Your family. Your privacy.

Cedar Grove Day Nursery Limited (company 16026117) is responsible for information about your family. Our registered office is 192–194 Lancaster Road, Enfield EN2 0JH.

For questions, requests or complaints about your information, contact our senior staff team: enquiries@cedargrovenursery.org or 020 8166 6395. You can also write to us at the address above.

• Details about your child and family, emergency contacts and people allowed to collect your child.
• Bookings, attendance, fees, payments and funding details.
• Care and learning records, photographs, permissions and messages.
• Routines, allergies, dietary needs, health needs, medicines, accidents and concerns about a child’s safety.

Most information comes from families and nursery staff. We may also receive relevant information from professionals, the local authority or a previous nursery. Please keep your details up to date and let emergency contacts know you have given us their details.

For a first enquiry, please send only basic contact and childcare details, without medical information or funding codes.

We use information to:

• Answer your questions and arrange visits.
• Care for your child safely and understand their routines and needs.
• Support learning and share weekly Famly updates, including group-activity photos that all parents with children enrolled at the nursery can view.
• Manage bookings, fees, payments and funding.
• Keep children safe and maintain the records required of a nursery.

For bookings and payments, we need information to carry out our agreement with you. Some nursery and financial records are required by law. Funding and child protection information must also have a reason allowed by law.

For general enquiries and other necessary care, we rely on “legitimate interests”. This means a reasonable nursery need, taking your family’s privacy and rights into account.

We ask for separate permission to use photos on our website or social media, or to send marketing messages. Saying no does not affect your child’s place.

Health information has extra protection. If we need your specific permission, we explain what it covers and how to change your mind. Signing a childcare agreement does not give permission for every use.

We tell you which details are needed. Without essential care or funding information, we may be unable to care for your child safely or claim funding.

We use Famly to store nursery information and communicate with parents. Depending on the features we use, this can include contacts, attendance, fees, care records, photos and learning updates. Cedar Grove remains responsible for these records; Famly stores and handles them for us.

Read Famly: processing nursery and children’s data about nursery records, and Famly privacy policy about information Famly uses for its own services.

We follow data protection rules and guidance from the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Children’s and parents’ paper files are kept in a locked filing cabinet. Only people approved by management may access nursery records.

Staff receive the information they need to care for your child, including routines, allergies, dietary needs, health needs and medication.

When needed and allowed by law, we share relevant information with Ofsted, local-authority funding or child protection teams, health and emergency services, other professionals or your child’s next setting. We may need to share information to protect a child without asking permission first. Companies providing our IT, email or finance services may also handle information for us.

If a company handles information outside the UK, it must have the protection required by UK law. Our senior staff team can explain which countries are involved and how information is protected.

We retain children's personal information and nursery records in accordance with the Early Years Foundation Stage (EYFS), safeguarding requirements, data protection legislation and our Record Retention Policy.

Different records are kept for different periods depending on their purpose and any legal or regulatory requirements. Routine daily care records are generally retained for shorter periods, while accident, medication and safeguarding records may need to be kept for considerably longer. Safeguarding records are normally retained until the child reaches 25 years of age, or longer where required.

All records are stored securely, with access restricted to authorised staff. Once the relevant retention period has ended and the information is no longer required, records are securely destroyed or deleted.

Further information about our record retention periods is available from the nursery management team upon request.

We may share photos of group activities in weekly Famly posts to show families what children have been doing. All parents with children enrolled at the nursery can view these posts, so a photo of your child may also be seen by other parents.

Please let the nursery team know if you do not want your child included in weekly Famly group photos.

Photos used for care and learning must have a clear purpose and be allowed by law. We ask separately before using your child’s photo on our website or social media. You can say no or change your mind without affecting their place.

Any marketing emails or texts would have a separate choice and a way to unsubscribe. Making an enquiry is not permission for marketing. Contact the nursery to withdraw permission; this does not change earlier uses that were allowed.

CCTV records images, without sound, to help keep children safe, protect the premises and provide extra security. Recordings are kept for up to one month and management can view them. After an incident, relevant footage may be shared with parents, Ofsted, the local authority or other authorised bodies when needed and allowed by law. We consider children’s safety and other people’s privacy before sharing it.

Our enquiry form prepares an email for you to check and send. It does not send anything automatically, book a place or save your answers in a website database. Your browser, clipboard and email app may keep information according to their settings.

The form does not decide who gets a place or funding. The website host may keep technical details, such as your internet address and connection records. See our cookie policy for more information.

You can ask to see or correct your information. In some cases, you can ask us to delete it, limit how we use it, or provide an electronic copy to pass to another organisation. Some records must be kept by law. Where we rely on your permission, you can withdraw it at any time by contacting the nursery.

You have a right to object when we use information for “legitimate interests”, explained above. You can always tell us to stop using your information for marketing.

Parents can usually make requests for young children. We may check who you are and that you can act for the child. We consider the child’s interests before sharing information. Requests are normally free and answered within one calendar month. If the law allows extra time, we will explain why.

For a complaint, contact our senior staff team. We will acknowledge it within 30 days and respond as soon as we can. You can also complain to the ICO: ico.org.uk/make-a-complaint/.

Updated 26 October 2026. We will explain changes before using information for a new purpose. Reading this notice does not mean you have given permission.