UK GDPR Compliance

Nottingham Nursery School is committed to protecting the personal data of all individuals in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data we process in our operations as an early education provider.

Scope and Applicability

This compliance page applies to all visitors to our website, parents, guardians, and staff whose personal data we may process in connection with our educational services. Although we do not maintain a user registration system or store personal data in a database, we may collect limited personal data through website analytics, contact forms, and server logs.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to correct any inaccurate or incomplete personal data
Right to erasure – to request deletion of your personal data where there is no compelling reason for its continued processing
Right to restrict processing – to limit how we use your data under certain conditions
Right to data portability – to receive your data in a structured, commonly used format
Right to object – to object to processing based on legitimate interests, including profiling

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

How We Comply

Nottingham Nursery School does not collect personal data through user accounts or databases. Any personal data we process is limited to:

IP addresses and browser information via Google Analytics (anonymised)
Names and email addresses submitted through our contact form
Server logs for security and website performance

We do not sell, share, or profile personal data. All data is stored securely and retained only as long as necessary for the purpose it was collected.

Data We Process

The personal data we may process includes:

Name
Email address
IP address (anonymised)
Device and browsing information (for analytics, aggregated and non-identifiable)

This data is only collected if voluntarily provided through our website contact form or automatically via website analytics tools.

Legal Basis for Processing

Our legal basis for processing personal data is legitimate interest for website functionality, communication, and security. For contact form submissions, we rely on your consent to respond to your inquiry. We do not process special category data (e.g., health, ethnicity, religion).

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly at:

[email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., email used to contact us). We will respond without undue delay.

Response Timeframes

We are required by UK GDPR to respond to your request within one month of receipt. In complex cases, we may extend this period by two further months, and we will inform you of any delay and the reasons.

No Discrimination Policy

We will not treat you unfairly or refuse service because you exercise your rights under UK GDPR. You are free to request access, correction, deletion, or object to processing without consequence.

Updates and Changes

We may update this compliance page from time to time to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.

Contact Information

For any questions, requests, or complaints regarding your data protection rights, please contact:

Fiona Brightly
Second Floor, 11 - 12 Richmond Street South, Saint Kevin's, Dublin 2, Ireland D02 V300
Email: [email protected]

You may also contact the Information Commissioner’s Office at ico.org.uk or by phone: 0303 123 1113.