Privacy notice

What we collect

For a tour we collect the parent or guardian's name, email and phone number, the child's birth month and year, and the requested tour date and time. If you proceed, registration also collects the child's name and date of birth, preferred start date, requested AM/PM sessions and payment status. We do not store card details.

Why we use it

We use parent details to arrange the requested tour, communicate about it, manage a requested nursery registration and administer the registration payment. We rely on steps requested before and in connection with a childcare contract, our legitimate interests in administering genuine enquiries and places, and legal obligations applying to payment and business records. We consider the child's interests when handling their information and do not use it for profiling, advertising or automated decisions.

Who receives it

Information is handled by authorised nursery staff and by suppliers that provide hosting and database services (Vercel and Turso), email delivery (Resend), and payment processing (Stripe). Stripe receives the parent email and payment/registration reference but not the child's form answers. Suppliers may process information outside the UK under contractual and international-transfer safeguards.

How long we keep it

• Unsuccessful, cancelled and inactive tour enquiries: 1 year.
• Child details in abandoned registration drafts: 90 days after the secure link expires.
• Completed registration and payment records: 6 years, unless law requires a different period.

At the end of the applicable period, identifying details are deleted or anonymised while non-identifying operational totals may remain.

Your rights

Depending on the circumstances, you can ask for access to, correction or deletion of personal information, restrict or object to its use, or ask for a portable copy. We may need to verify your identity and may retain limited records where a legal obligation applies.

Contact us at Kelly@orchardgrove.co.uk. You may also complain to the Information Commissioner's Office.

Cookies and security

The public booking and registration pages do not use advertising or analytics cookies. A strictly necessary, secure cookie is used only when authorised staff sign in to the administration area. Secure links expire or are revoked after use.