Privacy notice
Last updated: [DATE]. This is a template. Please have it reviewed before you go live.
Who we are
Little Dream Zone, run by [your name] ("we", "I"), is the data controller for the personal information described here. Contact: hello@example.com. ICO registration number: [number].
What information we collect
- About you: name, relationship to the child, email, phone number.
- About your child: first name, date of birth, temperament, sleep routine, feeding, screen use, sleep environment, and living and childcare arrangements.
- About your family: parents' first names, who your child lives with, whether parents work and any work patterns affecting routines, how many people live at home, siblings, who helps at bedtime, and any family or cultural practices that affect sleep.
- Health information (special category data): birth details (due date, type of birth, neonatal care), medical conditions, tongue tie, reflux, allergies, skin conditions, teeth, medication including prescribed formula and sleep medication, recent vaccinations, courses of antibiotics, signs noticed during sleep (such as snoring or breathing pauses), feeding, development, significant life events, and other wellbeing information you choose to share.
We only ask for what we need to provide a safe, personalised sleep plan.
Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Assessing your child's sleep and providing your consultation and plan | Contract, Article 6(1)(b). For health information: your explicit consent, Article 9(2)(a). |
| Replying to your enquiries | Legitimate interests, Article 6(1)(f) |
| Keeping business and financial records | Legal obligation, Article 6(1)(c) |
We never sell your information or use it for marketing without your separate permission.
How we keep it secure
- Your survey answers are encrypted in your browser before they leave your device. They stay encrypted while stored, and only the consultant holds the key to read them.
- The website is hosted on Cloudflare. Cloudflare stores only the encrypted data and cannot read it.
- Email alerts about new surveys contain no personal or health details.
- This website uses no cookies, analytics or advertising trackers. While you fill in the survey, your answers are kept only in that browser tab so a refresh doesn't lose them; they are cleared when you close the tab or send the form.
Who we share it with
We do not share your information unless you ask us to, or we are legally required to (for example, if we have a safeguarding concern about a child's safety). Our service providers are Cloudflare (website hosting, encrypted storage) and Google (business email).
How long we keep it
Encrypted survey submissions are automatically deleted from the website after [180] days. Client records are kept for [X years] after our work together ends and then securely deleted. [Adjust to match your insurer's or professional body's requirements.]
Your rights
You have the right to access, correct or delete your information, to restrict or object to its use, to data portability, and to withdraw consent at any time. Withdrawing consent does not affect anything we did before you withdrew it. To use any of these rights, email us. We will reply within one month.
Complaints
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.