Website privacy policy

Last updated: 29 June 2026

1. Scope of this policy

This privacy policy explains how Little Einsteins Childcare Centre Ltd (“we”, “us”, or “our”) processes personal data in connection with the Little Einsteins Nursery website.

It covers visitors to the public Website, people who contact us using details shown on the Website, and applicants who email us about vacancies listed on the Website. It does not replace the privacy information provided to parents, children, and staff in connection with nursery care and employment. For safeguarding, registration, and operational nursery policies, see our nursery policies page or contact the nursery directly.

2. Data controller

The data controller for personal data processed through this Website is:

Little Einsteins Childcare Centre Ltd
Company Number 06754353
4a & 4b Newlands Science Park
Hull HU6 7TQ
Email: info@littleeinsteinshull.co.uk
Telephone: 01482 805816

3. Personal data we may collect

Depending on how you use the Website, we may process:

• Technical and usage data — such as IP address, browser type, device type, referring page, pages viewed, and approximate date and time of access, collected through server logs and similar technologies when you browse the Website;
• Contact data you choose to send us — such as your name, email address, telephone number, and the content of your message, if you email us (for example about admissions, general enquiries, or job applications linked from the Website).

We do not operate a public online contact form on the Website. If you email or telephone us, you choose what personal data to provide.

4. How we use personal data and our lawful bases

Under UK GDPR we must have a lawful basis for processing personal data. We use the following bases:

• Legitimate interests — to operate, secure, maintain, and improve the Website; monitor performance; prevent abuse; and respond to enquiries sent to us via contact details published on the Website. We balance these interests against your rights and only process what is necessary;
• Contract — where you contact us about childcare or employment and we need to take steps at your request before entering into an agreement;
• Legal obligation — where we must retain or disclose information to comply with law (for example, responding to a valid request from a regulator or court);
• Consent — where required for optional processing. We do not use non-essential marketing cookies on the public Website without appropriate consent (see our Cookie Policy).

5. Cookies and similar technologies

We use a limited number of cookies and similar technologies on the Website. The public site does not use advertising or analytics cookies. Full details, including third-party services such as Google Fonts, are in our Cookie Policy.

6. Who we share personal data with

We do not sell your personal data. We may share it only where necessary with:

• Website and hosting providers — who process data on our behalf to host and deliver the Website (they act as processors under data processing terms);
• IT support and security providers — where needed to maintain or protect the Website and our systems;
• Third-party content or map providers — when you follow links to external services (for example Google Maps), those providers may process data under their own privacy policies;
• Professional advisers or authorities — where required by law or to establish, exercise, or defend legal rights.

7. International transfers

We aim to store and process Website data within the United Kingdom or European Economic Area. Where a service provider processes data outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy regulations, UK International Data Transfer Agreement, or equivalent approved mechanisms) before the transfer takes place.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy:

• Server logs — typically retained for a short rolling period for security and troubleshooting, then deleted or anonymised unless needed for an investigation;
• Enquiry and application emails — retained for as long as needed to respond and, where relevant, manage admissions or recruitment, then deleted or archived in line with our retention schedule.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including HTTPS encryption for the Website, access controls, and secure hosting. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

10. Your rights

Under UK GDPR and the Data Protection Act 2018, you have rights including:

• the right to be informed (this policy and our GDPR information);
• access to a copy of your personal data;
• rectification of inaccurate data;
• erasure in certain circumstances;
• restriction of processing in certain circumstances;
• objection to processing based on legitimate interests;
• data portability where processing is automated and based on consent or contract.

To exercise your rights, contact us using the details in section 2. We may need to verify your identity before responding. We aim to respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

11. Children’s data on the Website

Protecting children is central to our nursery. This section explains how we handle children’s personal data in connection with our public website only. It does not describe records held about children in our care at the nursery — that is covered by separate privacy notices and our nursery policies.

Who this website is for

Our website is an information site for parents, carers, and prospective families. It is not directed at children. We do not offer account registration, messaging, or other interactive services through which a child could submit personal data on the public site.

UK law and our approach

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Children’s personal data receives additional protection under UK law.

Where the Information Commissioner’s Office Age Appropriate Design Code (Children’s Code) applies to online services likely to be accessed by children, we take a cautious approach on our public pages: we minimise data collection, do not profile children, and do not use analytics, advertising, or social tracking cookies (see our Cookie Policy).

Data we do not collect from children

We do not knowingly collect personal data directly from anyone under 18 through our public website. We do not operate public online contact forms, newsletter sign-ups, or similar features that invite children to enter their details.

If you believe a child has contacted us (for example by email) and provided personal data without a parent or carer’s involvement, please contact us using the details in section 2. We will take appropriate steps to delete that information where we are not legally required to retain it. We may ask a parent or carer to make enquiries on the child’s behalf in future.

Parents and carers

If you contact us about a child (for example regarding a nursery place), you choose what information to share. Please avoid sending unnecessary sensitive information about a child by unsecured email. We use enquiry data only to respond and, where relevant, for admissions steps you request.

Where UK GDPR rights apply to a child’s personal data processed through the website, a parent or carer with parental responsibility may exercise those rights on the child’s behalf by contacting us. We may ask for reasonable evidence of your relationship to the child before responding.

Photographs and images of children

Photographs or images of children may appear on our website (including the gallery and room pages) only where appropriate parental consent and safeguarding arrangements are in place for nursery publicity purposes.

• Consent for photography in the nursery is separate from publication on the website and is managed under our nursery policies;
• We aim to use images that show activities and environments without unnecessary identifying detail where practicable;
• If you are a parent or carer and wish to ask about an image on the website, or request review or removal, contact us using the details in section 2.

Technical data

When anyone visits the website, limited technical data (such as IP address in server logs) may be processed as described in section 3. We do not use this to build profiles of individual children or to target them with advertising.

12. Changes to this policy

We may update this policy when our Website, technology, or legal obligations change. The latest version will always be published on this page with an updated date.

13. Contact

For privacy questions about the Website, email info@littleeinsteinshull.co.uk or call 01482 805816.