Privacy Policy

Last updated: 3rd July, 2026

Brown Lilies Childcare respects your privacy and is committed to protecting the personal information of parents, carers, children, and website visitors.

This Privacy Policy explains what information we collect, why we collect it, how we use it, how we keep it safe, and your rights.

1. Who We Are

Brown Lilies Childcare is a childcare provider based in Luton, Bedfordshire.

Business Name: Brown Lilies Childcare
Email: Brownliliesbabies@gmail.com
Phone: 01582 876726 / +447391412147
Address: 300 Hitchin Road, Luton, LU2 OEU

2. Information We May Collect

We may collect personal information when you contact us, complete an enquiry form, request childcare information, book a visit, or register your child.

This may include:

Parent or guardian name
Email address
Phone number
Child’s name
Child’s age or date of birth
Preferred start date
Care requirements
Preferred days or sessions
Emergency contact information
Medical, allergy, or dietary information, where needed
Information you choose to include in a message or enquiry
Consent and permission details
Website usage information, such as cookies or basic analytics, where used

3. Why We Collect Your Information

We collect and use personal information to:

Respond to enquiries
Arrange visits or childcare discussions
Provide childcare services
Complete registration and contract documents
Keep children safe and supported
Manage daily care, routines, and communication with parents
Understand medical, allergy, dietary, or additional support needs
Meet safeguarding, health and safety, legal, or regulatory responsibilities
Keep accurate childcare records
Improve our website and communication

4. How We Use Children’s Information

Children’s information is handled carefully and only used for childcare, safeguarding, health, safety, communication, and legal purposes.

This may include using information to understand a child’s needs, provide safe care, support development, record important information, and contact parents or emergency contacts when necessary.

The ICO explains that organisations handling children’s personal information must consider child-specific protections under UK GDPR, and children have data protection rights over their personal information.

5. Lawful Basis for Using Information

We only use personal information when we have a lawful reason to do so. This may include:

Consent — for example, when you give permission for us to contact you or use certain information.
Contract — when information is needed to provide childcare services or manage a childcare agreement.
Legal obligation — when we need to keep records or share information to meet legal, safeguarding, health and safety, or regulatory requirements.
Vital interests — where information may be needed in an emergency.
Legitimate interests — where we need to manage enquiries, communicate with parents, and operate Brown Lilies Childcare in a fair and reasonable way.

6. Who We May Share Information With

We do not sell personal information.

We may share information only when necessary, such as with:

Parents or guardians
Emergency services
Medical professionals, where needed
Safeguarding authorities
Local authority or regulatory bodies
Ofsted or relevant childcare authorities
Website, email, hosting, or IT service providers who help us run our website and communication systems

Information may also be shared where required by law or where there is a safeguarding concern. The ICO notes that children’s data may be shared where there is a compelling reason, such as safeguarding, while considering the best interests of the child.

7. How We Keep Information Safe

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, or alteration.

This may include:

Keeping records secure
Limiting access to information
Using password protection where appropriate
Keeping digital files and emails secure
Only sharing information when necessary
Reviewing information and deleting it when no longer needed

8. How Long We Keep Information

We only keep personal information for as long as necessary for childcare, enquiry, legal, safeguarding, insurance, or regulatory purposes.

Enquiry information may be kept for a limited time if you do not continue with childcare. Childcare records may need to be kept for longer where required by law, safeguarding, insurance, or regulatory guidance.

9. Photos and Images

We will only use children’s photos for website, social media, displays, or promotional purposes where clear permission has been given by the parent or guardian.

Parents can withdraw photo consent at any time by contacting Brown Lilies Childcare.

The ICO advises that extra care is needed when using children’s personal data, including photos, to ensure their interests are protected.

10. Website Cookies

Our website may use cookies or similar technologies to improve functionality, understand website use, or support features such as forms and chat tools.

Essential cookies may be needed for the website to work properly. Non-essential cookies should only be used with consent where required.

The ICO states that websites must tell users about cookies, explain what they do and why, and get consent for non-essential cookies.

11. Your Rights

You may have the right to:

Ask what personal information we hold about you or your child
Ask for a copy of your personal information
Ask us to correct inaccurate information
Ask us to delete information, where appropriate
Ask us to restrict or object to certain uses of information
Withdraw consent, where we rely on consent
Complain to the Information Commissioner’s Office if you are unhappy with how your information is handled

12. Contact Us

For any questions about this Privacy Policy or how your information is handled, please contact:

Brown Lilies Childcare
Email: Brownliliesbabies@gmail.com
Phone: 01582 876726 / +447391412147
Address: 300 Hitchin Road, Luton, LU2 OEU

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.