Privacy Policy for Jack and Jill’s Day Nursery

Effective Date: 03/05/26

Jack and Jill’s Day Nursery (“we”, “our”, “us”) is committed to protecting your privacy. This policy outlines how we collect, use, and protect personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. Who We Are

Jack and Jill’s Day Nursery is a registered childcare provider based in Hemel Hempstead. We provide early years education and care services for children aged 0–5 years.

Contact: enquiries@jackandjillsdaynursery.co.uk
Address: Buncefield Lane, Hemel Hempstead, HP2 7HY

  1. What Data We Collect

We may collect and process the following categories of personal data:

For Parents and Guardians:

  • Full name, contact details, and address
  • Emergency contacts
  • Payment and billing information

For Children:

  • Full name and date of birth
  • Medical and allergy information
  • Ethnicity, religion, and language (where provided)
  • Developmental records and observations

Website Visitors:

  • Name and email via contact forms
  • Cookie and usage data (e.g., browser type, pages visited)
  1. How We Use Your Data

We use personal data for the following purposes:

  • To provide early years childcare and education
  • To communicate with parents and guardians
  • For safeguarding and health and safety purposes
  • For billing and payment processing
  • To fulfil legal and regulatory obligations (e.g., Ofsted, HMRC)
  • To improve our website and services
  1. Lawful Basis for Processing

We process data under the following lawful bases:

  • Contract – to provide childcare services
  • Legal obligation – to comply with our regulatory duties
  • Vital interests – for safeguarding and emergency medical care
  • Legitimate interests – to manage our nursery operations
  • Consent – for optional data uses (e.g., marketing or photos)
  1. Sharing Data

We may share your data with:

  • Ofsted or other regulatory bodies
  • Local authorities (e.g., for funding or safeguarding)
  • Emergency services, if necessary
  • Software providers (e.g., nursery management systems) – all GDPR-compliant

We never sell personal data.

  1. Retention Periods

We retain data only as long as necessary:

  • Child records: up to 3 years after leaving (or longer if required)
  • Accident or safeguarding records: up to 21 years
  • Financial records: 6 years
  1. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Contact the ICO: https://ico.org.uk/

  1. Security Measures

We take appropriate steps to protect all data, including secure physical storage, password-protected systems, and staff training.

  1. Cookies

Our website may use cookies to improve functionality. You can manage or block cookies in your browser settings.

  1. Updates

We may update this policy from time to time. Please check back for any changes.

For questions about this policy or to exercise your rights, please contact:


Jack and Jill’s Day Nursery
Contact: maxey@jackandjills.co.uk
Address: West End Rd, Maxey, Peterborough, PE6 9HA