Privacy Policy

Last updated: TODO: set publish date

1. Who we are

Rainbow Kindergarten Limited(“we”, “us”, “our”) is a day nursery and out-of-school care provider at 15 Bowmandale, Barton-upon-Humber, North Lincolnshire, DN18 5LR. We are a company registered in England and Wales, company number 03963926, and we are the data controller for the information described below.

For any question about your data, contact us at hello@rainbowkindergarten.co.uk or on 01652 660362. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA088798 (Tier 1).

2. The information we collect

When you enquire through our website: your name, email address, phone number, and whatever you write in your message.

When you register and book through our booking system:your contact details as a parent or carer; your child’s details (name, date of birth, and class or year group); any medical, allergy or dietary information you give us so we can care for your child safely; your bookings and your child’s attendance; the consents you give us; and records of payments. We do not see or store your card details. Card payments are handled by our payment provider (see section 5).

3. How we use your information, and our lawful bases

We use your information to respond to enquiries, to provide and manage childcare places, to keep your child safe while in our care, to take payment, to communicate with you about bookings, and to meet our legal and regulatory duties as a childcare provider.

Our lawful bases under UK GDPR are: performing our contract with you (to provide childcare and process bookings); complying with our legal obligations (including safeguarding and our duties as an Ofsted-registered provider); our legitimate interests (running the nursery efficiently and keeping records); and your consent where we ask for it.

Health, allergy and medical information is “special category” data. We process it on the basis of your explicit consent and to protect your child’s vital interests, and we handle it with particular care.

4. Children’s information

We take special care with children’s data. We collect only what we need to provide care safely, we limit who can see it to the staff who need it, medical and allergy information is access-restricted, and we do not use children’s information for marketing.

5. Who we share your information with

We share your information only where necessary to run the service:

• Our payment provider (Stripe) processes card payments securely. We never store your card number.
• Our email provider (Resend) delivers enquiry messages and booking emails on our behalf.
• Our website hosting provider (Vercel)stores the site’s data securely on our behalf.
• Your child’s school, where relevant, receives the day’s attendance register for out-of-school care so children are accounted for.
• Ofsted, the local authority, and safeguarding partners where we are legally required to share information to keep a child safe.

We do not sell your information to anyone.

6. Where your information is stored

Some of our providers process data outside the UK. Where that is the case, appropriate safeguards are in place as required by UK data protection law.

7. How long we keep it

• Website enquiry emails: up to 12 months.
• Booking and financial records: 6 years, for tax purposes.
• Children’s care and attendance records: in line with the Early Years Foundation Stage.
• Safeguarding records: retained longer where the law requires.

When information is no longer needed, we delete it securely.

8. Keeping your information secure

We protect your information with access controls, encryption in transit, and role-based restrictions so staff see only what they need. Payment card data is handled entirely by our payment provider.

9. Your rights

Under UK GDPR you have the right to ask us for a copy of your information, to have it corrected, to have it erased in certain circumstances, to restrict or object to how we use it, to data portability, and to withdraw any consent you have given. To exercise any of these, contact us using the details in section 1.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would ask you to raise it with us first so we can put it right.

10. Cookies

Our website does not use analytics or advertising cookies. See our Cookies notice for detail.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

12. Contact us

Rainbow Kindergarten Limited, 15 Bowmandale, Barton-upon-Humber, North Lincolnshire, DN18 5LR. hello@rainbowkindergarten.co.uk · 01652 660362.