Object to processing of data in certain situations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at radiantcatalystnursery@gmail.com.

9. Cookies & Website Tracking

Our website may use cookies to enhance user experience. Cookies help us:

• Improve website functionality and performance.
• Analyse visitor behaviour for better service delivery.
• Personalise content and advertisements.

Users can manage cookie preferences through their browser settings.

10. Complaints & Contact Information

If you have concerns about how we handle personal data, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

For any data protection queries, contact:

11. Updates to this Policy

RCN reserves the right to update this privacy policy periodically to reflect legal or operational changes. The latest version will always be available on our website.

By engaging with our services, you acknowledge and accept the terms outlined in this Privacy Policy.