GDPR Compliant

Privacy Policy

At Magical Moments, we take your privacy seriously. This policy outlines how we collect, store, and protect your family's personal information.

Last Updated: December, 2025

1. Information We Collect

To provide a safe and nurturing environment for your child, we collect necessary personal information. This includes:

  • Child Information: Name, date of birth, home address, medical history, dietary requirements, and previous childcare settings.
  • Parent/Guardian Information: Names, contact details (phone/email), National Insurance numbers (for funding claims), and emergency contact details.

2. How We Use Your Information

We use this data to fulfill our contractual and legal obligations, including:

  • Ensuring the safety and safeguarding of your child.
  • Monitoring your child’s progress and development (EYFS tracking).
  • Processing government funding claims (15/30 hours entitlement).
  • Communicating with you regarding your child's day and nursery events.

3. Information Sharing

We do not sell your data. We only share information when legally required or necessary for your child's care, such as with:

Local Authority (Surrey County Council): For funding and census data.
Ofsted: During inspections or compliance checks.
Health Professionals: In the event of a medical emergency or for integrated reviews.
Schools: When your child transitions to Primary School to ensure a smooth handover.

4. Data Security & Retention

Paper records are stored in locked filing cabinets within the nursery. Digital records are stored on secure, password-protected systems. We retain records in line with statutory requirements (typically until the child reaches the age of 21 years and 3 months for safeguarding records).

If you have any questions about your data or would like to request a copy of the information we hold, please contact our Data Protection Officer.

Contact Us