Jigsaw Nursery Privacy Policy

Jigsaw Nursery, 2 Beechwood Road, Liverpool, L19 3RU

At Jigsaw Nursery, we promise to keep your data safe and private and only use your personal information to manage your account and provide tailored care for your child.

Your privacy is protected by law and the General Data Protection Regulation (GDPR), which states that we are allowed to use personal information only if we have a proper reason to do so. This includes any sharing of information outside of Jigsaw Nursery.
The law states we must have one or more of the following reasons:

• To fulfil a contract we have with you; or
• When it is our legal duty; or
• When it is in our legitimate interest; or
• When you give consent.

A legitimate interest is when we have a business or commercial reason to use your information, provided it does not unfairly go against what is right and best for you. If we rely on legitimate interest, we will tell you what that interest is.

From time to time, we may contact you by phone, email, or nursery communication apps to provide updates, share important information, or send monthly invoices.

Information We Collect

Child Information

We collect, hold, and share the following categories of child data:

• Personal information and contacts (name, date of birth, address)
• Characteristics (ethnicity, language, nationality, country of birth)
• Attendance information (sessions attended, absences, reasons for absence)
• Assessment information (development records, progress reports, observations)
• Medical information (immunisations, allergies, accidents, dietary needs)
• Safeguarding information (court orders, professional involvement)
• Special educational needs information (needs and ranking)

Parent / Carer Information

We collect and hold the following parent or carer information:

• Personal information (name, address, contact details)
• Characteristics (such as appearance, when required to identify authorised collectors)

Why We Use This Information

We use child data to:

• Support learning and development
• Monitor and report on progress
• Provide appropriate and personalised care
• Assess and improve the quality of our services
• Meet legal obligations regarding data sharing

We use parent/carer data to:

• Support the child’s care
• Identify approved individuals collecting children
• Maintain open communication
• Assess and improve our services
• Meet legal obligations regarding data sharing

The Lawful Basis for Using This Information

We collect and use child information under:

• GDPR Article 6 (1b: contract, 1c: legal obligation, 1f: legitimate interests)
• GDPR Article 9 (2a: explicit consent, 2c: vital interests)

Collecting Information

Child Information

Most child information is mandatory, but some may be provided voluntarily. We will always tell you when information is optional.

Information is collected via:

• Registration form
• Parent contract
• Introduction forms at the start of attendance
• Local authority forms (e.g., funding consent)

Parent / Carer Information

Most parent information is mandatory to allow us to provide safe childcare.
Some voluntary information may also be requested to support your child’s needs.

Storing Child and Parent Data

We hold child and parent data for:

• Up to seven years from the child’s start date, or
• Two years from their last day with Jigsaw Nursery

(Unless exceptions apply, as detailed in our Retention Policy.)

Data collected through online forms may be processed through secure third-party systems before being stored on Jigsaw Nursery’s secure servers.

Who We Share Information With

We routinely share information with:

• Schools or settings the child attends after leaving us
• The local authority
• Ofsted

We never share data without consent unless the law or our safeguarding policies require us to do so.

Uploaded Media

Any photos or videos you voluntarily upload for nursery projects or media compilations will be:

• Stored only for the duration of the project
• Deleted within one month after the final publication

Your Rights

Under data protection law, you have the right to:

• Request access to information we hold about you or your child
• Object to processing that may cause damage or distress
• Prevent processing for direct marketing
• Object to automated decision-making
• Request correction of inaccurate data
• Request deletion of data (in certain circumstances)
• Claim compensation if data protection regulations are breached

To request access or raise concerns, please contact the Nursery Manager.

If unresolved, you may contact the Information Commissioner’s Office:
https://ico.org.uk/concerns/

Right to Be Forgotten

You may request that your personal data be erased under Article 17 GDPR.
However, this right does not apply while your child attends Jigsaw Nursery, as the data is necessary for our contractual and legal obligations.

Authorised Third Parties

Security & Breach Notifications

We take appropriate technical and organisational measures to protect your information against loss, misuse, unauthorised access, alteration, or destruction.

If a data breach occurs that may affect you, we will notify you as soon as possible and report the actions taken.

Changes to This Policy

We may update this Privacy Policy from time to time.
The most recent version will always be available on our website or at the nursery.

Last modified: 23/01/2026

Questions or Concerns?

If you have questions about this policy or how your information is handled, please contact:

Jigsaw Nursery
2 Beechwood Road
Liverpool
L19 3RU

Or speak directly with your Nursery Manager or Data Protection Officer.