Privacy and Data Protection Policy

    Faye’s Sitters Limited · Company number: 16715542

    1. Introduction

    Faye’s Sitters Limited (“we”, “us”, “our”) is committed to protecting and respecting personal data. This Privacy and Data Protection Policy explains how we collect, use, store, and protect personal data relating to babysitters (“Babysitters”), parents or guardians (“Customers”), and children for whom services are provided.

    We comply with the UK GDPR, the Data Protection Act 2018, and all applicable data protection laws in the United Kingdom.

    2. Data Controller

    Faye’s Sitters Limited is the Data Controller for personal data collected through the platform.

    Privacy contact:
    Alys Gallagher
    Email: alys@fayes-sitters.com

    3. Where Data Is Stored

    All personal data is stored securely in Airtable, which acts as our primary data storage system. Payment and bank account details are processed and stored exclusively by Stripe. We do not store bank accounts or card details ourselves.

    4. Personal Data We Collect

    4.1 Babysitters

    We collect and store the following personal data about Babysitters:

    • Full name
    • Full date of birth
    • Contact details, including email address and phone number
    • Home area or postcode
    • Qualifications, experience, and training
    • DBS certificate number and verification status
    • Right to work verification records
    • Availability and hourly rate
    • Booking history and platform activity
    • Incident, complaint, or safeguarding records
    • Communications sent via the platform
    • Emergency contact information

    No photos are stored.

    4.2 Customers (Parents or Guardians)

    We collect and store the following personal data about Customers:

    • Full name
    • Contact details, including email address and phone number
    • Home address where services take place
    • Booking details and preferences
    • Emergency contact information

    4.3 Children

    We collect limited personal data about children for safeguarding and care purposes only, including:

    • Month and year of birth
    • Basic medical or care related information provided by the parent or guardian

    We do not store photographs of children.

    5. Special Category Data

    We process limited special category personal data where necessary, including:

    • DBS related information
    • Safeguarding and incident records
    • Basic medical information about children

    This data is processed only where necessary for safeguarding, legal compliance, and the safe provision of childcare services, and is subject to enhanced security controls.

    6. How We Use Personal Data

    We use personal data to:

    • Operate and manage the Faye’s Sitters platform
    • Verify identity, safeguarding, DBS, and right to work compliance
    • Facilitate bookings between Babysitters and Customers
    • Process payments and payouts through Stripe
    • Communicate about bookings, platform updates, and support
    • Manage complaints, incidents, and safeguarding concerns
    • Send newsletters and promotional communications
    • Comply with legal and regulatory obligations

    7. Lawful Bases for Processing

    We process personal data under the following lawful bases:

    • Performance of a contract
    • Legal obligation
    • Legitimate interests, including safeguarding, platform safety, and fraud prevention
    • Consent, where required for marketing communications

    Marketing communications are sent on an opt out basis, and recipients may unsubscribe at any time.

    8. Data Retention

    We retain personal data only for as long as necessary:

    • Babysitter account data: duration of the relationship plus 2 years
    • DBS certificate numbers and right to work records: duration of the relationship plus 2 years
    • Safeguarding and incident records: 5 years
    • Customer account and booking data: duration of the relationship plus 2 years
    • Communications and support records: up to 2 years

    Data is securely deleted or anonymised when no longer required.

    9. Data Sharing

    We may share personal data with:

    • Stripe, for payment processing
    • DBS and background check providers
    • Insurance providers where required
    • Insurance providers in relation to Faye’s Sitters Limited’s own corporate insurance, where required

    We do not sell personal data to third parties.

    10. Data Security

    We implement appropriate technical and organisational measures to protect personal data, including access controls, role based permissions, and secure storage systems. Access to personal data is limited to authorised personnel only.

    11. Data Subject Rights

    Individuals have the right to:

    • Access their personal data
    • Request correction of inaccurate data
    • Request deletion where applicable
    • Restrict or object to processing
    • Request data portability
    • Withdraw consent for marketing communications

    Requests can be made by contacting us using the details in Section 2.

    12. Babysitters as Independent Data Controllers

    Babysitters act as independent Data Controllers for any personal data they process directly while providing childcare services and are responsible for complying with data protection laws in that context.

    13. Data Breaches

    We maintain procedures to identify, assess, and report personal data breaches. Where required, we will notify the Information Commissioner’s Office and affected individuals without undue delay.

    14. Changes to This Policy

    We may update this policy from time to time. The most recent version will always be available on the platform.