Privacy notice (pre-launch draft)

A nursery or nursery group that uses Nurtalo decides what information it records about children, families and staff, and remains responsible for that information. Nurtalo provides the software that stores and processes it on the setting's instructions.

Questions about the content of a child's record are therefore answered by the nursery. We cannot add, amend or disclose a child's record on request from outside the setting.

Operational nursery records: attendance and room presence, daily care, health and medication, learning observations, admissions, bookings, communications with families, consents and permissions, documents and forms, finance records, workforce records and compliance evidence.

Account information for the people who sign in, and technical records needed to operate the service securely, such as authentication events and audit history.

Enquiries sent through the public website. We ask that first enquiries contain no personal data about children, families or staff.

To provide the nursery with a record of its own operations, to help it meet its safeguarding and regulatory responsibilities, to communicate with families where the setting chooses to, and to keep the service secure and accountable.

Information is not used for advertising, is not sold, and is not shared for marketing purposes.

Access is decided from membership records held on the server, and is enforced in the database with row-level security rather than by hiding parts of the interface. A setting cannot read another setting's records.

Some records are deliberately more restricted than others. Safeguarding casework is limited to named responders rather than being visible to a whole team or to a group office.

A full export of an organisation's data is a base capability rather than something withheld to discourage leaving.

Data rights requests are modelled as a tracked process rather than an informal favour, and are raised through the nursery that holds the record.

Specific retention periods are agreed with the nursery in the written terms for that organisation, because they depend on statutory duties that differ across the UK.

Controls are described in more detail on the security page. In short: tenant separation enforced in the database, least-privilege grants, private file storage, elevated credentials never present in browser code, and an immutable audit trail for sensitive actions.

We do not claim certifications we do not hold, and we do not publish availability figures for a service that has not launched.

This is a pre-launch draft. It will be superseded by the data processing terms agreed with each organisation, and material changes will be reflected here.