1. Purpose of the Policy
This policy explains how Noah’s Ark Nursery collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Early Years Foundation Stage (EYFS) statutory framework. It also outlines parents’ rights and the nursery’s responsibilities regarding CCTV, filming, and photography on the premises.
2. Scope
This policy applies to:
– All personal data relating to children, parents, carers, staff, and visitors
– All digital and paper records, photographs, video recordings, and CCTV footage
– All staff, volunteers, contractors, and visitors to the nursery
3. Lawful Basis for Processing Data
Noah’s Ark Nursery processes personal data under the following lawful bases:
– Consent (for example, parental consent for non-essential photographs or videos)
– Contract (to deliver childcare services)
– Legal obligation (to comply with safeguarding and EYFS requirements)
– Legitimate interests (such as the use of CCTV for security)
– Vital interests (to protect someone’s life)
4. Types of Data Collected
We may collect and process the following data:
– Child records including personal details, health and medical information, development records, and assessment data
– Parent and carer contact details and emergency contacts
– Staff and volunteer records, including DBS checks and employment information
– Attendance registers, accident and incident records
– Photographs, video recordings, and CCTV footage for security, learning, and promotional purposes (where consent is given)
5. CCTV Use
– CCTV is in operation in designated areas of the nursery for the purposes of safeguarding, security, and monitoring the safety of children, staff, and visitors.
– Signs are displayed to inform all visitors of CCTV use.
– The lawful basis for CCTV use is legitimate interests.
– CCTV recordings are stored securely, retained for a maximum of 30 days unless required for an investigation, and then securely deleted.
– Access to CCTV footage is restricted to authorised personnel only.
– Parents are advised of CCTV use on registration and through this policy. Consent is not required for security use under UK GDPR.
6. Filming and Photography
– The nursery may take photographs or short video clips of children for the purposes of recording learning and development, internal displays, or secure online learning journals.
– Written parental consent is obtained for any non-essential photography or filming.
– No images or videos will be shared externally without explicit consent.
– Staff will only use nursery-owned devices for taking photographs or videos. Personal devices are strictly prohibited for this purpose.
– Parents attending events (e.g., performances, sports days) will be reminded to avoid posting images of other children on social media.
7. Data Storage and Security
– All paper records are kept in locked cabinets.
– Digital records are stored on password-protected systems with encrypted backups.
– CCTV and digital media are stored securely with access restricted to authorised staff.
– Personal data will only be accessed, processed, or shared on a need-to-know basis.
8. Data Retention
– Personal data will be retained only for as long as necessary to fulfil the purpose it was collected for, in line with statutory requirements.
– After the retention period, data will be securely destroyed or permanently deleted.
9. Sharing Data
– Data will only be shared with external agencies (such as health professionals, local authorities, or emergency services) where required by law, necessary for safeguarding, or with parental consent.
10. Rights of Individuals
Under UK GDPR, parents, carers, staff, and visitors have the right to:
– Request access to their personal data
– Request correction of inaccurate data
– Request deletion of data (where applicable)
– Restrict processing of data
– Object to certain types of processing
– Request data portability
Requests should be made in writing to the Nursery Manager.
11. Staff Responsibilities and Breach Management
– All staff must complete GDPR and data protection training.
– Staff must follow nursery procedures for secure handling, storage, and transfer of data.
– Any suspected or actual data breach must be reported immediately to the Nursery Manager.
– The Nursery Manager will assess and report breaches to the Information Commissioner’s Office (ICO) within 72 hours where required.
– Breaches of this policy may result in disciplinary action.
12. Communication with Parents
– This policy is shared with all parents upon registration and is available on request.
– Parents are informed of CCTV use and any changes to data handling practices.
– Consent forms for photography and filming are collected annually or when changes occur.
13. Review of Policy
This policy will be reviewed annually, or sooner if there are changes in legislation or the EYFS statutory framework.
Adoption Date: 25/01/2026
Name: Sabah Ali
Position: Manager/ DSL
Signature:
Noah’s Ark Nursery
Filming and Photography Consent Form
This form is used to record your preferences for how Noah’s Ark Nursery may take, use, and store photographs and videos of your child. It should be read alongside our Data Protection and GDPR Policy, which explains how we store and protect personal data, including images and recordings.
1. Purpose
We use photographs and videos for:
– Recording children’s learning and development for assessment and planning purposes
– Displaying work within the nursery
– Securely sharing progress with parents through our online learning platform
– Special events such as performances, celebrations, and trips
– Staff training and curriculum development (internal use only)
– Marketing materials or the nursery website (only with explicit parental consent)
2. Devices and Security
– All photographs and videos are taken using nursery-owned equipment only
– Images are stored securely, with access restricted to authorised staff
– Images are retained in line with our retention policy and securely deleted thereafter
3. Parent/Carer Consent
Please tick and sign to indicate your preferences. You may withdraw your consent at any time by informing the Nursery Manager in writing.
| Purpose | Yes | No | Notes/Restrictions |
| Use in child’s learning journal/record of development | ☐ | ☐ | |
| Display within nursery (e.g., wall displays) | ☐ | ☐ | |
| Use in closed, secure online parent portal | ☐ | ☐ | |
| Group photographs including other children | ☐ | ☐ | |
| Use in nursery marketing materials (e.g., brochures, posters) | ☐ | ☐ | |
| Use on nursery website | ☐ | ☐ | |
| Use on nursery social media pages | ☐ | ☐ |
4. Important Information
– Photography and filming for security purposes via CCTV is covered under legitimate interests and does not require consent. Details are in the Data Protection and GDPR Policy.
