GDPR Privacy Notice

ROCK A TOTS DAY (UK) Ltd
Company Number: 08842955 12215316

1. Introduction
Welcome to the website of ROCK A TOTS (UK) Ltd (“we,” “us,” or “our”). By accessing or using this website, you agree to comply with these Terms & Conditions. If you do not agree, please do not use our website.

2. What Personal Data Do We Collect?
We may collect and process the following types of personal data:

  • Children’s Information: Name, date of birth, health records, dietary requirements, emergency contacts, and attendance records.
  • Parent/Guardian Information: Name, address, contact details, relationship to the child.
  • Financial Information: Payment details for fees and funding.
  • Staff Information: Employment records, DBS checks, qualifications, and emergency contact details.
  • Website Usage Data: IP addresses, cookies, and analytics data.

3. How Do We Collect Your Data?
We collect data in various ways, including:

  • Registration forms completed by parents/guardians.
  • Direct communication via phone, email, or in person.
  • Observation records maintained for the child’s development.
  • Employment applications and staff records.
  • Website interactions through cookies and analytics tools.

4. Why Do We Collect Your Data?
We process personal data for the following purposes:

  • To provide childcare services and ensure the welfare of children.
  • To comply with legal and regulatory obligations (e.g., safeguarding requirements).
  • To manage nursery admissions and financial transactions.
  • To communicate with parents, guardians, and staff.
  • To monitor and improve our services.

5. Legal Basis for Processing Data
We process personal data under the following legal bases:

  • Contractual Necessity: To fulfil agreements with parents/guardians.
  • Legal Obligation: Compliance with safeguarding, health, and safety regulations.
  • Legitimate Interests: For operational and administrative purposes.
  • Consent: Where required, such as marketing communications.
  • Vital interests: where necessary to protect someone’s life.

6. Data Sharing and Third Parties
We may share personal data with:

  • Regulatory authorities such as Ofsted and local councils.
  • Health professionals (e.g., in case of medical emergencies).
  • Third-party service providers for administrative and financial purposes.
  • Law enforcement agencies where required by law.

7. How Do We Protect Your Data?
We implement appropriate security measures to prevent unauthorised access, loss,
or misuse of data, including:

  • Secure storage of paper records.
  • Encrypted digital data storage.
  • Restricted access to authorised personnel only.

8. How Long Do We Retain Your Data?
We retain personal data in accordance with legal requirements:

  • Childcare records: 21 years and 3 months after the child leaves the nursery.
  • Financial records: 6 years for accounting and tax purposes.
  • Employee records: 7 years after employment ends.

9. Your Rights Under GDPR
You have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Request corrections to inaccurate data.
  • Erasure: Request deletion of data under certain circumstances.
  • Restriction: Request limitations on data processing.
  • Objection: Object to data processing for specific reasons.
  • Data Portability: Request data in a transferable format.
  • To exercise your rights, please contact us at Anne-Marie@rockatotsuk.com

10. Contact Information
For any questions or concerns about this Privacy Notice, please contact: ROCK A TOTS (UK) Ltd, 30 Moorlands Rd, West Moors, Ferndown BH22 0JW.

Anne-Marie@rockatotsuk.com
01202 978899

11. Updates to This Privacy Notice
We may update this notice periodically.