Privacy policy

1. Who we are

Little Stars Nursery is a day nursery located in Tamworth, Staffordshire. We are the data controller for any personal information you share with us through this website, our waiting list, our contact form, or the parent portal.

If you have questions about this policy or how we handle your data, please contact us.

2. What data we collect

We only collect the information we need to run the nursery and keep you informed.

• Enquiries — name, email address and message when you use our contact form.
• Waiting list — parent or carer name, email, phone number, child’s name, date of birth, preferred start date and any notes you choose to add.
• Parent portal accounts — email address and password (handled securely by our authentication provider), plus your name and phone number stored in your profile.
• Child records — first name, last name, date of birth and class group, stored so we can link updates and photos to the right child.
• Photos and updates — images and stories posted by staff about your child, visible only to you through the parent portal.

3. How we use your data

• To respond to your enquiries and arrange show-arounds.
• To manage the waiting list and offer places when they become available.
• To provide the parent portal — daily updates, photos and news about your child.
• To meet our legal obligations (for example, safeguarding and Ofsted requirements).
• To communicate with you about nursery matters, events or emergencies.

We never sell your personal data and we do not use it for marketing purposes without your explicit consent.

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract — when you accept a place at the nursery, we need your data to fulfil our contract with you.
• Legitimate interest — responding to enquiries and managing the waiting list.
• Legal obligation — safeguarding records, accident books and other statutory requirements.
• Consent — for optional marketing communications or sharing photos publicly (we always ask first).

5. How we store and protect your data

Your data is stored in our secure cloud backend, protected by encryption in transit and at rest. Access to child records and photos is strictly controlled — parents can only see their own child’s updates, and staff access is logged and limited by role.

We retain records for as long as necessary:

• Waiting list entries — until a place is offered or you ask to be removed.
• Contact enquiries — up to 12 months.
• Child records and portal updates — for the duration of attendance plus statutory retention periods.

6. Who we share data with

We do not sell or trade your personal information. We only share data with:

• Our secure backend provider — who hosts our database and authentication system under strict data-processing terms.
• Regulatory bodies — Ofsted, local authority safeguarding teams or HMRC (funded hours), when legally required.
• Emergency services or medical professionals — only when necessary to protect a child’s welfare.

7. Cookies

This site uses a small number of essential cookies to keep you signed in to the parent portal and to protect against security threats. These cookies are strictly necessary and do not track you for advertising or analytics. By using the site, you agree to these essential cookies. For full details, see our Cookie Policy.

8. Your rights

Under UK data-protection law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Ask us to delete your data (where the law allows).
• Restrict or object to certain types of processing.
• Withdraw consent at any time.
• Complain to the Information Commissioner’s Office (ICO).

To exercise any of these rights, please contact us.

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Significant changes will also be communicated to you directly where possible.

10. Contact us

If you have any questions about this privacy policy or how we handle your data, please get in touch: