YOUR INFORMATIONPrivacy Notice
How we handle information when you visit our website, contact us or enquire about a nursery place.
Last updated: 9 November 2026
1. Who is responsible for your information?
The data controller is Little Ivy Schools Limited, 142 Bo-Peep Nursery, Sinclair Road, London, England, W14 0NL. Email: [email protected]. Little Ivy Schools Limited operates Bo Peep Nurseries and determines how admissions enquiry information is used. Bo Peep is part of IMA Group.
2. Information we collect
When you contact us or enquire about admissions, we may collect your name, contact details, home address, your child's name and date of birth, preferred nursery, proposed start date, attendance and childcare funding preferences, tour requests, and any information you choose to include in correspondence. Website security services may also process technical information such as IP address, browser and verification signals. Please do not include medical diagnoses, safeguarding details or other sensitive information in an initial website enquiry.
3. Why we use information and our lawful bases
We use information to respond to enquiries, arrange tours, consider availability, manage admissions and correspondence, operate and secure our website, prevent spam and comply with applicable legal obligations. Depending on the activity, our lawful bases are legitimate interests (handling enquiries and securing our services), taking steps at your request before entering a contract, compliance with legal obligations, or consent where specifically required (such as certain optional marketing or non-essential cookies). Acknowledging this notice is not consent to all processing. We do not sell your personal information or use admissions enquiries for unrelated marketing without an appropriate lawful basis.
4. Children's information and sensitive information
We treat children's information with particular care and restrict access to those who need it for admissions purposes. If a child enrols, separate privacy information may apply to nursery records, learning observations, safeguarding and health information. If special category information is needed, we will explain how it can be provided securely and identify an appropriate additional legal condition.
5. Who receives information
Information may be accessible to authorised nursery staff and relevant administrative support personnel, and to service providers supporting our website, admissions application and Bo Peep Operating System (BPOS). We may also disclose information to professional advisers, regulators, safeguarding agencies or other authorities where legally required or permitted. Providers processing information on our behalf must be subject to appropriate data protection arrangements.
6. Cloudflare, Google Cloud and BPOS
Our website uses Cloudflare for website delivery and protection, including Turnstile anti-spam verification. Admissions form submissions are sent to an application hosted on Google Cloud Run, configured in Google's London region, for processing. Admissions enquiry records are managed in BPOS (Bo Peep Operating System), our proprietary operational and customer relationship management system. The London configuration of the admissions application does not necessarily mean that all related data, logs, support access or BPOS storage remain in the United Kingdom.
7. International transfers
Some technology providers operate internationally. Where personal information is transferred outside the United Kingdom and UK data protection law requires safeguards, we will use an applicable lawful transfer mechanism, such as adequacy regulations or appropriate contractual safeguards. Specific provider arrangements are kept under review.
8. Retention
Admissions enquiry records are retained in BPOS for six years under our retention policy, then securely deleted or anonymised unless a longer period is required or justified by law. Where a child enrols, relevant information may become part of nursery records governed by separate retention requirements. Technical security and application logs may have different retention periods.
9. Security
We use appropriate technical and organisational measures designed to protect information from unauthorised access, loss, misuse or disclosure. Access is restricted to authorised personnel according to their responsibilities. No electronic system can be guaranteed completely secure.
10. Your rights
Subject to applicable conditions and exemptions, you may request access to or correction of your personal information, ask for erasure or restriction, object to processing based on legitimate interests, request data portability where applicable, and withdraw consent where processing relies on it. Contact us at [email protected]. We may need to verify your identity.
11. Cookies and similar technologies
We use technologies necessary for website operation and security, including Cloudflare Turnstile. If we introduce optional analytics, advertising or other non-essential technologies requiring consent, we will provide appropriate information and obtain consent before using them. You can also manage cookies in your browser settings.
12. Questions and complaints
Please contact us first if you have concerns. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.
13. Changes to this notice
We may update this notice to reflect changes to our services, systems or legal obligations. The latest version will be available on this website with its revision date.