ROCK A TOTS DAY NURSERY LIMITED (UK) Ltd
Company Number: 08842955 12215316

1. Introduction
ROCK A TOTS (UK) Ltd (“we,””our,””us”) is committed to protecting and respecting your privacy. This Privacy Notice outlines how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

2. What Personal Data Do We Collect?
We may collect and process the following types of personal data:

• Children’s Information: Name, date of birth, health records, dietary requirements, emergency contacts, and attendance records.
• Parent/Guardian Information: Name, address, contact details, relationship to the child.
• Financial Information: Payment details for fees and funding.
• Staff Information: Employment records, DBS checks, qualifications, and emergency contact details.
• Website Usage Data: IP addresses, cookies, and analytics data.

3. How Do We Collect Your Data?
We collect data in various ways, including:

• Registration forms completed by parents/guardians.
• Direct communication via phone, email, or in person.
• Observation records maintained for the child’s development.
• Employment applications and staff records.
• Website interactions through cookies and analytics tools.

4. Why Do We Collect Your Data?
We process personal data for the following purposes:

• To provide childcare services and ensure the welfare of children.
• To comply with legal and regulatory obligations (e.g., safeguarding requirements).
• To manage nursery admissions and financial transactions.
• To communicate with parents, guardians, and staff.
• To monitor and improve our services.

5. Legal Basis for Processing Data
We process personal data under the following legal bases:

• Contractual Necessity: To fulfil agreements with parents/guardians.
• Legal Obligation: Compliance with safeguarding, health, and safety regulations.
• Legitimate Interests: For operational and administrative purposes.
• Consent: Where required, such as marketing communications.
• Vital interests: where necessary to protect someone’s life.

6. Data Sharing and Third Parties
We may share personal data with:

• Regulatory authorities such as Ofsted and local councils.
• Health professionals (e.g., in case of medical emergencies).
• Third-party service providers for administrative and financial purposes.
• Law enforcement agencies where required by law.

7. How Do We Protect Your Data?
We implement appropriate security measures to prevent unauthorised access, loss,
or misuse of data, including:

• Secure storage of paper records.
• Encrypted digital data storage.
• Restricted access to authorised personnel only.

8. How Long Do We Retain Your Data?
We retain personal data in accordance with legal requirements:

• Childcare records: 21 years and 3 months after the child leaves the nursery.
• Financial records: 6 years for accounting and tax purposes.
• Employee records: 7 years after employment ends.

9. Your Rights Under GDPR
You have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request corrections to inaccurate data.
• Erasure: Request deletion of data under certain circumstances.
• Restriction: Request limitations on data processing.
• Objection: Object to data processing for specific reasons.
• Data Portability: Request data in a transferable format.
• To exercise your rights, please contact us at Anne-Marie@rockatotsuk.com

10. Contact Information
For any questions or concerns about this Privacy Notice, please contact: ROCK A TOTS (UK) LTD, 30 Moorlands Rd, West Moors, Ferndown BH22 0JW
Anne-Marie@rockatotsuk.com
01202 978899

11. Updates to This Privacy Notice
We may update this notice periodically.