top of page

Data Protection

At Snooze & Bloom (S&B), we take your family’s privacy seriously. To provide a high-quality service, and to
meet legal requirements, we need to collect and process personal information about you and your child.

​

We handle all information in line with the UK General Data Protection Regulation (GDPR).

​

1. GDPR Principles


• S&B will only collect personal data for a lawful reason and will explain clearly what we collect and why.
• S&B will only use your data for the purpose it was given - not for unrelated marketing.
• S&B will only collect required information.
• S&B will ensure that data is accurate and up to date, and will ask you to check this regularly.
• S&B will not keep data longer than necessary.
• S&B will store all data securely, whether on paper, computer, or in the cloud.
• S&B is accountable for the data held.

​

2. Collecting, Storing, and Using Data


• S&B is registered with the Information Commissioner’s Office (ICO).
• S&B will request personal information only to deliver a tailored sleep support service.
• Paper records are locked away and securely destroyed when no longer needed.
• Digital records (including photos or videos if you consent) are stored in password-protected or encrypted files.

• Cloud storage (iCloud, Google Drive, Dropbox, Google Workspace) is only used where GDPR compliance is confirmed.
• We complete quarterly data audits to ensure all information is held lawfully.

​

3. Retention and Disposal


• We will delete or destroy records once they are no longer needed, in line with statutory requirements.
• When your support period ends, emails and cloud-based files will be deleted.
• Certain records may be kept for legal or regulatory reasons, then securely disposed of.

​

4. Your Rights


• You have the right to view any records about your child at any time. Requests must be made in writing and
   will be fulfilled within one month.
• We will ask you to review your information periodically to confirm it is accurate.

​

5. Information Sharing


• S&B do not share your data with other childcare providers
• S&B will only share information if:


- You give explicit consent, or
- There is a child protection concern or medical emergency.


• Where possible, we will discuss any concerns with you first before sharing information.

​

6. Data Breach Procedure


• If we suspect your data has been accessed unlawfully, S&B will:


- Inform you immediately,
- Report the breach to the ICO within 72 hours, and
- Keep a written record of the breach and actions taken.

​

Data Privacy Notice

At Snooze & Bloom, your family’s privacy is extremely important to us. This Privacy Notice explains how we
collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation
(UK GDPR) and relevant data protection laws.

​

1. Why We Collect Personal Data


We collect personal information about you and your child/children in order to provide our sleep support and
consultancy services effectively, safely, and professionally.
We only collect information that is necessary to deliver your agreed service and to support your child’s
wellbeing.

​

2. Lawful Basis for Processing Data


Under GDPR, we must have a lawful basis for processing personal data. There are six lawful bases:

​

  • Consent – you have given clear permission for us to process your data for a specific purpose

  • Contract – processing is necessary to deliver the service you have booked

  • Legal obligation – processing is required to comply with the law

  • Vital interests – processing is necessary to protect someone’s life

  • Public task – processing is necessary to carry out a task in the public interest

  • Legitimate interests – processing is necessary for our legitimate business interests, provided these do not override your rights

​

Snooze and Bloom processes personal data under the following lawful bases: Consent/ Contract/ Legitimate interests

 

Where consent is required, you will always be given a clear and positive way to provide it, and you may withdraw consent at any time.

​

3. How We Collect Your Information


Information is collected directly from you:

 

  • Through pre-consultation forms

  • Email communication

  • Sleep logs/diaries

  • Review calls and follow-up support

  • Feedback provided during the support period

​

By booking a Snooze & Bloom service and providing this information, you are opting in to the service and to communication relating specifically to that service.
 

Personal sleep plans are created and updated using the information you provide. Any amendments will be
shared with you in full.

​

4. Information We May Collect
 

This may include:
Child and family details

​

  • Child’s name, date of birth, age, and address

  • Parent/carer names, addresses, email addresses, and contact numbers

  • Details of who has parental responsibility

  • Child’s GP, health visitor, or clinic details health and wellbeing information

  • Relevant medical history, allergies, or additional needs

  • Special educational needs or disabilities (if applicable)

  • Diet, feeding, and milk intake

  • Sleep logs and routines additional contextual information

  • Family routines and lifestyle

  • Childcare arrangements

  • Parenting approach (where relevant to sleep support)

  • Progress, challenges, and feedback during implementation

 

Where relevant, this may also include information such as ethnic group, religion, or home language, if it helps ensure culturally sensitive and appropriate support.

​

5. How Your Data Is Used


Your data is used only:

 

  • To assess your child’s sleep needs

  • To create and deliver personalised sleep support

  • To monitor progress and adjust recommendations

  • To meet legal and professional obligations

​

We will never use your personal data for unrelated marketing purposes.


Photographs of you or your child will never be used on our website or social media without your explicit written
consent.

​

6. Data Sharing


With your permission (and if absolutely necessary), information may be shared with:

 

  • Other professionals involved in your child’s care (e.g. health visitor, healthcare professionals)

  • Safeguarding authorities or Social Services if there is ever a concern about a child’s safety, in line with legal safeguarding duties (see Safeguarding Policy for more information).

​

7. Data Storage and Retention


Some personal information (including core client, financial, consent, and safeguarding records) must be
retained for a legally required period after our support service ends.


All data is:

  • Stored securely

  • Accessed only by authorised persons

  • Disposed of securely when no longer required​

​

8. Your Rights


You have the right to:

 

  • Request access to the personal data we hold about you or your child

  • Request corrections to inaccurate data

  • Withdraw consent at any time

​

To exercise your rights or request a copy of your data, please contact S&B, number, email

Please see our Data Protection Policy for further information on data security, data sharing, and your full rights
under GDPR.

bottom of page