Privacy Notice — Little Doves by Feltonfleet

1. Who we are

Little Doves is a nursery at Feltonfleet School, Byfleet Road, Cobham, Surrey KT11 1DR.

The data controller for information collected through this website is Feltonfleet Enterprises Ltd (company number 16817370), registered with the Information Commissioner's Office under reference ZC267210.

You can contact us about anything in this notice at littledoves@feltonfleet.co.uk or on 01932 862264.

Our Data Protection Officer is Glen Jones, Bursar. You can reach him through the school office: Feltonfleet School, Byfleet Road, Cobham, Surrey KT11 1DR, or on 01932 862264. If you are writing by email, send it to littledoves@feltonfleet.co.uk marked for the attention of the Data Protection Officer.

2. What this notice covers

This notice covers only the information you send us through this website — the enquiry form and the registration form. Once a child joins the nursery, the school's own privacy notice for pupils and families applies instead.

3. What we collect, and when

We only collect what you type into a form. We do not track you around the site, and we do not buy or receive information about you from anyone else.

Enquiry form

About you: Your full name, email address and mobile number.
About your child: Their name if you have chosen one, their date of birth or due date, and the date you would like them to start.
Anything else: Whatever you choose to write in the free-text box.

Registration form

About your child: First name, last name, the name they prefer, date of birth, gender, home address and postcode, and the languages spoken at home.
Health and support needs: Health requirements including allergies, and any special educational needs. This is special category data and is treated with extra care — see section 5.
Parents and carers: For each of up to two parents or carers: their relationship to the child, full name, address if different from the child's, mobile number, home telephone, email address, occupation, work number, work address, and whether they hold parental responsibility.
Emergency contacts: For each of up to two emergency contacts: full name, relationship to the child, address, postcode, telephone number and mobile number.
Your booking: Preferred start date and the days and sessions you would like.
Your declaration: The confirmations you tick, the name you type as your signature, and the date.

Our web host also records the usual technical details of any web request — your IP address, browser type and the time — in its server logs. These are used to keep the site running and secure, and are not used to identify you.

4. Why we use it, and our lawful basis

Data protection law requires us to have a lawful basis for using your information. Ours depends on which form you have used.

Making an enquiry: We use your details to reply to you and to talk to you about a place. Our lawful basis is our legitimate interests (UK GDPR Article 6(1)(f)) — you have asked us about the nursery, and a reply is what you would expect. You can ask us to stop at any time.
Registering your child: We use the information to process your registration, offer and hold a place, and prepare to care for your child. Our lawful bases are a contract with you, or the steps you have asked us to take before entering one (Article 6(1)(b)), together with our legal obligations (Article 6(1)(c)) — the Early Years Foundation Stage statutory framework requires every provider to record particular information about each child in its care.
Emergency contacts: We hold the details of the people you name so that we can reach someone if we cannot reach you. Our lawful basis is legitimate interests (Article 6(1)(f)). Please do let those people know you have given us their details.

We do not use your information to make any decision about you by automated means, and we never use it for profiling or advertising.

5. Health, allergies and special educational needs

The registration form asks about your child's health, allergies and any special educational needs. Data protection law calls this special category data and sets a higher bar for using it. We ask for it so that we can keep your child safe and give them the right support from their first day, and because the Early Years Foundation Stage requires us to hold it before your child starts.

As well as a lawful basis under Article 6, we need a further condition under Article 9. We rely on the following:

Day to day: Substantial public interest (Article 9(2)(g)), relying on the condition for statutory and government purposes in Schedule 1, Part 2, paragraph 6 of the Data Protection Act 2018. We rely on this because the Early Years Foundation Stage statutory framework requires us to record a child's dietary requirements, allergies and health needs, and because we have duties under the Children and Families Act 2014 and the SEND Code of Practice.
In an emergency: Vital interests (Article 9(2)(c)) — if we ever need to act on this information to protect your child's life or health and cannot ask you first.
Safeguarding: Where the information concerns protecting a child from harm, the safeguarding of children condition in Schedule 1, Part 2, paragraph 18 of the Data Protection Act 2018.

Only staff who need this information in order to care for your child will see it.

Where we rely on a Schedule 1, Part 2 condition the law also requires us to keep an Appropriate Policy Document setting out how we comply and how long we keep the information. We keep one, and you can ask us for a copy.

6. Who else sees it

We do not sell your information, and we do not share it for marketing. It is seen by the Little Doves admissions team, and by the following suppliers who process it on our behalf and only on our instructions:

Netlify: Hosts this website and receives form submissions. Netlify is based in the United States, so your information is transferred outside the UK — see section 7. Submissions are also stored in our Netlify account until we delete them.
Microsoft: Provides the school's email. A copy of each submission arrives as an email in the Little Doves mailbox.

We may also share information where the law requires it, or where there is a safeguarding concern about a child.

7. Information sent outside the UK

Netlify, the company that hosts this website, stores form submissions on servers in the United States.

Where information leaves the UK it must still be protected to UK standards. Our contract with Netlify includes the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses — the safeguard approved by the Information Commissioner's Office for transfers of this kind. It gives your information the same legal protection abroad as it has here.

8. How long we keep it

If your enquiry does not lead to a registration, we delete it after 12 months.

Registration records are kept for seven years after your child leaves the nursery.

If your child does not take up a place, tell us and we will delete what we hold sooner.

9. How we keep it safe

Everything you send through this site travels over an encrypted connection (HTTPS/TLS). The site sets no cookies and loads nothing from third-party advertising or analytics services.

Access to submissions is limited to staff who need it. We review these arrangements as the nursery opens.

10. Cookies

This website does not use cookies. It stores nothing on your device, uses no analytics or tracking, and embeds nothing from social media. The typefaces are served from this website rather than from an outside service, so no third party is told that you visited.

That is why you will not see a cookie banner here. If we ever add anything that needs your consent — website statistics, for example, or an embedded map or video — we will ask you first and update this notice.

11. Children's information

The forms on this site are for parents and carers to complete, not children. The information you give us about your child is treated as sensitive, and the rights set out below can be exercised on your child's behalf while they are too young to do so themselves.

12. Your rights

Under UK data protection law you have the right to:

Be informed about how we use your information — that is what this notice is for.
Ask for a copy of the information we hold about you or your child.
Have it corrected if it is wrong or incomplete.
Have it deleted in certain circumstances.
Ask us to stop using it for a while, if you have questioned its accuracy or our reasons for holding it.
Object to us using it in certain circumstances.
Ask for it to be transferred to you or another organisation in a portable format, where that applies.
Withdraw your consent at any time, where we are relying on consent.

To exercise any of these, email littledoves@feltonfleet.co.uk. We will respond within one month. There is normally no charge.

13. How to complain

If you are unhappy with how we have handled your information, please tell us first at littledoves@feltonfleet.co.uk so that we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's independent regulator for data protection. You can do that without complaining to us first.

Online: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

14. Changes to this notice

If we change how we use your information we will update this page and change the date below. Where the change is significant we will tell families directly.

Last updated: 13 October 2026.

How we look after your information