Who we are
LondonEY (London Early Years) is run by LondonEY (“we”, “us”). We are the controller of the personal data described here.
- Contact for privacy matters: hello@londonearlyyears.com, or use the contact page
The short version
- You can browse LondonEY without giving us any personal data. We set no cookies and use no tracking or advertising tools.
- We collect personal data only when you send us a form or pay for a sponsorship.
- We never sell your data and we do not send you marketing emails you have not asked for.
- We publish public information about organisations (nurseries, schools). We do not publish names or addresses of childminders.
- You have rights over your data. See your rights.
What we collect and why
| When | What we collect | Why | Lawful basis |
|---|---|---|---|
| Enquiry or contact form | Your name, email address, your message, and optionally your phone number and your child’s age. We also store the page or setting you were looking at, a truncated browser user-agent string and a one-way hash of your IP address (not the IP address itself). | To read and reply to you | Legitimate interests (answering what you asked) |
| Correction form | The page and the correction, any evidence link you add, and optionally your name and email. We also store a one-way hash of your IP address and a truncated browser user-agent string. | To check and fix the data | Legitimate interests (keeping the directory accurate) |
| Claim your listing form | Your name, role, email and phone, the setting and its Ofsted number, and what you ask us to change. We also store a one-way hash of your IP address and a truncated browser user-agent string. | To verify you can speak for the setting and update its listing. We verify by hand. | Legitimate interests; and consent for any photos or text you provide for publication |
| Sponsorship | Your name, business name, email, billing details and subscription status. Card details are handled by Stripe; we never see your full card number. | To set up and bill the sponsorship, keep accounts, and respond to you | Contract; and legal obligation (keeping accounting records) |
| Using the site | Technical data your browser sends: IP address, device and browser type, pages requested, date and time. Processed by Cloudflare, which hosts the site. | To deliver pages, keep the site secure and prevent abuse | Legitimate interests |
| Visitor statistics | Aggregate page views and referrers via Cloudflare Web Analytics, which is cookieless. | To see which pages are useful | Legitimate interests |
| Sponsored link clicks | Each counted click on a sponsored slot is recorded with the slot, the page it was on, the time, a one-way hash of your IP address and a truncated browser user-agent string. We never store the IP address itself and we do not use this to identify you. | To report to sponsors and detect misuse | Legitimate interests |
| Forms spam protection | Signals checked by Cloudflare Turnstile to tell people from bots | To protect forms from abuse | Legitimate interests |
If you give us details, please do not include information about children, such as their names. We do not need it.
Information about settings that comes from public sources
LondonEY lists nurseries, pre-schools and schools using public data from Ofsted, the Department for Education, the Office for National Statistics and other sources set out on the data and methodology page. Most of this is information about organisations, not people.
Some of it can relate to a person, for example when a sole trader runs a setting or when a business has a public rating. To limit this:
- We do not publish childminders’ names, home addresses or postcodes. We show borough totals only.
- We leave out the name of an Ofsted “registered person” when it looks like an individual.
- We do not copy Google review text and we do not show reviewers’ names.
- We use the data only to help parents find and understand childcare.
Our lawful basis is legitimate interests: helping parents find accurate, official information. We have considered the effect on the people concerned and believe it is proportionate. Because we did not collect this data from you, we are telling you here under Article 14 of UK GDPR. If it is about you and you want it corrected or removed, tell us and see your rights below.
Cookies
LondonEY sets no cookies of its own and does not use Google Analytics. Cloudflare Turnstile is essential to protect forms. The Google map loads only after you click a button, and Google’s own cookies apply after that. Full detail is on the cookies page.
Who we share data with
We use these providers (our “processors”) to run the service. They act on our instructions.
| Provider | What for |
|---|---|
| Cloudflare | Hosting, our database (D1), file storage (R2), form spam protection (Turnstile), visitor statistics (Web Analytics), email routing |
| Stripe | Taking monthly sponsorship payments. Stripe is also a controller of payment data for fraud prevention and legal reasons. |
| Airtable | Our sales and operations records: sponsor contacts, claims, corrections and payments |
| Cloudflare Email Routing | Sending us a notification when a form is submitted. We use it for these owner notifications only; we do not send marketing email. |
| GitHub, Inc. (United States) | A nightly copy of our database, kept in a private GitHub repository away from Cloudflare so we can recover |
| MapTiler | Delivers map tiles on area pages. Your IP address and the map area you view are sent to them when a map loads. |
| Only if you click “Load map”: Google receives your IP address and sets cookies under its own policy |
We may also share data where the law requires, to protect our rights, or with professional advisers under confidentiality.
We do not sell personal data. We do not pass your enquiry to a nursery, school or sponsor unless you ask us to. Enquiries come to us only.
Transfers outside the UK
Some providers are based in, or may process data in, the United States or other countries. Where that happens we rely on a UK adequacy decision (for example the UK-US data bridge where the provider is certified) or on the UK International Data Transfer Agreement or Addendum with appropriate safeguards.
How long we keep data
| Data | Kept for |
|---|---|
| Enquiries and contact messages | 12 months after the last message |
| Correction requests | 12 months after the correction is resolved |
| Claim records and the proof of your consent | While the listing is active, then 12 months, so we can show what you agreed to |
| Sponsor billing and accounting records | 6 years from the end of the financial year, as UK company and tax rules require |
| Server and security logs | Up to 30 days, unless needed to investigate abuse |
| Database backups | Rolled over within 30 days; older copies are deleted |
| Aggregate statistics | Kept as anonymous figures |
When the period ends we delete the data or make it anonymous.
Your rights
Under UK GDPR you have the right to:
- be told what we hold about you and get a copy (access);
- have wrong data corrected;
- have your data deleted (erasure), in some circumstances;
- restrict how we use your data, in some circumstances;
- move your data to another provider (portability), where it applies;
- object to our use based on legitimate interests; and
- withdraw consent at any time, where we rely on consent (this does not affect earlier use).
We do not make decisions about you by automated means that have legal or similarly significant effects.
To use a right, contact us. We will normally answer within one month. We may need to confirm who you are. There is no charge unless a request is clearly unfounded or excessive.
Complaints
If you are unhappy with how we use your data, please tell us first so we can try to put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Children
LondonEY is for adults looking for childcare and for the people who run it. It is not aimed at children, and we do not knowingly collect data from them.
Security
Our forms are protected by Turnstile, and our site and data sit on Cloudflare’s infrastructure over encrypted connections. Provider claims are checked by hand, and we have no logins or stored passwords for visitors. No system is perfectly secure; if there is a breach that affects you, we will tell you and the ICO where the law requires.
Changes to this notice
We will update this page when our practices change and change the date at the top. We will make clear any significant change.