top of page

Privacy Policy

A legal disclaimer
Privacy Policy for Ellie's Nursery Epping Limited

Effective Date: December 19, 2023

Last Updated: March 19, 2026

​

Ellie's Nursery Epping Limited ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This policy informs you how we look after your personal data when you visit our website or use our services and tells you about your privacy rights.

​

Who We Are (The Data Controller)

We are the "data controller" responsible for your personal data.

​

The Data We Collect

We may collect, use, and store different kinds of personal data about you:

  • Identity Data: Name, username, email

  • Contact Data: Email, and phone numbers.

  • Technical Data: IP address, login data, browser type, and location.

  • Usage Data: Information about how you use our website and services.

  • Marketing Data: Your preferences in receiving marketing from us.

​

How We Use Your Data & Lawful Basis

We only use your data when the law allows us to. Most commonly, we use it for:​

  • Legitimate Interests: To improve our services and marketing (where your rights don't override these interests).

  • Recognised Legitimate Interests (2026 Update): Under the DUAA 2025, we may process data for specific public interests like crime prevention or safeguarding without a balancing test.

  • Consent: Where you have opted-in (e.g., for our newsletter).

​

Cookies and Tracking

We use cookies to enhance your experience.

  • Essential Cookies: Necessary for the website to function.

  • Non-Essential Cookies (2026 Update): Per the latest UK regulations, we may use certain low-risk cookies (for analytics or basic functionality) without prior consent, provided we give you clear information and an easy opt-out mechanism.

​

International Transfers

If we transfer your data outside the UK (e.g., to a US-based server), we ensure a similar degree of protection is afforded to it by using Standard Contractual Clauses (SCCs) or the UK Extension to the Data Privacy Framework.

​

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically [7 years] for financial records).

​

Your Legal Rights

Under the UK GDPR, you have the right to:

  • Request Access (SAR): Receive a copy of your data. (Note: We may "stop the clock" on our 30-day response time if we need to clarify a complex request).

  • Request Correction or Erasure.

  • Object to Processing.

  • Request Data Portability.

​

How to Complain (New 2026 Requirement)

If you have a complaint about how we handle your data, please contact us at [Email/Link to Complaint Form].

  • We will acknowledge your complaint within 30 days.

  • We will investigate and respond without undue delay.

  • You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

bottom of page