General Privacy Notice
How we process your personal information and what your rights are
This Privacy Notice informs you about how we, Leaping Toads Limited ("Leaping Toads"), process your personal information and what your rights are. In this notice, "you" refers to any individual whose personal information we process, including children, parents or carers, staff, visitors, and other individuals who interact with us.
What personal information does Leaping Toads process?
Personal information
To provide you with support and childcare services, we need to collect and process information about you. This is your personal information. Personal information is information that relates to a living person, who can be directly or indirectly identified from the data in question or together with other information – and this information must relate to an individual in order to be identified as personal information. For example, this can include:
your name
location
date of birth
age
gender
address
postcode
National Insurance Number / National Health Service Number
Photographs or video (with consent)
Special category personal information
ome information is more sensitive and needs more protection due to its sensitivity. It is often information you would not want widely known and is personal to you. This is likely to include anything that can reveal your:
physical or mental health
development, special educational needs, or disabilities
religious or philosophical beliefs
ethnicity
criminal history
sexuality (where this information is provided)
biometric data (where this information is provided)
trade union membership (where this information is provided)
Information is collected from you when you contact us, enquire or enrol, or from someone who is concerned about you, or from partner organisations or other agencies. The information we collect is limited to what is necessary in order to provide you with services and/or support. In some circumstances where it is optional for you to provide certain information, this will be explained to you.
Why are we able to process your personal information?
The law expects us to define what data we will process and why we will process it before we can use your data for any purpose. We cannot process your data unless a lawful basis has been identified.
There are six lawful bases that we can rely on:
Legal obligation—we need to process your information to comply with the law
Public task—we need to process your information to provide early years and childcare services, including safeguarding children
Contract—we need to process your information as part of a contract
Vital interest—we need to process your information to protect someone's life in an emergency
Consent—we need your permission to use your personal data
Legitimate interest—we need to process this information for legitimate interests such as preventing fraud, managing our workplace, and operating our nursery effectively to provide safe and reliable care for children and families
Where Leaping Toads is relying on your consent to process your personal data, you have the right to withdraw your consent at any time. If you are unsure how to withdraw your consent please contact the Data Protection Officer at admin@ltlt.co.uk.
You do not have the right to withdraw consent if Leaping Toads is not relying on your consent to process your data.
For what purpose does Leaping Toads process your personal data?
Your personal data is processed to enable Leaping Toads and the organisations we work with to provide a range of services to fulfil our duties – in the most effective and efficient way, for example:
-
We process data on individuals and families in order to provide support and services
-
We process data to maintain accounts and records and to support effective administration of childcare services
-
We also sometimes process your information for monitoring and planning purposes in a way which protects your privacy
-
We also process data to help keep children, families, visitors and staff safe – such as the appropriate use of CCTV where in place
-
We may need to process your data for other reasons; where this applies further information will be provided in relevant service-specific privacy statements or policies
Who do we share your information with?
In order to deliver services, it may be necessary to share your personal information. This could be with the local authority or with other organizations we are working with in order to provide you with appropriate support for children and families.
Any sharing of personal information is governed by the UK GDPR and Data Protection Act 2018 and we have established processes for complying, including ensuring the data is shared and used as defined and agreed for a specific reason, for a specific period of time. We only share when it is necessary to do so, and any sharing is kept to a minimum.
We may also share personal information when we feel there's a good reason that's more important than protecting someone's privacy. This doesn't happen often, but we may share your information:
-
In order to detect and prevent crime and fraud, or if there are serious risks to the public, our staff or to other professionals
-
To protect a child or to protect adults who are thought to be at risk of harm or neglect
-
If we're worried about your safety or the safety of others
We will not share your data with organisations outside the United Kingdom, unless we are required by other UK or European law for safety and security reasons. We will never share your data for commercial reasons or sell it.
How does Leaping Toads protect your information?
-
We will do what we can to make sure we hold records about you (on paper and electronically) in a secure way, and we'll only make them available to those who have a right to see them. Examples of our security include:
-
Encryption – information is hidden so that it cannot be read without special knowledge (such as a password)
-
Controlling access – to systems and networks allows us to stop people who are not allowed to view your personal information from getting access to it
-
Data stewardship – a way for us to be clear about who is responsible for what data and sets out clearly who has access, limiting access to only those who need it
-
Staff training – all our staff undertake annual mandatory data protection training
-
Regular testing – of our technology and ways of working including keeping up to date on the latest security updates
If Leaping Toads is processing your data, what are your rights?
-
GDPR sets out the rights you have if an organisation is using your information – this is known as individual rights. Your rights are set out below and can be exercised by emailing the Data Protection Officer on the details below unless otherwise stated.
Right to be informed
This general privacy notice is an example of how we keep you informed.
Right of access
You can request a copy of the information that we hold about you. This is referred to as a Subject Access Request.
Right of rectification
If you think that some information we hold about you is inaccurate or incomplete, you have the right to request that this be corrected.
Right to erasure
In certain circumstances, you can ask for us to erase any personal information we hold on you.
Right of portability
You have the right to ask for your personal information to be given back to you or another service provider of your choice in a commonly used format. This only applies to personal information we process where consent is the lawful basis, or for the performance of a contract, and the processing of your information is automated.
Right to restrict processing
In certain circumstances you may have the right to request that we limit the way we use your data.
Right to object
You have the right to challenge certain types of processing. The right to object only applies in certain circumstances and depends on the lawful basis for processing. You have the absolute right to object to the processing of your personal data if it is for direct marketing purposes.
Rights related to automated decision-making
This provides a right not to be subject to a decision based solely on automated processing, including profiling, which has a legal or similarly significant effect on you.
How to lodge a complaint
If you have a complaint regarding the processing of your personal information, then please contact Leaping Toads' Data Protection Officer at admin@ltlt.co.uk.
You also have the right to lodge a complaint with the supervising authority, the Information Commissioner's Office (ICO), at any time. Should you wish to exercise that right, the full details are available on the ICO website.
Contact Us About Data Protection
Leaping Toads, 1-4 Rectory Road, Dagenham RM10 9SA
FAO Data Protection Officer
Data protection is regulated by the Information Commissioner's Office.
Last reviewed: 16 May 2025
