Privacy policy
Last updated: DATE TO CONFIRM
[BRACKETED] item with your confirmed details and have the final text reviewed by a
suitably qualified person before relying on it — particularly given the
processing of children's data.
This policy explains how Nursery Room Ltd ("we", "us", "our"), the provider of Yenlio, handles personal data through this website and the Yenlio platform. We take particular care with children's data, in line with the UK GDPR, the Data Protection Act 2018, the ICO's Age Appropriate Design Code (the "Children's Code"), and the EYFS statutory framework.
Who we are
Nursery Room Ltd is a company registered in England & Wales (company number 11237964), based in Welling, Kent. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
For any data protection query, contact our data protection lead at [DATA PROTECTION CONTACT EMAIL].
Controller and processor roles
For children's data held within a setting's Yenlio account, the setting (the childminder, nursery, or provider) is the data controller and decides how that data is used. Yenlio acts as a data processor on the setting's behalf, processing data only on the setting's documented instructions and as set out in our data processing terms.
For data we collect directly through this website — for example, when you book a demo or contact support — Nursery Room Ltd is the data controller.
What we collect
Through this website, we may collect:
- Contact details you give us (name, email, setting name, role) when you request a demo or raise a support ticket.
- The content of messages you send us.
- Limited technical data needed to keep the site secure and working (for example, through our edge provider's security checks). We do not use advertising or cross-site tracking cookies.
Children's personal data is processed within the Yenlio platform on behalf of settings, not collected through this marketing website. How that data is handled is governed by our data processing terms with each setting.
Why we use it (lawful bases)
- To respond to your enquiry or provide support — on the basis of our legitimate interests, or taking steps at your request before entering a contract.
- To provide and administer the Yenlio service — to perform our contract with your setting.
- To keep our services secure — on the basis of our legitimate interests in protecting the platform and the people whose data it holds.
- To meet legal obligations — where the law requires it.
Who we share it with
We use a small number of trusted providers to run Yenlio, each acting under appropriate data protection terms. These include providers for hosting and infrastructure, email delivery, customer support, payments, and security. We do not sell personal data, and we do not share it for advertising.
Where data is held
We host and process personal data within the UK and/or European Economic Area where reasonably possible. Where any provider processes data outside the UK/EEA, we put appropriate safeguards in place as required by law. Our AI features are configured to process data within the EU.
How long we keep it
We keep website enquiry and support data for no longer than necessary — typically [RETENTION PERIOD, e.g. 24 months] from last contact, unless we need to keep it longer for legal reasons. Retention of data within the Yenlio platform is determined by each setting as controller, in line with EYFS requirements and the terms agreed with that setting.
Your rights
Under UK data protection law you have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Where children's data held in Yenlio is concerned, please direct requests to the relevant setting as controller; we will support them in responding.
To exercise any right relating to data we control, contact [DATA PROTECTION CONTACT EMAIL]. You also have the right to complain to the ICO at ico.org.uk, though we'd appreciate the chance to help first.
Cookies
This site uses only the cookies necessary for it to function and stay secure. We do not use advertising or analytics cookies that track you across sites. [Confirm and expand if any analytics are added.]
Changes to this policy
We may update this policy from time to time. When we do, we'll change the "last updated" date above, and for significant changes we'll take reasonable steps to let affected users know.
Contact
Nursery Room Ltd — [DATA PROTECTION CONTACT EMAIL]. Registered in England & Wales, company number 11237964.