Legal

Privacy Policy

Last updated:

Little Honeybees Childminding is committed to protecting the privacy of the children in our care, their families, and anyone else whose personal data we hold. This policy explains what information we collect, why we collect it, how we use it, and your rights under UK data protection law.

Who we are

Little Honeybees Childminding is operated by me, a registered childminder based in Greenbank, East Bristol. I am registered with Ofsted and operate in accordance with the Early Years Foundation Stage (EYFS) statutory framework.

For the purposes of UK data protection law, I am the data controller. If you have any questions about this policy or how I handle your personal data, please contact me at [email protected].

What personal data we collect

We collect and hold personal data about:

  • Children in our care — name, date of birth, address, emergency contacts, medical information (including allergies, health conditions and medication), dietary requirements, and observations and photographs relating to their learning and development.
  • Parents and carers — name, address, telephone numbers, email address, employment details (where relevant for government funding), and financial information for invoicing and payment.
  • Website enquiries — name, email address, telephone number, and any information you choose to include in your message when you contact us via our website enquiry form.

We do not collect sensitive personal data beyond what is necessary for the safe care of children and compliance with our legal obligations.

Why we collect it and our legal basis

We collect and use personal data for the following purposes:

  • To provide childcare services safely and in accordance with the EYFS framework — legal basis: performance of a contract and legal obligation.
  • To maintain safeguarding records and comply with our duty of care — legal basis: legal obligation and vital interests.
  • To administer government-funded childcare entitlements — legal basis: legal obligation.
  • To communicate with parents and carers about their child's care, development and wellbeing — legal basis: performance of a contract and legitimate interests.
  • To respond to enquiries submitted via our website — legal basis: legitimate interests (responding to your request).
  • To maintain financial records for invoicing and tax purposes — legal basis: legal obligation.

How we share your data

We do not sell or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

  • With Ofsted, the local authority, or other regulatory bodies where we are legally required to do so.
  • With other professionals involved in a child's care or education (such as health visitors, GPs or schools) where this is in the child's best interests and, where appropriate, with your consent.
  • With our insurance provider, where necessary.
  • With GoDaddy (our website platform provider), who process enquiry form submissions on our behalf. GoDaddy acts as a data processor and is bound by appropriate data processing agreements.

We will never share personal data beyond what is necessary and proportionate.

Photographs and learning journals

We use an online learning journal to share observations and photographs of your child's development with you. Access is restricted to you and to us — no other parties can view your child's journal.

We ask for your written consent before taking or sharing any photographs of your child. You may withdraw this consent at any time.

How long we keep your data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal obligations:

  • Children's records (including safeguarding records) are retained for a minimum of 21 years from the child's date of birth, or until the child reaches the age of 25 if they had a special educational need, in line with Ofsted guidance.
  • Financial records are retained for 6 years in accordance with HMRC requirements.
  • Website enquiry data is retained for up to 12 months, after which it is securely deleted.

When data is no longer required, it is securely deleted or destroyed.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the following rights:

  • The right to access the personal data we hold about you or your child.
  • The right to have inaccurate data corrected.
  • The right to have your data erased in certain circumstances.
  • The right to restrict or object to our processing of your data in certain circumstances.
  • The right to data portability in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond within two weeks.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies and website data

Our website uses essential cookies only — these are necessary for the site to function and do not track you for advertising or analytics purposes. We do not use third-party tracking cookies.

If you submit an enquiry via our contact form, the information you provide is transmitted securely and stored in our inbox system. We do not store payment card details on our website.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last updated. We will notify existing families of any significant changes.

Questions about this policy?

If you have any questions or concerns about how we handle your personal data, please get in touch.