Last updated: 14.01.25
Little Houses Group Limited and the other entities in the Little Houses Group (Little House Developments Limited, Parsons House Nursery Limited and Kensal House Nursery Limited) (together, LHG) are committed to protecting your privacy and processing your personal data fairly and lawfully.
This general privacy notice (Privacy Notice) applies to
in each instance referred to as you.
This Privacy Notice does not apply to job applicants, former or current employees, contractors or officer / directors (LHG Staff) or any emergency contact or dependant of LHG Staff – please contact us on the details provided below to obtain a copy of the privacy notice relevant to you.
Contact details are included at the end of this Privacy Notice.
Personal Data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
When we say processing we mean any use of Personal Data, including (but not limited to) collection, recording, organisation, modification, transfer, and deletion.
When we say controller we mean a legal or natural person, agency, public authority, or any other body who, alone or when joined with others, determines the purposes of any Personal Data and the means of Processing it.
The entity acting as controller, i.e., determining the means and purpose of the processing of your Personal Data will vary, depending on how you interact with LHG:
This Privacy Notice is provided on behalf of each relevant LHG company.
A summary of the key elements of this Privacy Notice are shown below.
This Privacy Notice explains:
We may process the following types of Personal Data about you depending on how you interact with LHG:
In addition, to the extent permitted by law, we may process special categories of Personal Data, such as data relating to health or biometric data. We may also, in limited circumstances, process data related to criminal offences. We shall call this Sensitive Personal Data in this Privacy Notice.
We have set out below, in a table format, a description of how we process your personal Data in relation to the activities of LHG, and which of the lawful bases we rely on to do so (as required by UK data protection laws). We have also identified what our legitimate interests are, where appropriate.
Please contact us if you need details about the specific lawful basis we are relying on to process your Personal Data where more than one ground has been set out in the tables below.
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
To manage your membership and provide member’s club services and access | Personal Details Professional Details Financial Data Transaction Data |
Performance of contract |
To facilitate secure and easy entry into our family member’s club via facial recognition technology | Sensitive Data in the form of biometric data | Explicit consent |
To address any special needs or health requirements of members | Sensitive Data in the form of health data (for example, disability information or medical conditions or food allergies) | Legal obligation Explicit Consent |
To communicate with you about services, features, surveys, newsletters, offers, promotions, events, and provide other news or information about our services | Personal Details Professional Details Marketing and Communications Data Profile Data |
Consent |
To request feedback about our member’s clubs | Personal Details Professional Details Profile Data |
Legitimate interest to improve and develop our services |
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
To manage your enrolment and provide nursery services | Personal Details Professional Details Financial Data Transaction Data Child Data |
Performance of contract |
To address any special needs children may have | Child Data Sensitive Data in the form of health data (e.g., information about disabilities, treatment requirements) |
Legal obligation Explicit consent |
To make safeguarding reports and disclosures, including disclosures to third party authorities | Child Data Sensitive Data in the form of health data (e.g., information about disabilities, treatment requirements) |
Legal obligation Substantial public interest ('safeguarding of children and individuals at risk') |
To communicate with you about services, features, surveys, newsletters, events, and provide other news or information about our | Personal Details Professional Details Marketing and Communications Data |
Consent |
To request feedback about our nurseries | Personal Details Professional Details Profile Data |
Legitimate interest to improve and develop our services |
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
To take required steps to enter into an agreement and manage contractual rights and obligations in agreements with suppliers or vendors (or their representatives) | Professional Details | Performance of a contract |
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
To set-up and manage your membership and provide access to member's online portal | Personal Details Professional Details Financial Data Transaction Data Child Data (for nursery membership) |
Performance of contract |
To communicate with you about services, features, surveys, newsletters, offers, promotions, events, and provide other news or information about our services (where you have asked us to send you this information) | Personal Details Professional Details Marketing and Communications Data |
Consent |
To understand how visitors interact with our website, for site improvement and product / service development purposes (where you have agreed to accept analytics cookies) | Personal Details Technical Data |
