Privacy Policy
Last updated: 20 October 2026
1. Who we are
Giggles and More Ltd is a registered childcare provider operating in West Lothian and Edinburgh. We are registered with and regulated by the Care Inspectorate, and registered with Disclosure Scotland and the Scottish Social Services Council (SSSC). We comply with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection law, Giggles and More Ltd (Company No. SC799553, 8 Deer Park, Fairways Business Park, Livingston, EH54 8GA) is the data controller. If you have questions about how we handle your personal data, please email contact@gigglesandmore.co.uk.
2. Information we collect
- Contact information: your name, email address and telephone number when you submit an enquiry or contact form.
- Child information: your child's age and, if you provide it in an enquiry, their name, so we can match you with the most suitable service. Please only include information needed for your enquiry; detailed care information can be discussed with us directly.
- Job application information: your name, contact details, experience, availability, preferred location and role, PVG status, and other details you provide when applying for a position.
- Technical information: IP address, browser signals and security information processed to deliver and protect the website, including checks performed by Cloudflare Turnstile.
We do not currently use optional visitor analytics or advertising trackers in this website. For information about cookies and similar storage, see our Cookie Policy.
3. How we use your information
We use the personal information you provide to respond to your enquiries and provide information about our childcare services; process and consider job applications; improve our website and services; protect our forms against spam; and comply with our legal obligations.
We will only use your personal data for the purposes for which it was collected, or a compatible lawful purpose. We will not sell, rent or share your personal data with third parties for marketing purposes.
4. Legal basis for processing
- Legitimate interests: responding to enquiries, assessing applications, operating our business and protecting the website, balanced against your rights.
- Contractual necessity: taking steps at your request before entering a contract, or providing our services under a contract.
- Legal obligation: processing required to comply with the law, including our responsibilities as a registered childcare provider.
- Consent: where you have given permission to use your data for a specific purpose. Where sensitive information requires an additional legal condition, we will explain this when collecting it.
5. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Enquiry data is typically retained for up to 12 months. Job application data is retained for up to 6 months unless you are offered a position. If you become a client or employee, we retain your data in accordance with our operational records policy and any legal requirements.
6. Your rights
Under UK GDPR, depending on the circumstances, you have the right to access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (the “right to be forgotten”); object to or restrict processing; request a copy in a portable format; and withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect the lawfulness of earlier processing.
To exercise these rights, email contact@gigglesandmore.co.uk. We aim to respond within 30 days and will comply with the statutory one-calendar-month deadline, subject to any permitted extension. We may need to verify your identity. If an extension is necessary, we will explain why.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS encryption and access to personal data is restricted to authorised personnel. No online system is completely risk-free; please avoid sending unnecessary sensitive information through an enquiry form.
8. Third-party services
We use Lovable Cloud to host the website and store submitted enquiries and applications. Our forms use Cloudflare Turnstile to help prevent automated spam. Cloudflare processes technical information, including IP address and browser signals, to verify visitors; this check is not used by us for advertising.
Service providers may process data on our behalf to operate and secure these services. We may also disclose information where required by law, including to relevant safeguarding or regulatory authorities. Where personal data is transferred outside the UK, applicable data protection safeguards are required.
If optional analytics are introduced, we will update this policy and the Cookie Policy and obtain consent before using non-essential cookies or similar technologies.
9. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.