Privacy Policy

Last Updated: December 28, 2025

1. Introduction

This Privacy Policy explains how E and H childcare ("we", "us", or "our") collects, uses, shares, and protects personal information when you use ehchildcare.co.uk ("the Platform").

We are the data controller responsible for your personal information. If you have any questions about this policy or our data practices, please contact us at info@ehchildcare.co.uk.

2. Information We Collect

2.1 Information You Provide

Account Registration:

• Name, email address, phone number
• Password (encrypted)
• Address and postcode
• Date of birth
• User type (Parent or Babysitter)

Profile Information:

• For Parents: Information about your children (ages, special needs, preferences), emergency contact details
• For Babysitters: Experience, qualifications, certifications (DBS, first aid), hourly rate, availability, bio, profile photo, references

Booking Information:

• Booking dates, times, and locations
• Number of children and specific requirements
• Special instructions or notes

Payment Information:

• Payment card details (processed and stored securely by Stripe, not by us)
• Billing address
• Transaction history

Communications:

• Messages between Parents and Babysitters
• Customer support communications
• Reviews and ratings

2.2 Information Collected Automatically

Technical Information:

• IP address
• Browser type and version
• Device information
• Operating system
• Time zone settings

Usage Information:

• Pages visited and features used
• Time spent on pages
• Links clicked
• Search queries
• Booking patterns and preferences

Cookies and Tracking:

We use cookies and similar technologies to enhance your experience. See Section 9 for more details.

2.3 Information from Third Parties

• Identity verification services
• Payment processors (Stripe)
• Background check providers (if used)
• Analytics providers

3. How We Use Your Information

3.1 Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To provide our Platform services and fulfill bookings
• Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
• Legal Obligations: To comply with legal requirements
• Consent: For marketing communications (which you can withdraw at any time)

3.2 Purposes of Processing

We use your information to:

Provide Our Services:

• Create and manage your account
• Facilitate bookings between Parents and Babysitters
• Process payments and refunds
• Enable communication between users
• Send booking confirmations and reminders
• Provide customer support

Safety and Security:

• Verify user identities
• Prevent fraud and abuse
• Enforce our Terms and Conditions
• Protect children's safety
• Investigate complaints and disputes

Improve Our Platform:

• Analyze usage patterns and trends
• Develop new features and services
• Conduct research and testing
• Fix bugs and technical issues

Marketing and Communications:

• Send service updates and announcements
• Provide personalized recommendations
• Send promotional emails (with your consent)
• Conduct surveys and gather feedback

Legal Compliance:

• Respond to legal requests and court orders
• Comply with regulatory requirements
• Maintain records for tax and accounting purposes

4. How We Share Your Information

4.1 With Other Users

Babysitters can see: Parent names, general location, children's ages and requirements, reviews you've written

Parents can see: Babysitter profiles, qualifications, reviews, ratings, hourly rates, general location, availability

After a booking is confirmed: Full contact details are shared between Parents and Babysitters to facilitate the service

4.2 With Service Providers

We share information with trusted third parties who help us operate the Platform:

• Stripe: Payment processing (see Stripe's privacy policy)
• Email Services: Transactional and marketing emails
• SMS Services: Booking notifications and reminders
• Cloud Hosting: Data storage and platform infrastructure
• Analytics Tools: Usage analysis and improvement
• Customer Support Tools: Help desk and support ticket management

All service providers are contractually required to protect your data and use it only for specified purposes.

4.3 For Legal Reasons

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or the public
• Prevent fraud or security threats
• Respond to child safety concerns

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 6-7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

Retention Periods:

• Active Accounts: Data retained while your account is active
• Closed Accounts: Most data deleted within 90 days, except where legal retention applies
• Booking Records: 7 years for tax and legal compliance
• Reviews: Retained indefinitely unless deleted by you or found to violate policies
• Marketing Data: Until you unsubscribe or withdraw consent

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

6.1 Right of Access

You can request a copy of the personal information we hold about you. We will provide this within one month of your request.

6.2 Right to Rectification

You can update or correct inaccurate or incomplete information through your account settings or by contacting us.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances, such as when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may retain some information where legally required or for legitimate interests (e.g., fraud prevention).

6.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

6.5 Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format and transfer it to another service provider.

6.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

6.7 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

6.8 Right to Withdraw Consent

Where we process your data based on consent, you can withdraw that consent at any time.

To exercise your rights, contact us at: info@ehchildcare.co.uk

We will respond to your request within one month. In complex cases, we may extend this by two months and will inform you of the delay.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

7.1 Technical Measures

• Encryption of data in transit (HTTPS/SSL)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security updates and patches
• Firewall protection and intrusion detection
• Secure backup systems

7.2 Organizational Measures

• Access controls and authentication
• Staff training on data protection
• Data protection policies and procedures
• Regular security audits and assessments
• Incident response procedures

7.3 Payment Security

We do not store your full payment card details. All payment information is processed and stored by Stripe, a PCI-DSS compliant payment processor.

7.4 Data Breach Notification

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours.

8. International Data Transfers

Your data is primarily stored and processed in the UK. If we transfer data outside the UK to countries without adequate data protection laws, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions by the UK government
• Binding Corporate Rules

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Platform. They help us provide and improve our services.

9.2 Types of Cookies We Use

Essential Cookies: Required for the Platform to function (e.g., authentication, security)

Functional Cookies: Remember your preferences (e.g., language, location)

Analytics Cookies: Help us understand how you use the Platform

Marketing Cookies: Used to show relevant advertisements (with your consent)

9.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect Platform functionality.

Most browsers allow you to:

• View and delete cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when you close your browser

10. Children's Privacy

Our Platform is not intended for children under 18 to create accounts. We do not knowingly collect personal information from children except:

• Information provided by Parents about their children (age, special needs) necessary for childcare services
• This information is only shared with booked Babysitters and is protected according to this policy

Parents are responsible for the accuracy and appropriateness of information provided about their children.

11. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

12. Marketing Communications

Email Marketing: With your consent, we may send promotional emails about new features, special offers, and updates.

Opting Out: You can unsubscribe from marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your email preferences in your account settings
• Contacting us at info@ehchildcare.co.uk

Transactional Emails: We will continue to send essential service-related emails (booking confirmations, receipts, important updates) as these are necessary for the service.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify you of material changes via email or Platform notification
• Seek your consent for material changes where required by law

We encourage you to review this policy periodically.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority: