Privacy Policy

Last updated: September 2026

At St Aubin Nurseries, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or make an enquiry about our services.

1. Who We Are

St Aubin Nurseries Ltd provides nursery, childcare and out-of-school services across Cardiff and the Vale of Glamorgan.

For the purposes of UK data protection law, St Aubin Nurseries Ltd is the data controller responsible for personal information collected through this website.

Registered Business Address:
St Aubin Nurseries Ltd
34 Archer Road
Penarth
Vale of Glamorgan
CF64 3HL

Telephone: 02920 708112
Email: enquiries@st-aubin.co.uk

This Privacy Policy primarily relates to information collected through our website and general enquiries.

Additional privacy information may apply to children attending our nurseries, parents and guardians, employees, job applicants and other individuals where we need to collect further information as part of providing our childcare services or operating our business.

2. Information We May Collect

Depending on how you use our website or contact us, we may collect information including:

• your name;
• email address;
• telephone number;
• the nursery or location you are interested in;
• information contained within an enquiry or message;
• information you voluntarily provide about your child;
• correspondence between you and St Aubin Nurseries;
• information submitted in connection with an employment enquiry or application;
• your IP address;
• browser and device information;
• information about how you use our website; and
• information collected through cookies and similar technologies.

We ask that you do not provide sensitive information through our general website contact forms unless it is necessary for your enquiry.

If your child becomes registered with one of our nurseries, additional personal and sensitive information may need to be collected separately in order for us to provide appropriate childcare and meet our legal, safeguarding and regulatory obligations.

3. How We Collect Your Information

We may collect personal information:

• directly from you when you complete a website form;
• when you telephone or email us;
• when you contact one of our nurseries;
• when you enquire about a childcare place;
• when you apply for a vacancy;
• when you communicate with us through another approved channel; and
• automatically when you use our website, through server logs, cookies and similar technologies.

4. How We Use Your Information

We may use your personal information to:

• respond to your questions and enquiries;
• provide information about our nurseries and childcare services;
• discuss availability, fees, visits and potential childcare arrangements;
• arrange nursery visits or other appointments;
• process requests relating to our services;
• communicate with parents, guardians and prospective families;
• process recruitment enquiries and job applications;
• administer and improve our website;
• maintain the security and proper operation of our website;
• prevent spam, fraud or misuse of our website;
• maintain appropriate business records;
• comply with our legal, safeguarding and regulatory responsibilities; and
• send marketing communications where you have agreed to receive them or where we are otherwise legally permitted to do so.

We will not use your personal information for purposes that are incompatible with the reason it was originally collected unless we have a lawful basis to do so.

5. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful reason for using personal information.

Depending on the circumstances, we may rely on:

Contract or steps before entering into a contract
Where information is required to respond to an enquiry about childcare, arrange services or take steps towards providing a nursery place.

Legal obligation
Where we are required to process information to comply with legislation, regulatory requirements, safeguarding responsibilities or other legal obligations.

Legitimate interests
Where processing is necessary for the reasonable operation of our nurseries and business, such as responding to enquiries, maintaining website security, improving our services and keeping appropriate administrative records, provided those interests do not override your rights.

Consent
Where you have actively agreed to a particular use of your information, such as certain marketing communications or non-essential cookies.

Where we rely on consent, you can withdraw your consent at any time.

Some information processed as part of providing childcare may be classed as special category personal data. Appropriate additional protections and lawful conditions will be applied where this information is processed.

6. Marketing Communications

We may occasionally provide information about St Aubin Nurseries, our services, availability, events or other relevant news.

Where consent is required, we will only send these communications where you have chosen to receive them.

You can ask us to stop sending marketing communications at any time by contacting us at enquiries@st-aubin.co.uk or by following any unsubscribe instructions contained within the communication.

We will still be able to contact you where necessary regarding an existing enquiry, nursery place or service.

7. Sharing Your Information

We do not sell your personal information.

We may share personal information where reasonably necessary with:

• other St Aubin Nurseries locations or authorised members of our team;
• website hosting and IT service providers;
• email and communication service providers;
• website maintenance and technical support providers;
• security and anti-spam providers;
• professional advisers such as accountants, insurers or legal advisers;
• regulatory authorities;
• local authorities or safeguarding organisations where appropriate;
• law enforcement agencies or other authorities where required by law; and
• another organisation in connection with a genuine restructuring, merger or transfer of the business.

Where third-party service providers process personal information on our behalf, we expect them to protect that information appropriately and use it only for the authorised purpose.

8. Google reCAPTCHA and Website Security

Our website may use services such as Google reCAPTCHA to protect website forms from spam, automated submissions and abuse.

These services may collect technical information about your browser, device and interaction with the website in order to determine whether activity is genuine.

Use of these services may also be subject to the privacy terms of the relevant service provider.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate correctly, protect website forms, remember preferences, understand website performance and provide embedded functionality.

Where cookies are not strictly necessary, we will seek consent where required by law.

Further information can be found in our Cookie Policy.

10. International Transfers

Some third-party technology or service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate legal protections and safeguards are in place as required by UK data protection law.

11. Keeping Your Information Secure

We take appropriate organisational and technical measures to protect personal information against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

Access to personal information is restricted to people who reasonably require it for their role or to provide services on our behalf.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

12. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The period will depend upon:

• the nature of the information;
• the reason it was collected;
• whether an enquiry progresses to a childcare arrangement;
• safeguarding or regulatory requirements;
• financial and accounting requirements;
• employment requirements;
• applicable legal obligations; and
• whether information may be required to establish, exercise or defend a legal claim.

Information relating to children enrolled at St Aubin Nurseries may be subject to different statutory and regulatory retention periods and may therefore be retained for longer than a general website enquiry.

We regularly review the information we hold and securely delete or anonymise information when it is no longer required.

13. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete personal information;
• ask us to restrict how information is used;
• object to certain processing;
• request the transfer of certain information;
• withdraw consent where processing is based on consent; and
• raise a concern about how your information has been handled.

These rights are subject to certain legal conditions and exemptions.

To exercise your rights, please contact:

Email: enquiries@st-aubin.co.uk
Telephone: 02920 708112

We may need to verify your identity before responding to a request.

14. Complaints

If you have concerns about the way we have handled your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

15. Third-Party Websites

Our website may contain links to websites operated by third parties.

St Aubin Nurseries is not responsible for the privacy practices, security or content of external websites. We recommend reviewing the privacy information provided by any third-party website you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal requirements or the way we process personal information.

The latest version will always be published on our website with the date it was last updated.

17. Contact Us

If you have any questions about this Privacy Policy or how St Aubin Nurseries handles personal information, please contact us:

St Aubin Nurseries Ltd
34 Archer Road
Penarth
Vale of Glamorgan
CF64 3HL

Telephone: 02920 708112
Email: enquiries@st-aubin.co.uk