Privacy Policy

1. Purpose of This Policy

This Privacy Policy outlines how Childcare Study Nest collects, uses, stores, and protects personal data belonging to learners, providers, and any clients accessing services or resources.

It ensures all data is handled lawfully, respectfully, and in line with professional standards.

2. Scope

This policy applies to all personal data processed when delivering services to:

• Early Years providers
• FE colleges and training organisations
• Individual learners
• Any client purchasing support, resources, or consultancy

It covers all digital and paper-based information shared with Childcare Study Nest.

3. Data Collected

Childcare Study Nest may collect the following types of information:

3.1 Personal Information

• Names, email addresses, and contact details
• Learner information shared for assessment support
• Provider or organisational contact details

3.2 Project & Service Information

• Curriculum documents
• Templates, policies, or internal materials
• Notes relating to project delivery

3.3 Payment Information

• Invoice details
• Transaction confirmations (no card details are stored)

Only information necessary for delivering the agreed service is collected.

4. How Data Is Used

Personal data is used solely for:

• Delivering agreed services
• Communicating about projects, sessions, or resources
• Issuing invoices and processing payments
• Maintaining accurate records for business administration
• Improving the quality and relevance of services

Data is never used for marketing without explicit consent.

5. Lawful Basis for Processing

Childcare Study Nest processes data under the following lawful bases:

• Contract: to deliver the service a client has purchased
• Legitimate Interest: to maintain records, manage communication, and ensure service quality
• Consent: when optional information is provided voluntarily

Clients may withdraw consent at any time where applicable.

6. Data Storage & Security

Childcare Study Nest commits to:

• storing all digital files securely
• using password-protected systems
• limiting access to essential information only
• deleting data when it is no longer required

This aligns with the approach outlined in the Terms & Conditions:
"All documents, learner information, and organisational materials are treated as confidential. No information is shared with third parties."

7. Data Sharing

Childcare Study Nest does not share personal data with third parties unless:

• required by law
• explicitly requested by the client
• necessary for payment processing (e.g., secure payment platforms)

Learner data is anonymised wherever possible.

Providers confirm they have the right to share any materials supplied, as stated in the Terms & Conditions:
"Providers agree to share only information necessary for project completion and anonymise learner data where possible."

8. Data Retention

Data is retained only for as long as necessary to:

• complete the agreed work
• meet legal or financial record-keeping requirements

Files are securely deleted once they are no longer needed.

9. Client Rights

Clients have the right to:

• request access to their data
• request corrections
• request deletion (where legally permissible)
• withdraw consent
• raise concerns about data handling

Requests must be made in writing and will be responded to within 5 working days, mirroring the response timeframe used in your complaints process.

10. Confidentiality

All information shared with Childcare Study Nest is treated as confidential.

This includes:

• learner work
• organisational documents
• internal templates
• assessment materials

Confidentiality is upheld throughout and after the completion of any project.

11. Data Breach Procedure

In the unlikely event of a data breach:

• affected clients will be notified promptly
• steps will be taken to minimise risk
• the incident will be reviewed to prevent recurrence

Only essential information will be shared with relevant authorities if required.

12. Children’s Data

Where learner information relates to individuals under 18:

• only necessary information is collected
• data is anonymised wherever possible
• no direct contact is made with learners unless arranged by the provider

All handling aligns with professional boundaries and safeguarding expectations.

13. Review of Policy

This Privacy Policy is reviewed annually to ensure it remains aligned with:

• best practice
• legal requirements
• sector expectations
• the needs of clients

Updates will be published with a revised review date.