Consent |
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
For business continuity planning | Any of the categories of personal data detailed in this notice | Legitimate interest to ensure business continuity. |
For monitoring and assessing compliance with our policies and standards | Any of the categories of personal data detailed in this notice: specific category will depend upon the specific activity | Legitimate interest to conduct business in compliance with applicable law and standards. |
To protect the security and access of our systems, premises, staff and visitors, platforms and secured websites and applications. | Monitoring Data primarily but may include other categories such as Technical Data | Legal obligation to ensure a safe and healthy workplace, and to ensure that all visitors to our premises are kept reasonably safe. Legitimate interest in ensuring the safety and security of our people, goods, premises and systems, and taking action to mitigate risk and to prevent and detect matters which may put us, or our business or stakeholders, at risk, for processing that goes beyond that strictly required by law. To the extent that the information processed includes Personal Data relating to actual or alleged criminal offences, we may process this information as necessary to prevent or detect crime. |
To operate a customer relationship management system (CRM) in which we keep data of customers, suppliers and other business partners for relationship management | Personal Details Professional Details |
Legitimate interests in maintaining up to date records, ensuring business continuity and operating our business |
To comply with our legal and regulatory obligations in the UK, including reporting to and/or being audited by regulatory bodies or other authorities or responding to lawful requests from such authorities (including without limitation under national security or law enforcement requirements). | Any of the categories of personal data detailed in this notice: specific category will depend upon the specific obligation or request. We may also process Sensitive Personal Data that may include information about actual or alleged criminal offences (where required or otherwise permitted by law) |
Legal obligation Legitimate interest to ensure that we conduct our business in compliance with applicable law and standards where we are processing Personal Data. |
To respond to court orders, exercise and/or defend our legal rights and in connection with complaints or legal claims made by, against, or otherwise involving you | Any of the categories of personal data detailed in this notice: specific category will depend upon the specific activity. We may also process Sensitive Personal Data that may include information about health and/or alleged or actual criminal offences (where required or otherwise permitted by law) |
Legal obligation To the extent that this requires us to process Sensitive Personal Data, we rely on the fact that the processing is necessary for the establishment, exercise or defence of legal claims, or whenever courts are acting in their judicial capacity. |
In connection with a sale, transfer of assets, investments, acquisition, bankruptcy or similar event | Any of the categories of personal data detailed in this notice | Legitimate interests in growing the business and making investment decisions. |
To aggregate and anonymise Personal Data to create statistical or demographic data, for example to calculate the percentage of users accessing a specific website feature | Any of the categories of personal data detailed in this notice | Legitimate interest in improving and developing our services To the extent this includes any Sensitive Data, we will process such data to the extent necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes |
We will collect Personal Data from you when you:
Your Personal Data will be retained for as long as necessary to fulfil the purpose for which it was processed or to comply with legal, regulatory or internal policy requirements.
Further information about our retention periods can be obtained by contacting us at the contact details specified in this Privacy Notice.
We do not and will not sell, rent or trade your Personal Data.
We will disclose your Personal Data in the ways set out in this Privacy Notice and, specifically, to the following categories of recipients:
Depending on your cookie choices, we may share your Personal Data with service providers that are providing analytics, marketing and ad measurement services to us, such as Google Analytics and Meta Business. Please see our Cookies Policy for more details.
All LHG group companies are based in the UK and process personal data in the UK.
However, your Personal Data may be transferred to third parties (e.g. service providers providing services to LHG group companies) who may have systems or suppliers located outside of the UK. This means that such third parties will be processing your Personal Data outside of the UK. We will ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by applicable data protection law, in particular the Standard Contractual Clauses approved by the European Commission, with the UK addendum thereto as appropriate, and supplemented by additional contractual, organisational and security measures as necessary.
You have a right to request a copy of the appropriate measures we put in place. Please note that any data transfer agreement made available to you may be redacted for reasons of commercial sensitivity.
