Each individual franchisee who trades under the branding of Banana Moon Day Nursery is committed to protecting the confidentiality, integrity and security of your personal information, and they take this responsibility very seriously. This privacy policy covers practices for collecting and processing information from families, prospective families and job applicants.

Each franchisee who operates under their own limited company as detailed within the website footer will comply and handle data/information in accordance with the Data Protection Act 1998 and the EU General Data Protection Regulation (GDPR) and any subsequent legislation on information handling and privacy.

Who controls your personal data?
Banana Moon Day Nursery is made up of individually owned and operated franchisees who register and trade as their own limited company and registration with their regulatory body under the brand name of Banana Moon Day Nursery. Each franchisee operates within their own exclusive territory.

For simplicity throughout this notice, ‘we’ and ‘us’ means the individual franchisee and their limited company.

Why collect personal information?
The main reason we collect and process your personal data is to provide, evaluate and improve our services and your experiences with us.

We (the franchisee) limit the collection of personal information to what is necessary to provide you with high-quality services to support your specific needs and requests, and to meet our business needs in connection with the services. We do not sell your personal data to any third parties. Below we have highlighted the reasons for the collection of your personal information:

How do you consent to the use of your personal information?
By providing your personal information, you are consenting to its collection, use and disclosure by the individual franchisee for the purpose outlined in this privacy policy. In light of the nature of our services, as well as applicable laws and regulatory requirements, if you choose to withhold some types of personal information or opt out of providing it, we may not be able to provide the services requested.

What personally identifiable information is collected?
The type of relationship you have with the nursery will determine the specific information they will need to collect from you.

Your social media username and public comments/feedback on social media are collected so that we can respond to comments, questions or feedback.  These online and social media sites typically have their own privacy policies explaining how they use and share your personal data.  You should carefully review those privacy policies before using these sites to make sure that you are happy with how they collect and share your personal data.

CCTV cameras may capture your image and your child’s images throughout the nursery day. Depending on the positioning of external cameras we might capture your car number plate.

We create records during the course of providing services to you or your child such as notes from meetings/calls.  Records created during the nursery day include the completion of forms recording activities and behaviours such as illness, sleep, nappy changes, meals, medication, learning, interactions with others, and accidents. We also take photographs of children to share with their parents and as part of their learning journey records.

Contact information that you provide when requesting further information via telephone, email, online (website ‘Contact Us’ page or via a search engine such as daynurseries.co.uk) or in person. Contact information may include your name, telephone number, and email/postal address.

Data such as your child’s full name and their date of birth, home address, and full details of parent/carers – full name, address, email address and National Insurance numbers; details of other persons with parental responsibility; contact numbers for those with parental responsibility; details of emergency contacts for when you are not contactable; your child’s dietary and medical conditions; and medical consents. Arrangements for payment of nursery fees. We obtain this information from your child’s ‘Secure My Place’ form, registration form, and ‘Settling In’ pack.

Personal data relating to those who apply for job vacancies with us or who send speculative job applications to us. We do this for employment purposes, to assist us in the selection of candidates for employment, and to support the running of the business. The personal data may include identifiers such as name, date of birth, personal characteristics such as gender, qualifications and previous employment history.

The personal data provided during an application process will be retained for a period of at least six months or, if required by law, for as long as is required.

This privacy notice does not form part of an employment offer or contract between us. If we make an employment offer to you, we will provide further information about our handling of your personal information in an employment context separately.

When do we collect your personal data?
How you interact with us determines when we collect your personal data.

When you use our websites, apps and social media:

When you contact or receive services directly:

 Information from third parties:

When someone visits our websites we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be upfront about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

What legal basis do we rely on to process your personal data?
The privacy law in the European Union requires us to have a legal basis for processing personal data.  Below is a list of the legal basis we rely on.

Consent:  We rely on your consent to process your personal data in very limited circumstances such as when you provide personal data to receive publications (e.g. newsletters, brochures), information on events and news about our company and services.  After you sign up to receive communications you have the right to opt out at any time.

Performance under a contract:  Most of your personal data we process is necessary to perform our obligations under a contract we have with you. We can only provide the service to you or your child if you provide us with the personal data necessary to perform the contract.

Legal obligations:  There are many laws that require us to process your personal data. We can only provide the service to you or your child if you provide us with the personal data required under law.  Examples include childcare statutory regulations, safeguarding/health/safety regulations, tax and government funding regulations.

Legitimate interests:  In some situations, we process your personal data to pursue our legitimate interests as a business.  We will only process your personal data if our legitimate interests do not materially have an impact on your interests, fundamental rights or freedoms.

Examples include:

Where do we store your personal data?
Electronic information:

We will input your data into an online nursery management system, which helps us manage our nursery smoothly. Your data is held in secure data centres and can only be accessed by authorised personnel.

Hard-copy information:

The original copy of personal information we collect is stored within the nursery or another secure identified location subject to regulatory body approval if space is limited.
 

Who do we share your personal data with?
We consider your personal data confidential and therefore we will not share any identifiable information about you with third parties without your consent unless the law allows or requires us to do so. There are limited circumstances that require us to disclose your personal data to others in order to deliver services, or to meet our legal obligations or legitimate business interests.

Examples include:

How long do we keep your personal data?
Whenever we collect or process your personal data, we will only keep it for 12 months. At the end of that retention period, your data will either be deleted completely or anonymised.

What rights do you have over your personal data?
You have the right to request:

In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the relevant data protection regulator for the UK – Information Commissioner’s Office (ICO).

If you would like to find out more about our data retention policy and how we use your personal data, you want to see a copy of the information about you that we hold or have any questions or issues regarding data, please email us with the subject “Data Protection Request”

If you fail to provide certain information when requested, we may not be able to perform the respective contracts we have entered into with you or we may be prevented from complying with our respective legal obligations to parents.

Will this privacy policy change?
This privacy policy is subject to change and we will post revisions on our website. Please check back periodically, especially before you provide any personal information. This privacy policy was last updated on 22nd May 2018.

If you have any further questions regarding how we collect and handle your data, please do not hesitate to contact the Nursery Manager at your local Banana Moon Day Nursery.

Applications for employment
We process personal data relating to those who apply for job vacancies with us or who send speculative job applications to us. We do this for employment purposes, to assist us in the selection of candidates for employment, and to support the running of the business. The personal data may include identifiers such as name, date of birth, personal characteristics such as gender, qualifications and previous employment history.

We will not share any identifiable information about you with third parties without your consent unless the law allows or requires us to do so. The personal data provided during an application process will be retained for a period of at least six months or, if required by law, for as long as is required.

This privacy notice does not form part of an employment offer or contract between us. If we make an employment offer to you, we will provide further information about our handling of your personal information in an employment context separately.

If you would like to find out more about our data retention policy and how we use your personal data, or you wish to see a copy of the information about you that we hold or have any questions or issues regarding data protection, please email us with the subject “Data Protection Request”.