Sunshine Nursery (Owned and Operated by Geesec Limited)
Last Updated: December 2025
1. Introduction
Sunshine Nursery ("we", "us", or "our") is committed to protecting the privacy and security of the personal data we collect about children, parents/carers, and our staff. This policy explains how we collect, use, disclose, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Geesec Limited is the Data Controller for all personal information processed by Sunshine Nursery.
2. Information We Collect
To provide high-quality childcare and meet our legal obligations under the Early Years Foundation Stage (EYFS) framework, we must collect specific information.
2.1 Information about Children:
- Full name, date of birth, and gender.
- Home address.
- Health and medical requirements (allergies, dietary needs, immunisation records).
- Developmental records and observations (Learning Journeys).
- Attendance records.
- Safeguarding and child protection reports (where applicable).
- Images or videos for educational observations (subject to specific consent).
2.2 Information about Parents/Carers:
- Full name and contact details (telephone, email).
- Relationship to the child.
- National Insurance numbers (for funding eligibility checks).
- Financial information for fee processing.
- Emergency contact details.
2.3 Information about Staff:
- Name, address, and contact details.
- Recruitment information (DBS checks, references, employment history).
- Payroll information (bank details, tax status, pension).
- Performance and training records.
3. How We Use Your Information
We process personal data for the following purposes:
- Contractual Necessity: To fulfil our agreement to provide childcare services.
- Legal Obligation: To comply with the EYFS framework, Ofsted regulations, and Safeguarding legislation.
- Vital Interests: To protect the health and safety of children in emergencies.
- Legitimate Interests: For the effective management and administration of the nursery.
- Consent: Where you have provided explicit permission (e.g. for use of photos on social media).
4. Data Sharing
We do not sell your data. We only share information with third parties when legally required or necessary for operations:
- Local Authorities: For the processing of government-funded childcare hours.
- Ofsted: For regulatory inspections and compliance.
- Health Professionals: When necessary for the child's well-being.
- Emergency Services: In the event of an immediate medical or safety risk.
- School Partners: As we are located within Thamesview Primary School, we may share limited information with the school regarding wrap-around care (Breakfast and After School Clubs).
5. Data Retention
We retain personal data only for as long as necessary:
- Children's Records: Most records are kept for 3 years after the child leaves the nursery.
- Safeguarding Records: These may be kept until the child reaches age 25 in accordance with statutory limitations.
- Financial Records: Kept for 6 years for tax and audit purposes.
- Staff Records: Kept for 6 years following the termination of employment.
6. Data Security
We implement robust technical and organisational measures to protect your data, including:
- Secure, password-protected digital storage for learning journals and staff files.
- Locked cabinets for physical records.
- Restricting access to sensitive data to authorised personnel only.
- Strict "No Personal Mobile Phone" policies in childcare areas.
7. Your Rights
Under UK Data Protection law, you have the following rights:
- The Right to be Informed: Transparent information about how we use your data.
- The Right of Access: You can request a copy of the data we hold about you (Subject Access Request).
- The Right to Rectification: You can ask us to correct inaccurate information.
- The Right to Erasure: In certain circumstances, you can ask us to delete your data.
- The Right to Object: You can object to processing based on legitimate interests.
8. Cookies and Website
If you interact with us via our digital platforms, we may use cookies to improve your experience. Our website policy ensures that no sensitive personal data is collected via cookies without your consent.
9. Contact Us
If you have any questions about this policy or how we handle your data, please contact our Data Protection Lead:
Jamie Ahinasi-Blondy
Email: jamie.ahinasi-blondy@geesecltd.com
Address: Sunshine Childcare Services, Thamesview Primary School, Bloors Ln, Rainham, Gillingham, ME8 7DX.
10. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Sunshine Nursery is a trading name of Geesec Limited.