Privacy notice

Who we are

NurseryHop (nurseryhop.com) is operated by PeekabooHQ, which is the controller of the personal data described here. Contact us about anything in this notice at hello@nurseryhop.com.

Parents and carers searching for a nursery

You don’t need an account to search, and we don’t ask who you are. When you search, we use the postcode or place name you type to find nurseries near it. To turn a postcode into a location, it is looked up with postcodes.io, a free UK postcode service. We don’t keep a record of your searches linked to you.

Like any website, our web server briefly keeps technical logs (IP address, browser type, the page requested and the time) to keep the site secure and working. The map on search and nursery pages loads map images from OpenFreeMap, which will see your IP address when it sends them. We count how many times each nursery page is viewed, but not who viewed it.

Enquiries and tour requests to nurseries

If you use the enquiry or tour request form on a nursery’s page, we collect what you enter: your name, email address and message, plus anything optional you choose to add (phone number, your child’s age, a hoped-for start date or preferred visit time). We pass this to that nursery by email and keep a copy so the nursery can see it in its owner dashboard. We do this because you asked us to (to take steps at your request), and you tick a box to confirm it before sending.

Once the nursery has your enquiry, it uses your details under its own privacy notice. Please don’t include sensitive details, such as health information about your child, in the message. We also store a scrambled (hashed) form of your IP address for a short time to stop spam and abuse.

Nursery owners and staff

If you claim a listing we collect:

• your name, email address and a password, which we store only as a secure one-way hash, never in readable form;
• your role at the nursery and the evidence you give us that you work there: a work email address that we confirm, and/or a document you upload (for example an Ofsted registration certificate);
• the details and photos you add to your nursery’s page, which are public once published;
• records of your claim, plan and subscription status, and the enquiries your nursery receives.

We use this to run your account, check claims, publish your listing and provide the plan you pay for (the lawful basis is our contract with you), and to keep the service secure and prevent fraud (our legitimate interests). Uploaded evidence documents are kept private and only looked at by us to decide the claim. We send you emails about your account, such as email confirmation, password resets, claim decisions, enquiries and, on the Featured plan, a monthly statistics email. We don’t send marketing emails without your consent.

Payments

Paid plans are billed through Stripe. You enter your card details on Stripe’s secure payment pages, so we never see or store your full card number. Stripe tells us the outcome of payments and the status of your subscription, and we keep your Stripe customer reference so you can see your invoices and manage billing from your dashboard. Stripe collects your billing name, address and (if you give it) VAT number for your invoices, and acts as a controller for some payment data under its own privacy policy.

Cookies

We only use cookies that are essential for the site to work: when you log in to the owner area we set a session cookie to keep you logged in and a security token to protect forms (CSRF protection). These are deleted when you log out or shortly afterwards. We don’t use advertising or tracking cookies, and parents searching don’t get any cookies from us. Stripe sets its own cookies on its payment pages to prevent fraud.

Who we share data with

• Nurseries: the enquiries and tour requests you send them.
• Our web hosting provider, which hosts the website, database and email for us. Its servers are currently in the United States, so data held on them is transferred outside the UK. We only make such transfers where UK data protection law allows it.
• Stripe, for payments (see above).
• Email providers that deliver and receive our email.
• Anyone we’re legally required to share with, such as the police or a regulator, where the law requires it.

We don’t sell personal data, and we don’t share it with advertisers.

How long we keep data

• Enquiries and tour requests: up to 2 years, then deleted, unless the nursery or you ask us to delete them sooner.
• Owner accounts and listing content: while the account is open, and deleted within 90 days of closing it, except what we must keep for longer.
• Claim evidence documents: until the claim is decided, plus up to 12 months in case of a dispute.
• Billing records: 6 years, because tax law requires it.
• Server logs and anti-spam records: usually no more than 90 days.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to have it moved to another service (data portability). Email hello@nurseryhop.com and we’ll reply within one month. We may need to check who you are first. These rights are explained on the ICO website.

Complaints

If you’re unhappy with how we’ve handled your data, please tell us first at hello@nurseryhop.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Ofsted information

Nursery names, addresses, registration details and inspection results come from Ofsted’s published data, reused under the Open Government Licence v3.0. Contains public sector information licensed under the Open Government Licence v3.0. We don’t publish settings whose details Ofsted has withheld.

Changes to this notice

If we change how we use personal data, we’ll update this page and the date at the top. If a change significantly affects nursery owners, we’ll also email them.