Welcome to Little Lily's Academy

This practice privacy notice explains how Little Lily’s Academy uses personal information about children, parents and staff.

Data we collect

• Child information: name, date of birth, health & dietary needs, unique identifiers, assessment records.
• Parent/carer contact details.
• Staff records for employment and safeguarding checks.

Why we process data

• To provide childcare and meet our statutory obligations under EYFS.
• To safeguard children and meet legal duties (safeguarding, health & safety).
• To manage staff employment and payroll.

Lawful basis

We process personal data because it is:
• Necessary for the performance of a contract (childcare agreement).
• Required to meet legal obligations (safeguarding, Ofsted registration).
• In some cases, based on parental consent (photography for newsletters/website) — parents may withdraw consent at any time.

Sharing & retention

• We may share data with statutory bodies (local authority, Ofsted), health professionals, or emergency services where appropriate.
• We keep records in line with statutory guidance and our data retention policy. If you would like a copy of the full privacy notice, data retention schedule or to exercise your data rights, please contact the Academy Manager at enquiries.littlelilysacademy@gmail.com.

Full privacy notice

A full GDPR privacy notice (detailed) is available to download here: [link to full notice].