Legal
Website GDPR & data protection
Your data protection rights when using our website, and how we comply with UK GDPR.
Last updated: 29 June 2026
1. Introduction
Little Einsteins Childcare Centre Ltd is committed to protecting personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page summarises how UK GDPR applies to personal data processed through the Little Einsteins Nursery website. It should be read alongside our Privacy Policy and Cookie Policy.
Personal data processed because a child attends our nursery, because you are an employee, or because of statutory early years and safeguarding duties is covered by separate nursery privacy notices and our nursery policies, not by this page alone.
2. Data controller
For Website-related processing, the data controller is:
Little Einsteins Childcare Centre Ltd (Company Number 06754353)
4a & 4b Newlands Science Park, Hull HU6 7TQ
Email: info@littleeinsteinshull.co.uk
Telephone: 01482 805816
3. What UK GDPR requires
UK GDPR sets standards for how organisations collect, use, store, share, and protect personal data. Key principles we apply to Website data include:
- Lawfulness, fairness, and transparency — we tell you what we collect and why;
- Purpose limitation — we use data only for clear, specified purposes;
- Data minimisation — we collect only what we need to run and secure the Website and respond to enquiries;
- Accuracy — we take reasonable steps to keep data accurate where we maintain it;
- Storage limitation — we do not keep data longer than necessary;
- Integrity and confidentiality — we protect data with appropriate security measures;
- Accountability — we document our processing and can demonstrate compliance.
4. Lawful bases for Website processing
We process personal data through the Website only where a lawful basis applies. The bases we rely on most often are:
- Legitimate interests — operating a secure, functional Website; defending against misuse; and handling general enquiries sent via published contact details. We have assessed that these interests are not overridden by your rights in the context of normal Website use;
- Contract — taking steps at your request before entering into a childcare or employment contract when you contact us through the Website;
- Legal obligation — where we must process or disclose data to comply with UK law;
- Consent — where required for non-essential cookies or similar technologies (see our Cookie Policy).
5. Your rights under UK GDPR
If our processing of your personal data through the Website is covered by UK GDPR, you have the following rights (subject to conditions and exemptions in law):
- Right of access — to obtain confirmation of whether we process your data and a copy of it;
- Right to rectification — to have inaccurate personal data corrected;
- Right to erasure — to request deletion in certain circumstances (for example, where data is no longer needed or you withdraw consent where consent was the lawful basis);
- Right to restrict processing — to limit how we use your data in certain circumstances;
- Right to object — to object to processing based on legitimate interests or for direct marketing;
- Right to data portability — to receive certain data in a structured, commonly used, machine-readable format where processing is automated and based on consent or contract;
- Rights related to automated decision-making — we do not make solely automated decisions with legal or similarly significant effects through the public Website.
6. Children’s data on the Website
Children’s personal data receives special protection under UK GDPR and the Data Protection Act 2018. Our public website is intended for parents and carers, not children, and we do not knowingly collect personal data directly from anyone under 18 online.
How we protect children’s data on the website — including our approach under the ICO Children’s Code, photographs, parental rights, and what to do if a child contacts us — is explained in section 11 of our Privacy Policy.
7. How to exercise your rights
Email info@littleeinsteinshull.co.uk or write to us at the address above. Please describe your request clearly and include enough information for us to identify you and locate relevant data (for example, the email address you used to contact us).
We will respond without undue delay and within one month in most cases. We may extend by a further two months for complex requests, and we will explain why if we do. We do not usually charge a fee, but we may charge a reasonable fee or refuse manifestly unfounded or excessive requests as permitted by law.
8. Data sharing and processors
We use trusted suppliers to host and maintain the Website. They process personal data only on our documented instructions and must protect it appropriately. We do not sell personal data collected through the Website.
Where you follow links to third-party websites or services, those organisations act as independent controllers of any data they collect. Review their privacy policies before using their services.
9. Complaints to the ICO
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to complain to the UK Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
10. Related documents
- Website Privacy Policy
- Cookie Policy
- Website Terms & Conditions
- Nursery policies (safeguarding, operational, and registration matters)
11. Contact
For data protection enquiries about the Website, email info@littleeinsteinshull.co.uk or call 01482 805816.