CCTV Privacy Notice Protecting Your Data

Owner and Data Controller

We are the Data Controller for the purposes of data protection law.

The nursery uses Closed Circuit Television (CCTV) to help keep children, staff, parents, and visitors safe and to protect our premises and property.

If you have any questions about CCTV, please contact the nursery manager: info@rockinghorsemontessori.co.uk 

Why we use CCTV

We use CCTV for the following purposes:

  • To promote the safety and welfare of children
  • To protect staff, parents, and visitors
  • To safeguard the nursery building, equipment, and resources
  • To assist with the investigation of incidents, safeguarding concerns, or criminal activity

CCTV is not used to routinely monitor staff performance or children’s behaviour.

Lawful basis for processing

The lawful basis for processing CCTV images is legitimate interests under Article 6(1)(f) of the UK General Data Protection Regulation (UK GDPR).

This means CCTV is necessary for the nursery’s legitimate interests in safeguarding, safety, and security, and these interests do not override the rights and freedoms of individuals, particularly given the safeguards in place.

Where cameras are located

Cameras are positioned inside and outside the nursery.
They are not installed in toilets, changing areas, or any area where there is an enhanced expectation of privacy.

Clear signage is displayed to inform individuals that CCTV is in operation.

How long footage is kept

CCTV footage is retained for 7–9 days, after which it is automatically overwritten, unless it is required for:

  • A safeguarding concern
  • An internal investigation
  • A legal or regulatory matter

Footage retained for these purposes is deleted as soon as it is no longer required.

Who can access CCTV footage

Access to footage is strictly limited to authorised senior staff and only on a need-to-know basis.

Footage may be shared with:

  • Law enforcement agencies
  • Safeguarding authorities
  • Regulators
  • Individuals making a lawful Subject Access Request (SAR)

All access and disclosures are recorded.

Parents/carers and CCTV access

Parents/carers do not have routine access to CCTV footage and are not permitted to view live CCTV feeds.

Requests to view footage must be made through the formal Subject Access Request (SAR) process and will be handled in line with data protection law.

Changes to Our Privacy Notice

We review this notice regularly as part of our internal processes or as our services, activities, or regulatory requirements change. It’s subject to change at any time, but the most up to date version is published on our website.

Your Rights

Under UK GDPR, individuals have rights including the right to:

  • Request access to their personal data
  • Request erasure or restriction in certain circumstances
  • Raise a concern with the Information Commissioner’s Office (ICO)

Requests should be made in writing to the nursery manager: info@rockinghorsemontessori.co.uk

Contacting us and the ICO about your personal data

Please speak to us first if you have any questions or concerns about the way in which we process personal data. You can contact us via the details on this website.

You have the right to complain to the ICO if you have a concern about our handling of your personal data which you do not think we can resolve.