Privacy Policy 

Centre 56 is an Ofsted registered childcare provider and registered charity, part of the Regenda Group. This notice explains how and why we use your personal information, and the rights you have.

We are committed to handling your information fairly, transparently and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025 (DUAA).


1. Personal data we collect
We may collect information about parents/guardians and children when applying for childcare, expressing an interest in training or support, or making donations. This may include:


Personal data

  • Names, addresses, contact details and preferences
  • Gender and date of birth
  • Next of kin details
  • Income and financial information
  • Support needs
  • Progress, individual achievements, attendance and results
  • Images and videos
  • Website usage, IP address and device data
  • CCTV and drone footage where you are in view


Special category data (where necessary)

  • Disability and health information
  • Ethnic origin and first language
  • Religion
  • Special educational needs (children only)
  • Sexual orientation (adults only)

We only ask for this information to ensure that your childcare and support needs are met, and for fairness, inclusivity and compliance with equality law. You do not have to provide it.


How we collect your information
We collect personal data from:

  • Application forms for nursery or after‑school placement
  • An expression an interest in training or supporting the organisation
  • Donations
  • Phone contact, emails and letters
  • CCTV and building security systems
  • Our website and automated tools

We will always explain what information is required and why.


3. How we use your personal data
We use your information to:

  • Secure and meet funding requirements, including Special Educational Needs (SEN) and Early Years Pupil Premium and local authority nursery funding
  • Support your child’s teaching, learning, and progress, and assess how well the nursery setting is performing
  • Provide appropriate support to children and parents/guardians, including safeguarding where required
  • Deliver confidence‑building and life‑skills training
  • Ensure that your housing needs are met (where applicable)
  • Improve our services, investigate complaints, and analyse customer needs and feedback
  • Monitor equality, diversity and inclusion to ensure fair and accessible services
  • Prevent and detect crime
  • Fundraise, share updates with supporters, and process Gift Aid
  • Meet regulatory and legal obligations

We do not make fully automated decisions that produce legal or significant effects without human involvement.

Where AI or automated analysis is used, it is governed by our AI and Machine Learning Policy.

You have the right to:

  • Request human review
  • Ask for an explanation of how automated tools affected your case
  • Object to automated processing where legally permitted


4. Legal bases for processing
We rely on one or more of the following:


Contract
To manage the childcare contract.


Legal obligation
Where processing is required by law.


Legitimate interests

Including:

  • Communicating with you
  • Process next of kin and emergency contact details
  • Operating CCTV for safety and crime prevention
  • Referring you to support services
  • Quality monitoring and staff training
  • Customer surveys through approved partners

We always balance legitimate interests against your rights.


Consent
Where required, such as:

  • Requests for third parties to act on your behalf
  • Use of certain special category data
  • Optional surveys or marketing communications.

You can withdraw consent at any time.


Vital interests
Protecting life or preventing serious harm.


Public interest / substantial public interest
Including safeguarding, preventing fraud, and equality monitoring.


Recognised legitimate interests
We may rely on this basis for:

  • Cybersecurity and system integrity – protecting our digital systems and preventing cyber threats
  • Crime prevention and detection
  • Safeguarding vulnerable individuals – where information is required to protect someone at risk
  • Disclosures to public bodies – where a public body (e.g., local authority, police, fire service) confirms it needs information to carry out its statutory public task
  • Responding to emergencies – such as fires, floods, structural hazards or risks to human welfare


Who we share your personal data with
We may share information with:


To deliver services 

  • People acting on your behalf
  • Children’s Centres
  • Schools
  • Solicitors
  • Insurance providers
  • Third‑party IT providers
  • Independent research companies


Where disclosure is required

  • Ofsted
  • Local authorises
  • Social services
  • Police and law enforcement
  • Fire services, health agencies and safeguarding authorities


International transfers
Where data is processed outside the UK or EEA, we ensure:

  • A UK‑approved adequacy decision is in place, or
  • UK‑approved International Data Transfer Agreements or Standard Contractual Clauses (Article 46 UK GDPR) are used

 

How long we keep your data
We only keep your information for as long as necessary to:

  • Deliver services
  • Meet legal and regulatory requirements
  • Defend legal claims

All information is securely disposed of when no longer required and some data may be anonymised for statistical purposes.

 

Protecting your personal data
We use organisational, technical and physical measures to safeguard data. These include:

  • Identity checks
  • Access controls
  • Encryption and secure systems
  • Incident and breach response procedures

No communication method is completely secure, but we take reasonable measures to reduce risk.

 

9. Cookies and website analytics
Our website uses cookies to:

  • Improve performance and user experience
  • Personalise content
  • Deliver relevant advertising
  • Understand user behaviour

Google Analytics and Google Signals may be used with your consent. No identifiable Google account data is shared with us.

You can change your cookie preferences at any time.

 

10. Your rights
You can ask us to:

  • Provide a copy of the personal data we hold (Subject Access Request)
  • Explain how your data is used
  • Correct or update inaccurate information
  • Delete your information (where applicable)
  • Restrict or object to processing
  • Transfer data to another organisation (where applicable)
  • Withdraw consent
  • Challenge automated decision‑making or request human intervention
  • Request explanation of algorithmic tools
  • Raise a complaint if you believe we have not met data protection standards, including fairness, transparency or data access rights

Data protection requests or queries can be made via the contact details below.

 

11. Contact us
Data Protection Team
The Regenda Group
The Foundry, 42 Henry Street, Liverpool, L1 5AY
Tel: 0151 703 3000
Email: dataprotection@regenda.org.uk 

 

12. Information Commission
You can contact the Information Commission at:

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Telephone number: 0303 123 1113

Website: ico.org.uk


This privacy notice was last updated 22 April 2026