– Parents are asked not to share photographs or videos containing other children on personal social media accounts.
5. Parent/Carer Declaration
I have read and understood the Noah’s Ark Nursery Data Protection and GDPR Policy and this consent form. I understand that I can change my consent preferences at any time by contacting the Nursery Manager in writing.
Child’s Name: ________________________________________
Parent/Carer Name: ___________________________________
Parent/Carer Signature: _______________________________
Date: ___________________
Adoption Date: ______________________
Signature (Nursery Manager): ___________________________
Name: ______________________________________________
Position: ____________________________________________
Noah’s Ark Nursery
Parent Information Notice – CCTV, Filming, and Photography
Noah’s Ark Nursery uses CCTV and may take photographs or videos within the nursery for security, safeguarding, and educational purposes. This notice is to inform parents, carers, staff, and visitors about how and why images and recordings are used.
CCTV Use
– CCTV cameras operate in designated areas of the nursery to protect the safety of children, staff, and visitors.
– Signs are displayed to indicate CCTV coverage.
– The lawful basis for CCTV use is legitimate interests.
– Footage is stored securely for a maximum of 30 days unless required for investigation.
– Access is restricted to authorised staff only.
Filming and Photography
– Photographs and videos are used for recording learning, celebrating achievements, and sharing updates with parents.
– Written parental consent is obtained for non-essential uses.
– Only nursery-owned devices are used for photography and filming.
– Parents are asked not to post images containing other children on social media.
Your Rights
You have the right to request access to, or deletion of, images or recordings containing yourself or your child, where applicable under UK GDPR. Please speak to the Nursery Manager for further details.
Noah’s Ark Nursery
Filming and Photography Consent Form
This form is used to record your preferences for how Noah’s Ark Nursery may take, use, and store photographs and videos of your child. It should be read alongside our Data Protection and GDPR Policy, which explains how we store and protect personal data, including images and recordings.
1. Purpose
We use photographs and videos for:
– Recording children’s learning and development for assessment and planning purposes
– Displaying work within the nursery
– Securely sharing progress with parents through our online learning platform
– Special events such as performances, celebrations, and trips
– Staff training and curriculum development (internal use only)
– Marketing materials or the nursery website (only with explicit parental consent)
2. Devices and Security
– All photographs and videos are taken using nursery-owned equipment only
– Images are stored securely, with access restricted to authorised staff
– Images are retained in line with our retention policy and securely deleted thereafter
3. Parent/Carer Consent
Please tick and sign to indicate your preferences. You may withdraw your consent at any time by informing the Nursery Manager in writing.
| Purpose | Yes | No | Notes/Restrictions |
| Use in child’s learning journal/record of development | ☐ | ☐ | |
| Display within nursery (e.g., wall displays) | ☐ | ☐ | |
| Use in closed, secure online parent portal | ☐ | ☐ | |
| Group photographs including other children | ☐ | ☐ | |
| Use in nursery marketing materials (e.g., brochures, posters) | ☐ | ☐ | |
| Use on nursery website | ☐ | ☐ | |
| Use on nursery social media pages | ☐ | ☐ |
4. Important Information
– Photography and filming for security purposes via CCTV is covered under legitimate interests and does not require consent. Details are in the Data Protection and GDPR Policy.
– Parents are asked not to share photographs or videos containing other children on personal social media accounts.
5. Parent/Carer Declaration
I have read and understood the Noah’s Ark Nursery Data Protection and GDPR Policy and this consent form. I understand that I can change my consent preferences at any time by contacting the Nursery Manager in writing.
Child’s Name: ________________________________________
Parent/Carer Name: ___________________________________
Parent/Carer Signature: _______________________________
Date: ___________________
Adoption Date: ______________________
Signature (Nursery Manager): ___________________________
Name: ______________________________________________
Position: ____________________________________________
Noah’s Ark Nursery
Parent Information Notice – CCTV, Filming, and Photography
Noah’s Ark Nursery uses CCTV and may take photographs or videos within the nursery for security, safeguarding, and educational purposes. This notice is to inform parents, carers, staff, and visitors about how and why images and recordings are used.
CCTV Use
– CCTV cameras operate in designated areas of the nursery to protect the safety of children, staff, and visitors.
– Signs are displayed to indicate CCTV coverage.
– The lawful basis for CCTV use is legitimate interests.
– Footage is stored securely for a maximum of 30 days unless required for investigation.
– Access is restricted to authorised staff only.
Filming and Photography
– Photographs and videos are used for recording learning, celebrating achievements, and sharing updates with parents.
– Written parental consent is obtained for non-essential uses.
– Only nursery-owned devices are used for photography and filming.
– Parents are asked not to post images containing other children on social media
Your Rights
You have the right to request access to, or deletion of, images or recordings containing yourself or your child, where applicable under UK GDPR. Please speak to the Nursery Manager for further details.