At New Beginnings Day Nurseries and Lilyrose International School, we are committed to protecting the privacy and security of our website visitors, parents, children, staff, and stakeholders. This Privacy Policy explains how we collect, use, store, and share your personal information, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Nigeria’s Data Protection Regulation (NDPR).

1. Who We Are

New Beginnings Day Nurseries operates a network of early years centres across the UK, catering to children aged 0-5 years. We also operate an additional early years centre in Nigeria, known as Lilyrose International School. For the purposes of data protection laws, New Beginnings Day Nurseries and Lilyrose International School are the data controllers.

2. What Information We Collect

We may collect and process the following personal data from you:

• Personal Information of Children and Parents: Name, address, date of birth, gender, health and dietary needs, educational records, emergency contact details, and medical records.
• Contact Information: Names, email addresses, phone numbers, and postal addresses of parents and guardians.
• Staff Information: Name, address, contact details, qualifications, employment history, and criminal record checks (where applicable).
• Website Usage Data: IP address, browser type, operating system, and information about your visit to our website, including pages viewed and interactions.

3. How We Collect Information

We collect your personal information in the following ways:

• Directly from You: When you complete registration forms, make inquiries, or communicate with us via phone, email, or website.
• Through Our Website: When you use our website, we collect usage data through cookies and similar technologies.
• Third Parties: We may collect information from third parties such as health professionals, educational authorities, or agencies providing safeguarding services.

4. How We Use Your Information

We will use your personal data for the following purposes:

• To provide early years care and education to children.
• To communicate with parents, guardians, and staff.
• To manage staff employment and recruitment processes.
• To maintain accurate and up-to-date child records in compliance with regulatory requirements.
• To ensure the health, safety, and welfare of children in our care.
• To comply with safeguarding regulations and legal obligations.
• To monitor website performance and improve user experience.

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

Contractual Obligations: To provide educational services as agreed upon in contracts with parents or staff members.

Legal Obligations: To comply with regulatory and legal requirements such as safeguarding and employment law.

Legitimate Interests: To manage daily operations, improve services, and ensure child safety.

Consent: For specific purposes such as using photos or videos of children for marketing or promotional purposes, where we have obtained explicit consent.

6. Sharing Your Information

We will only share your personal data when necessary and in accordance with data protection laws. This may include:

• Regulatory authorities such as Ofsted (UK) or equivalent bodies in Nigeria.
• Health professionals and safeguarding services.
• IT service providers who help manage our website and systems.
• External legal advisors or law enforcement, if required by law.

We do not sell or share your information with third parties for marketing purposes.

7. Data Retention

We will retain personal information for as long as necessary to fulfil the purposes outlined in this policy, and in accordance with legal and regulatory requirements. For example, child records will be retained for the statutory retention period as set by regulatory authorities.

8. Your Rights

Under data protection laws, you have certain rights regarding your personal data. These include:

• The right to access your personal information.
• The right to correct inaccurate or incomplete information.
• The right to request deletion of your data (subject to legal and regulatory obligations).
• The right to object to the processing of your data.
• The right to withdraw consent where consent is the basis of processing.
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or the National Information Technology Development Agency (NITDA) in Nigeria.

9. Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. This includes encryption, secure access controls, and regular audits of our data handling procedures.

10. International Data Transfers

Where necessary, personal data may be transferred between our UK sites and our centre in Nigeria. We ensure that adequate safeguards are in place to protect your data in accordance with applicable data protection regulations.

11. Cookies

Our website uses cookies to enhance your experience and collect usage data. You can manage cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

12. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us:

• New Beginnings Day Nurseries (UK):** admin@newbeginnings-nurseries.co.uk
• Lilyrose International School (Nigeria): admin@lilyroseschools.com 

This Privacy Policy ensures transparency and accountability in how New Beginnings Day Nurseries and Lilyrose International School handle personal data, ensuring compliance with both UK and Nigerian data protection regulations.