When you give us information about another person, you confirm that they have agreed that you can share their information with us and have given them a copy of this Privacy Notice.
It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if any information changes during your working relationship with us.
You have several rights in relation to your Personal Data. In certain circumstances these rights may not be absolute, which we can discuss with you further where relevant. You are not required to pay a charge in most circumstances for exercising your rights and we generally have one month to respond to your request.
We ask for proof of ID where we need to confirm the identity of the individual making the request to comply with our security obligations and prevent unauthorised disclosure of data.
You can make such a request to exercise any of your data subject rights by sending us an email to katy@littlehousesgroup.co.uk or the contact detailed in the table at the end of this Privacy Notice.
(a) Right to access and rectify Personal Data
You may request a copy of your Personal Data from any LHG group company which may hold Personal Data about you. You can also ask us to correct any inaccuracies in your Personal Data though we may need to verify the accuracy of the new data you provide to us.
We may refuse to provide you with a copy of your data in certain circumstances, for example, if your request is manifestly unfounded. If we refuse your request, we will explain the reason for refusing it.
(b) Right to erase Personal Data
You have the right to ask us to delete or remove Personal Data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your data unlawfully or where we are required to erase your Personal Data to comply with applicable law.
If you ask us to delete your information, we may not be able to do so, for example due to regulatory and contractual constraints which will be notified to you, if applicable, at the time of your request. For example, we may need to retain certain Personal Data about you if required for us to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
(c) Right to object to processing of your Personal Data
You have the right to object to processing where we are relying on our legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In such case, we must stop that processing unless we can either demonstrate legitimate grounds for the processing that override your interests, rights, and freedoms or where we need to process your Personal Data for the establishment, exercise, or defence of legal claims. You also have the right to object to receiving any direct marketing to which you previously opted in.
(d) Right to restrict the processing of your Personal Data
This enables you to ask us to restrict (i.e., retain without using) the processing of your Personal Data in the following scenarios:
(i) if you want us to establish the data’s accuracy;
(ii) where our use of the data is unlawful but you do not want us to erase it;
(iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
(iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
(e) Right to data portability
You have the right to request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the Personal Data to perform a contract with you.
(f) Right to withdraw consent to processing
You have the right to withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
(g) Right to complain
We welcome the opportunity to attend to any of your concerns or complaints about the way in which we handle your Personal Data, however you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: https://ico.org.uk/global/contact-us/
We are committed to keeping secure the Personal Data you provide to us. We take all reasonable precautions to protect the Personal Data we hold about you from misuse and loss and from unauthorised access, modification or disclosure. Such measures include using industry-standard administrative, technical, and physical safeguards to protect your Personal Data against loss, theft, misuse, unauthorized access, modification, disclosure, and destruction.
We do not carry out any automated decision making (including profiling) of you that produces a legal effect or similarly affects you. If this changes, we will inform you of this.
We may provide links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third-party website, and we are not responsible for the privacy policies or the content of any third-party website. If you visit these websites, they will be governed by their own terms of use (including privacy policies).
We may Process your preferences to receive marketing information directly from us by email and text in the following way:
You can amend your marketing preferences at any time by contacting us via the contact details below.
This notice will be reviewed periodically and as a result may be updated. All information held by us will be governed by the most recently updated notice.
If you have any questions or concerns concerning this Privacy Notice, please contact us using the relevant contact details below.
Purpose for processing | Categories of Data | Lawful basis |
---|---|---|
Little Houses Group Limited | katy@littlehousesgroup.co.uk | 557 Harrow Road, London, W10 4RH |
Little Houses Developments Ltd. | katy@littlehousesgroup.co.uk | 557 Harrow Road, London, W10 4RH |
Parsons House Nursery Limited | katy@littlehousesgroup.co.uk | 557 Harrow Road, London, W10 4RH |
Kensal House Nursery Limited | katy@littlehousesgroup.co.uk | 557 Harrow Road, London, W10 4RH |