Privacy Notice
How we look after your family’s dataLittle Vita’s Nursery is part of Vita et Pax Preparatory School. The data controller for all personal data collected by the nursery is Vita et Pax School (Cockfosters) Limited (Company No. 01524865, Registered Charity No. 281566), registered office 6a Priory Close, Green Road, Southgate, London N14 4AT.
This notice summarises, for nursery families, the school’s Governing-Body-approved Data Protection Policy (PDF), approved 1 March 2026 and reviewed annually. The full policy is the authoritative document.
What we collect and why
To care for and educate your child we collect personal data such as names, dates of birth, contact details, health and dietary information, developmental records, photographs, attendance and billing information. We process this data to deliver the Early Years Foundation Stage, keep children safe and healthy, administer sessions and fees, claim government funding on your behalf, and communicate with you.
Our lawful bases under UK GDPR include: contract (your agreement with the nursery), legal obligation (safeguarding, welfare and statutory duties), public task (our educational function), vital interests (medical emergencies), legitimate interests (site security and IT monitoring) and, where appropriate, consent (for example, use of photographs in marketing — which you can withdraw at any time). Special category data such as health or dietary needs is processed under the additional safeguards the law requires.
Who we share data with
We share data only where necessary: with the Department for Education and the local authority (for example, early-years funding claims), with health and safeguarding professionals where a child’s welfare requires it, and with carefully chosen suppliers who process data on our behalf under data-processing agreements (for example, our management-information and accounting systems). We never sell personal data. Data protection law does not prevent information being shared to keep a child safe.
CCTV and IT monitoring
Security cameras operate on the premises for safety and security, in accordance with the ICO’s code of practice; footage is kept for a maximum of 30 days unless required for an investigation. Internet traffic on the school network is filtered and monitored to meet statutory safeguarding requirements.
How long we keep data
| Data category | Retention period |
|---|---|
| Pupil records | Until the child's 25th birthday |
| Safeguarding records | Until the child's 25th birthday (or longer if required) |
| Accident / incident records | At least 3 years (or to age 25 for children) |
| CCTV footage | 30 days (unless needed for an investigation) |
| Financial records | 7 years (HMRC requirements) |
The school’s Retention of Records schedule sets out the full list of retention periods.
Your rights
- Access — ask for a copy of the personal data we hold about you or your child (a Subject Access Request) — we respond within one month
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete data in certain circumstances (not absolute — safeguarding and legal obligations may override it)
- Restriction — ask us to restrict how we use data in certain circumstances
- Portability — receive your data in a structured, commonly used format
- Objection — object to processing based on our legitimate interests
- Withdraw consent — where consent is the basis for processing, withdraw it at any time
Contact and complaints
To exercise any of these rights, or to ask a question about how we handle data, contact the school office on 020 8449 8336 or email hello@littlevitasnursery.co.uk and ask for the Data Protection Lead. Contact details for the data protection team are listed in the full Data Protection Policy.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office: www.ico.org.uk — 0303 123 1113.