top of page

Privacy Policy

​

1. Introduction

This Privacy Policy explains how Jack in the Box (“we”, “our”, “us”) collects, uses, and protects personal information when you visit our website or contact us online. We are committed to safeguarding your privacy and complying with the UK GDPR and the Data Protection Act 2018.

By using our website, you agree to the practices described in this policy.

2. Who We Are

Jack in the Box Day Nursery (651, Uttoxeter Road, ST35PZ, 01782 320281)

We act as the Data Controller for information collected through this website.

3. Information We Collect Through This Website

3.1 Information You Provide Directly

  • Contact form submissions (name, email, phone number, message)

  • Enquiry details about childcare places

  • Newsletter sign‑ups (if applicable)

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address

  • Browser type and device information

  • Pages visited and time spent on the site

  • Cookies and analytics data (non‑identifiable)

3.3 Cookies

Our website uses cookies to:

  • Improve site performance

  • Understand how visitors use the site

  • Enable essential website functions

You can disable cookies in your browser settings at any time.

4. How We Use Your Information

We use website‑collected information to:

  • Respond to enquiries

  • Provide information about our services

  • Improve website performance and user experience

  • Maintain security and prevent misuse

  • Manage newsletter subscriptions (if applicable)

We do not use your information for unsolicited marketing.

5. Lawful Bases for Processing

We rely on the following lawful bases:

  • Legitimate interests – responding to enquiries, improving our website

  • Consent – when you submit a form or sign up for updates

  • Legal obligation – where required by law (e.g., safeguarding concerns)

6. Sharing Your Information

We only share personal data when necessary and with appropriate safeguards. This may include:

  • Website hosting providers

  • Email service providers

  • Analytics tools (e.g., Wix analytics)

We never sell your personal information.

7. Data Storage and Security

We take appropriate technical and organisational measures to protect your data, including:

  • Secure servers

  • Encrypted connections (HTTPS)

  • Restricted access to authorised staff only

  • Regular security reviews

8. How Long We Keep Your Data

We retain website enquiry information only for as long as necessary:

  • Contact form enquiries: up to 12 months

  • Newsletter data: until you unsubscribe

  • Analytics data: according to the provider’s retention schedule

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate information

  • Request deletion (where applicable)

  • Withdraw consent

  • Object to certain types of processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us using the details above.

10. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

11. Children’s Data

We do not intentionally collect personal data from children through our website. Any data relating to children is collected offline as part of our childcare services and is covered by our full organisational Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Data Protection Lead

bottom of page