At Rocking Horse Nursery, we’re committed to protecting and respecting your privacy. 
This policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others, how we keep it secure, and what your rights are. 
Please note that you do not have to provide personal information to use most of this website. However, if you wish to use certain services such as the ability to send us your questions and comments you will need to provide certain personal information. 
By using the Rocking Horse Nursery website, social media pages or providing your information you consent to our collection and use of the information you provide in the way(s) set out in this policy. If you do not agree to this policy please do not use our site, social media pages or services. 
​
We may make changes to this policy from time to time. If we do so, we will post the changes on this page and they will apply from the time we post them. This policy was last updated on 31st May 2018. 
Any questions regarding this Policy and our privacy practices should be sent by email to info@rockinghorsenurserygodalming.co.uk  or by writing to the Data Protection Officer, Rocking Horse Nursery, Wey Court, Godalming, Surrey, GU7 3JE. Alternatively, you can telephone 01483 860273. 

Who Are We? 
Rocking Horse Nursery was established in 1991, and is dedicated to providing high quality childcare for children aged 3 months to 7 years. The registered address is Rocking Horse Nursery, Wey court, Godalming, Surrey, GU7 3JE.  
 
What Is Personal Data? 
Personal data is information that can be used to help identify an individual, such as name, address, phone number, IP or email address. 

What Information We Collect and Why? 
This policy applies to the Rocking Horse Nursery website, our use of emails and any other methods we use for collecting information. We obtain information about you when you use our website, for example, when you contact us about products and services, to leave a legacy, to register for a training course. It covers what we collect and why and what we do with the information. 

  • We collect information that is either personal data (as outlined above) or non-personal data (pages accessed etc.) 

  • We collect information to provide services or goods, to provide information, to our childcare service providers or Ofsted 

  • We only collect the information that we need or that would be useful to us in our quest to provide the best possible service 

  • We never sell your data and we will never share it with another company or charity for marketing purposes 

  • We only share data where we are required by law or with carefully selected partners who work with us in the childcare sector. 

  • We will only retain your data for as long as it is required 

We may collect information about you whenever you interact with us, for example when you: 

  • fulfil your requests – such as provision of information 

  • communicate with us 

  • take part in one of our events 

  • attend a meeting with us and provide us with information about you 

  • contact us through the following channels: online, email, phone, SMS, social media or post 

  • prevent or detect fraud or abuses of our websites and enable third parties to carry out technical, logistical or other functions on our behalf 

  • provide information relating to any legacies you make 

  • post content to our website/social media sites (including Facebook and Twitter) 

  • provide information to us for subscribing to our website services (such as signing up for a training course, use of our services, events calendar, email notifications) 

  • use Social Media: Depending on your settings or the privacy policies for social media and messaging services like Facebook and Twitter, you might give us permission to access information from those accounts or services 

 
Sharing Your Information 
We will only share your information if: 

  • We are legally required to do so, e.g. by a law enforcement agency legitimately exercising a power or if compelled by an order of the Court. 

  • We believe it is necessary to protect or defend our rights, property or the personal safety of our staff or visitors to our premises or website 

 
Disclosures 
We may disclose information about you to any of our employees insofar as reasonably necessary for the purposes as set out in this privacy policy. In addition, we may disclose your personal information: 

  • to the extent that we are required to do so by law; 

  • in connection with any legal proceedings or prospective legal proceedings; 

  • to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk). 

Except as provided in this privacy policy, we will not provide your information to third parties. 
 
Security of Your Personal Information 
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. We will keep your information only for as long as we need it to provide you with the services or information you have required, to administer your relationship with us, to inform our research, to comply with the law. When we no longer need information, we will always dispose of it securely, using specialist companies if necessary to do this work for us. 
 
How Long Personal Data Is Stored? 
We review our retention periods for personal data on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold personal data on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us. 
 
Who Has Access To Personal Data 
Only Senior staff at Rocking Horse Nursery are granted access to personal data. This is ensured using strict operational processes and procedures. 
Staffare trained on security systems and relevant processes and procedures which are reviewed regularly for ongoing effectiveness and suitability for purpose.
All employees are kept up-to-date on Rocking Horse Nursery’s security and privacy practices. Employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure that personal data is protected.  
 
What We Do Not Do With Your Information 
We will not sell or rent your information to third parties. 
 
Policy Amendments 
This version is dated 31/05/2018. Please check this policy periodically to ensure you are happy with any changes made to our policy. 

Your Rights 
The General Data Protection Regulation (GDPR) gives you certain rights over your data and how we use it. These include: 

  • the right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed 

  • the right to prevent your data being used for direct marketing 

  • the right of access to a copy of the information we hold about you (known as a subject access request) 

If you wish to exercise any of these rights, please contact the Data Protection Officer, Rocking Horse Nursery, Wey Court, Godalming, Surrey, GU7 3JE. Alternatively, you can telephone 01483 860273 or email info@rockinghorsenurserygodalming.co.uk  . 
For more information about your rights under the GDPR go to the website of the Information Commissioner’s Office at www.ico.org.uk 
Links To Other Websites/From Other Websites 
Rocking Horse Nursery’s website may contain links to other websites run by other organisations. Rocking Horse Nursery’s Privacy Policy only applies to Rocking Horse Nursery’s website and you are encouraged to read the Privacy Statements on the third-party websites that you visit such as Google. Rocking Horse Nursery is not responsible for the Privacy Policies and practices of other websites even if they were accessed via a Bytes website. Equally, if you link to the Rocking Horse Nursery’s website from a third-party site, Rocking Horse Nursery is not responsible for the Privacy Policies and practices of that third-party site. 
 
16 Or Under 
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information. 
 
Social Media Sites 
We operate social media pages (including Facebook). Although this policy covers how we will use any data collected from those pages it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used. 
 
Other People’s Data 
Some of the services we offer allow you to provide the personal data of other people (e.g. tagging people on photos on social media). Before providing anyone else’s data please ensure they are happy for you to do so and under no circumstances must you make public another person’s home address, email address, or phone number. 
 
Contact Details 
You have a right to lodge a complaint if you believe that Rocking Horse Nursery has not upheld the rights, obligations and responsibilities set out in this Privacy Policy. To exercise all relevant rights, queries or complaints, please contact: Data Protection Officer, Rocking Horse Nursery, Wey court, Godalming, Surrey, GU6 8EX. Alternatively, you can telephone 01483 860273 or email info@rockinghorsenurserygodalming.co.uk   
 
If your complaint has not been resolved, you can also contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF