At Yalding (Twyford) Preschool we take privacy very seriously and we comply with the standards set by the General Data Protection Regulation (GDPR).
We are registered with the Information Commissioner’s Office (ICO).
The categories of children’s information that we collect, hold and share include:
We also collect, hold and share some information on the children’s parents/guardians:
Why we collect and use this information
We use the children’s and parents’ data to:
The lawful basis on which we use this information
We collect and use children’s information under the following lawful bases:
Collecting children’s information
While most of the children’s information you provide to us is mandatory, some of it is provided to us on a voluntary basis. To comply with the GDPR, we will inform you whether you are required to provide certain children’s information to us or if you have a choice in this.
Storing children’s data
We are required to hold children’s data for a reasonable period of time after children have left the provision (eg until after the next Ofsted inspection) as a requirement under the EYFS. The Limitation Act 1980 recommends that we retain data until the child reaches the age of 21 — or until the child reaches the age of 24 for child protection records.
Your data will be held securely and will only be accessible by staff who are authorised to do so.
Who we share children’s information with
We routinely share children’s information with:
Why we share children’s information
We do not share information about our children with anyone without your consent unless the law and our policies allow us to do so.
We share children’s data with the DfE on a statutory basis. We are required to submit data to our local authority, Kent County Council, for them to submit as part of the annual early years census in January and to access child care funding.
Data collection requirements
To be granted access to children’s information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.
Requesting access to your personal data
Under data protection legislation, parents and children have the right to request access to information about them that we hold. To make a request for your personal information or be given access to your child’s early years record, contact the preschool’s manager.
You also have the right to:
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the ICO.