How we use children’s information

Lawnswood Childcare is committed to protecting the privacy and security of your personal information. This privacy notice describes how the nursery collects and uses personal information about the children attending nursery and their parents/ guardians. This notice does not form part of any contract to provide service and may be updated at any time. If we do so, an updated copy of this notice will be provided to you as soon as reasonably practical.

The Data Protection Lead with responsibility for monitoring this privacy notice is Heather Morley.

Data Protection Principals

We will fully comply with data protection law. This states that the personal information we hold about you must be;

  1. Used lawfully, fairly and in a transparent way
  2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with that purpose.
  3. Relevant to the purposes we have told you about and limited only to those purposes
  4. Accurate and kept up to date
  5. Kept only as long as necessary and for the purposes we have told you about
  6. Kept securely


Why do we collect and use children’s information?

Lawnswood Childcare Ltd will record, process and keep personal information on you and your child in accordance with the General Data Protection Regulations 2018.

We use this data to:

  • Support children’s learning
  • Make assessments on children’s development
  • Safeguard the children in our care in accordance with relevant legislation
  • Comply with Government legislation
  • Assess the quality of our services
  • Contact you regarding your child
  • To ensure nursery fees are paid
  • For local authority funding purposes

Lawnswood Childcare Ltd collect, hold and share two kinds of records on children attending our setting.

Developmental records

These include:

  • Developmental information collected prior to the child starting at the setting
  • A copy of the child’s Two-Year-Old Progress Check
  • Observations of children in the setting, photographs, video clips, samples of work and developmental assessment records.
  • A summary of the child’s EYFS profile report.

Personal records

These include:

  • Personal details – including the information provided on the child’s registration form and any consent forms and characteristics such as ethnicity, language and nationality.
  • Contractual matters – including the child’s days and times of attendance, a record of the child’s fees and/or funding entitlement, any records of fee reminders and/or disputes
  • Emergency contact details – including those people, other than parents/guardians with authorisation to collect the child from the setting.
  • Children’s health and well-being – including discussions about every day matters regarding the health and well-being of the child with the parent/guardian, records of accidents and medication records.
  • Safeguarding and child protection concerns – including records of all welfare and protection concerns and our resulting actions, meetings and telephone conversations about the child and any information regarding a Looked After Child.
  • Early support and SEN – including any focussed intervention provided by our setting, a record of the child’s IEP and, where relevant, their Statement of Special Education Need.
  • Correspondence and reports – including letters and emails to and from other agencies and any confidential reports relating to specific children


Collecting information

Whilst the majority of information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.

The Early Years Foundation Stage (Welfare Requirements) Regulations 2012 place a legal obligation upon us to collect and process much of the information detailed above. Therefore, we do not require your consent to collect this information as we have a fair and lawful reason for doing so.

We collect personal information about Children and Parents from when the initial enquiry is made by the Parents, through the enrolment process and until the child(ren) stop using the nurseries service. All forms collecting data will clearly state our lawful basis for processing the information you supply and where the request is voluntary or consent is required this will be clearly stated.


Storing children’s data

We ensure that access to children’s files is restricted to those authorised to see them such as the company directors, nursery manager, deputy manager, Designated Safeguarding Officers, the child’s key person and the setting SENCo. These confidential records are stored on site in the nursery office and at the organisation head office. The data you supply is stored on our secure server and/or in paper files.


We will only retain your personal information for as long a necessary to fulfil the purposes we collected it for, including satisfying legal and reporting requirements. Details of retention periods can be found in our Data Retention Policy which is available for you to view at nursery.

We retain children’s records for four years after they have left the setting, except records that relate to an accident, the administering of medication or child protection matters. These are kept until the child reaches the age of 21 years or 24 years respectively.


Sharing information

The information that you provide to us, whether mandatory or voluntary, will be regarded as confidential. We do not share information about your child with anyone without consent, unless required to do so by law, where it is necessary to administer our contractual services to you or where we have another legitimate interest in doing so. We require third parties to respect the security of your data and treat it in accordance with the law.

We routinely share information without consent with:

  • schools that children attend after leaving us
  • our local authority for the purposes of the Early Education Entitlement for 2, 3 and 4-year olds and the Early Years Census
  • the Department for Education (DfE) as part of statutory data collections.
  • Ofsted will be allowed to access the nursery systems and records to ensure we meet the needs of the children, to enable appropriate funding to be received, to report children’s progress at nursery, to review safeguarding and complaint records and to check attendance is recorded.
  • Our insurance provider

We are obliged to share confidential information without authorisation from the person who provided it, or to whom it relates, when:

  • there is evidence that the child is suffering or is at risk of suffering significant harm.
  • There is reasonable cause to believe that a child may be suffering, or is at risk of suffering, significant harm
  • It is to prevent significant harm arising to children, young people or adults, including the prevention, detection and prosecution of serious crime.

Further information regarding information sharing and confidentiality can be found in our policies.


Requesting access to your personal data

Under data protection legislation, parents/guardians, children and young people have the right to request access to information about them that we hold. Where a child is too young to give ‘informed consent’ the parent is the ‘subject’ of the file and has a right to see the information held.

Children’s developmental records are shared regularly with parents/guardians and formal requests to access these is not required.

To make a request for your personal information contact Heather Morley following the procedure detailed in our access to records policy.

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • withdraw consent where given
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
  • claim compensation for damages caused by a breach of the Data Protection regulations

If you would like to discuss anything in this privacy notice, please contact Heather Morley.

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at


Reviewed by signature: