Cardiff Childcare Business Support Privacy Notice

​The Childcare Business Support Team, who facilitate the Childcare and Play grant and Childcare Offer Capital Grant is part of Cardiff Council who is the Data Controller for the purposes of the data collected. This privacy policy will explain how our organisation uses the personal data we collect from you when you use our service.

The purpose of collecting this data is for the Cardiff Childcare Business Support team to assess the sufficiency of childcare under the local authorities’ duties set out in the Childcare Act 2006.

We will also keep a record of your details for use in monitoring and reporting to Welsh Government.

What data do we collect?

The Council process personal data on a day-to-day basis. We hold certain information about you this is known as personal data. We are registered with the Information Commissioner’s Office and any information we hold will be processed in line with the principles set out by ICO Regulations, which we must comply with.

We will:

  • Continue to strengthen our processes for maintaining the privacy of all personal information we hold.
  • Have need for all our employees to comply fully with Data Protection law.
  • Only hold the minimum personal information needed to allow us to perform our role as a Council.
  • Delete personal information once the need to hold it has passed.
  • Access and process all personal information in line with fair processing set out upon collecting information from Individuals.
  • Design our systems and processes to comply with data protection principles.
  • Take immediate action if we discover that our policies are not being complied with.
  • This notice is designed to give you information about the data we hold about you, how we use it, your rights in relation to it and the safeguards that are in place to protect it.

Cardiff Childcare Business Support collects the following data:

  • Contact details, including name, workplace address, job title, telephone numbers and email address.
  • Where you have provided us with personal data about other individuals, please ensure that those individuals are aware of the information contained within this notice.

How do we collect your data?

Cardiff Childcare Business Support collect data and process data using Microsoft forms or Microsoft word that are sent in via email. The data collected via these forms will be used by Cardiff Childcare Business Support.

How will we use your data?

We may process your personal data to fulfil our obligations, and this can include the processing of your personal data for all or any of the following purposes:

  • To contact you.
  • For statistical and reference purposes.
  • To comply with our legal and regulatory obligations as a Local Authority.
  • To comply with Welsh Governments Terms and Conditions under the Childcare and Play grant.
  • To address queries from you and to respond to any actual or potential disputes concerning you.
  • Assess and process your application for Grant funding.
  • Email to contact you for Grant monitoring.

Who do we share your data with?

From time to time we will share your personal data with partner organisations and service providers so that they can help us carry out our duties, rights and discretions in relation to the services we provide. Some of those organisations will simply process your personal data on our behalf and in accordance with our instructions. In each case we will only share data to the extent that we consider the information is reasonably required for these purposes.

Any Personal Information we hold will be disclosed, with reasonable purpose to:

  • Our staff – where the information is vital and required for their work.
  • The Courts – under the direction of a Court Order.
  • Our partners – strictly in line with agreed procedures.
  • Others – as detailed in the Council’s Data Protection registration. If you no longer wish to be contacted, please email us at

Under the Digital Economy Act 2017, the Council may share personal data provided to us with other Council’s for the purposes of fraud, crime detection/prevention, to improve public service delivery, statistical research. Cardiff Council has a duty to protect the public fund it manages. Therefore, the information that you have provided to us may be used for the prevention and detection of fraud or shared with Council Officers responsible for auditing or administering public funds.

Where requested or if we consider that it is reasonably required, we may also provide your data to government bodies and dispute resolution and law enforcement organisations, including those listed above, the Pensions Regulator, the Pensions Ombudsman and Her Majesty’s Revenue and Customs (HMRC). They may then use the data to carry out their legal functions.

In some cases these recipients may be outside the UK. This means your personal data may be transferred outside the EEA to a jurisdiction that may not offer an equivalent level of protection as is required by EEA countries. If this occurs, we are obliged to verify that appropriate safeguards are implemented with a view to ​protecting your data in accordance with applicable laws. Please use the contact details below if you want more information about the safeguards that are currently in place.

How long we keep your personal data?

We will only keep your personal data for as long as we need to in order to fulfil the purpose(s) for which it was collected and for so long afterwards as we consider may be required to deal with any questions or complaints that we may receive, unless we elect to retain your data for a longer period to comply with our legal and regulatory obligations.

Transaction data in relation to childcare grants funding that we administer will be retained for 7 years in line with Financial Regulations.

More details can be found on the Council’s retention schedule ​​​​​​​​​​​​External link opens in a new window​​

What are your data protection rights?

Cardiff Childcare Business Support would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:

  • You have a right to access and obtain a copy of the personal data that the Council holds about you and to ask the Authority to correct your personal data if there are any errors or it is out of date. In some circumstances you may also have a right to ask the Council to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
  • ​If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the Data Protection Officer as indicated below. You also have the right to lodge a complaint in relation to this privacy notice or the Councils processing activities with the Information Commissioner’s Office which you can do through the website below or their telephone helpline.
  • You can obtain further information about these rights from the Information Commissioner’s Office​​​​​​​​​​​​ External link opens in a new window​​or via their telephone helpline 0303 123 1113.

The legal basis for our use of your personal data?

The Council holds personal data about you in its capacity as data controller. This includes the need to process your data to contact you and for statistical and reference purposes. Further information about how we use your personal data is provided below.

  • The legal basis for our use of your personal data will generally be one or more of the following:
  • We need to process your personal data to satisfy our obligations as the Local Authority as well as report back to Welsh Government on our grant funded training.
  • We need to process your personal data to carry out a task in the public interest or in the exercise of official authority in our capacity as a public body; [and/or] because we need to process your personal data to meet our contractual obligations to you processing is necessary in order to protect the vital interested of the data subject or of another natural person.

Updating this notice

We may update this notice periodically. Where we do this, we will inform you of the changes and the date on which the changes take effect.

Please contact the Data Protection Officer for further information.

Data Protection Officer

Information Governance Team

County Hall

Atlantic Wharf


CF10 4UW ​​​​​​​​​​​​External link opens in a new window​​

Changes to our privacy policy.

  • Cardiff Childcare Business Support keeps its privacy policy under regular review.
  • This privacy policy was last updated on 10.05.2023