Privacy Policy
Everlasting Joy Day Nursery School
Effective Date: 2 August 2026
Introduction
Everlasting Joy Day Nursery School (“we”, “us”, “our”) is committed to protecting the privacy and personal data of the children in our care, their parents/carers, and our staff. This policy explains how we collect, use, store, and share personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Everlasting Joy Day Nursery School is the data controller. If you have any questions about this policy or how we handle personal data, please get in touch with our Data Protection Lead at the nursery.
What Personal Data We Collect
We may collect and process the following information:
Children:
Full name, date of birth, and gender
Home address and emergency contact details
Medical information, allergies, and dietary requirements
Development records and learning journals (in line with the EYFS framework)
Photographs and videos for learning documentation
Attendance records
Details of any special educational needs or disabilities (SEND)
Parents/Carers:
Full name, address, and contact details (phone, email)
Relationship to the child
National Insurance number or payment details (for billing purposes)
Employer details (where relevant)
Staff:
Employment records, qualifications, and DBS check information
Emergency contact details
Health information relevant to their role
Why We Collect Personal Data (Lawful Basis)
We process personal data for the following purposes:
To provide safe, high-quality childcare and education under the EYFS
To fulfil our legal obligations (e.g. Ofsted registration, safeguarding, health and safety)
To manage admissions, fees, and funding claims
To communicate with parents/carers about their child’s progress and nursery updates
To manage staff employment and training
Our lawful bases for processing include: legal obligation, contract, legitimate interests, and where necessary, explicit consent.
How We Store and Protect Data
Personal data is stored securely, whether in physical (locked cabinets) or digital format (password-protected systems)
Access to personal data is restricted to authorised staff on a need-to-know basis
Staff receive regular training on data protection and confidentiality
We carry out regular reviews of our data security measures
Who We Share Data With
We may share personal data with:
Ofsted (during inspections)
Local authority (for funding and safeguarding purposes)
Health professionals (with parental consent or where safeguarding requires it)
Schools (during transition, with parental consent)
HMRC and payroll providers (staff data)
We will never sell personal data to third parties or share it without a lawful reason.
Photographs and Videos
We use photographs and videos to document children’s learning and development in line with the EYFS. Written consent is obtained from parents/carers before any images are taken. Parents may withdraw consent at any time.
Images are stored securely and are not shared on social media or external platforms without explicit consent.
Retention of Data
We retain personal data only for as long as necessary:
Children’s records: retained until the child reaches age 25 (or 35 for safeguarding records)
Staff records: retained for 6 years after employment ends
Financial records: retained for 7 years
Data is securely destroyed once the retention period has expired.
Your Rights
Under the UK GDPR, you have the right to:
Access the personal data we hold about you or your child
Request correction of inaccurate data
Request deletion of data (where there is no legal obligation to retain it)
Object to or restrict processing in certain circumstances
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please get in touch with us in writing.
Changes to This Policy
We may update this policy from time to time. Parents/carers and staff will be notified of any significant changes.
Contact Us
If you have any questions or concerns about this Privacy Policy, please contact:
Everlasting Joy Day Nursery School
St Michael and All Angels Church
Champion Crescent
London SE26 4HH
0204 642 1785
07940561530
info@everlastingjoydaynursery.com
www.everlastingjoydaynursery.com
Alternatively, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk if you are not satisfied with our response.