Last Updated: June 2026
Adventurers Day Nursery Ltd
Email: adventurersdaynursery@hotmail.co.uk
01904 628 060
Adventurers Day Nursery Ltd ("we", "us", "our") is a day nursery providing childcare and early years education to children from birth to eight years, based in Fulford, York. We are the data controller for the personal information we collect and use in connection with our nursery services and this website.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we may share it with, and your rights in relation to it. It applies to:
Parents, carers, and guardians who enquire about or use our nursery services
Children enrolled at the nursery
Visitors to our website (www.adventurersdaynursery.co.uk)
Prospective and current members of staff
Any other individuals whose personal data we process
We take your privacy seriously and are committed to handling your personal data in accordance with:
The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
The Privacy and Electronic Communications Regulations 2003 (PECR)
Any other applicable UK data protection legislation
Under UK GDPR, we must have a lawful basis for processing your personal data. We explain the lawful basis we rely on for each category of processing in Section 5 below.
3.1 Information about parents, carers, and guardians
When you enquire about or register your child at our nursery, or when you contact us through our website, we may collect:
Full name and contact details (address, telephone number, email address)
Relationship to the child
Emergency contact information
Financial information needed to process fee payments (bank details, details of any Government funding entitlement)
Any other information you choose to provide us
3.2 Information about children
To provide childcare services and meet our legal and regulatory obligations, we collect information about the children in our care, including:
Full name and date of birth
Home address
GP details
Medical information including allergies, dietary requirements, health conditions, and medication
Details of any special educational needs or disabilities
Emergency contact details
Ofsted eligibility information and any relevant court orders or legal arrangements
Photographs for developmental records and learning journeys
Accident and incident records
Some of this information (for example, health data and details of special educational needs) is classed as special category data under UK GDPR. We handle it with additional care and only process it where we have a specific lawful basis to do so (see Section 5).
3.3 Website visitors
When you visit our website we may collect:
Technical data such as browser type, device type, and pages visited
Information you submit through our online contact and enquiry form (name, telephone number, email address, and message)
Please also see our separate Cookie Policy for details of the cookies we use on our website.
3.4 Staff and job applicants
We maintain a separate Staff Privacy Notice which is provided to all employees and job applicants. If you would like a copy, please contact us using the details at the top of this policy.
We collect personal data in the following ways:
Directly from you — when you complete our registration or enquiry forms, contact us by telephone, email, or through our website contact form, or in person during a nursery visit
From third parties — such as the Department for Education (for Government funding eligibility), NHS or healthcare providers (where relevant to a child's health needs), or other childcare providers (where a child transfers to or from another setting)
Automatically — through our website using cookies and similar technologies (see our Cookie Policy)
The below sets out the purposes for which we use your personal data and the lawful basis under UK GDPR that we rely on:
Providing childcare and early years education
Managing enrolment, attendance, and fees
Maintaining children's developmental records and learning journeys
Administering children's health, dietary, and medical needs
Safeguarding and child protection
Meeting Ofsted and regulatory requirements
Responding to enquiries via the website contact form or by telephone/email
Taking photographs or video for learning journals (with consent)
Sharing updates or newsletters about nursery activities (with consent)
Improving our website and services
We do not sell, rent, or trade your personal data. We may share it only where necessary, with:
Government bodies and regulators — including Ofsted, the Department for Education, HMRC (for childcare funding purposes), and the local authority
Healthcare providers — including your child's GP, NHS services, or health visitors, where relevant to your child's care
Local authority children's services — in connection with safeguarding obligations or Government-funded childcare entitlements
Emergency services — where there is an immediate risk to life
Except as described above, we will not disclose your personal information to any third party without your consent.
We store personal data on servers within the United Kingdom and we do not routinely transfer personal data outside the UK.
Please note that our website uses Google Maps (an embedded map on the Contact page) and may use Facebook social media links. These services are operated by US-based companies. Any data processed in connection with your use of these third-party services is governed by the respective companies' own privacy policies. We recommend reviewing Google's Privacy Policy and Meta's Privacy Policy for further information.
We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with any legal or regulatory retention requirements. If you would like to know how long we retain your information please contact us directly and we will share that with you.
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, or destruction. These include:
Secure password-protected systems and access controls
Restricting access to personal data to staff members who need it to carry out their duties
Regular staff training on data protection and safeguarding
Physical security measures at our nursery premises
Our website is hosted on Microsoft Azure, which provides industry-standard security infrastructure
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform affected individuals without undue delay.
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit our website. We use cookies to:
Enable the website to function correctly (strictly necessary cookies)
Understand how visitors use our website so we can improve it (analytics cookies)
Please refer to our separate Cookie Policy for full details of the cookies we use, how long they last, and how you can manage or refuse them. You can access the Cookie Policy here.
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access — you can request a copy of the personal data we hold about you (known as a Subject Access Request).
Right to rectification — you can ask us to correct any inaccurate or incomplete personal data.
Right to erasure — in certain circumstances you can ask us to delete your personal data ('right to be forgotten').
Right to restriction of processing — you can ask us to limit how we use your personal data in certain circumstances.
Right to data portability — you can ask us to provide your personal data in a structured, commonly used, machine-readable format.
Right to object — you can object to our processing of your personal data where we rely on legitimate interests as our lawful basis.
Rights in relation to automated decision-making and profiling — we do not make automated decisions about you that have a legal or similarly significant effect.
Right to withdraw consent — where we rely on your consent to process personal data (for example, for photographs or marketing), you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before you withdrew consent.
To exercise any of these rights, please contact us using the details at the top of this policy. We will respond within one month. In complex cases, we may extend this by a further two months, in which case we will let you know.
We may need to verify your identity before actioning any request.
Our website may contain links to third-party websites, including our Facebook page. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies. This Privacy Policy applies only to our own website and services.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make significant changes, we will update the 'Last updated' date at the top of this document.
We encourage you to review this policy periodically. If you have any questions about changes, please contact us.
If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us: adventurersdaynursery@hotmail.co.uk
