PRIVACY AND DATA PROTECTION POLICY
Faye’s Sitters Limited
Company number: 16715542
Last updated: 12/01/2026
Introduction
Faye’s Sitters Limited (“we”, “us”, “our”) is committed to protecting and respecting personal data. This Privacy and Data Protection Policy explains how we collect, use, store, and protect personal data relating to babysitters (“Babysitters”), parents or guardians (“Customers”), and children for whom services are provided.
We comply with the UK GDPR, the Data Protection Act 2018, and all applicable data protection laws in the United Kingdom.Data Controller
Faye’s Sitters Limited is the Data Controller for personal data collected through the platform.
Privacy contact:
Alys Gallagher
Email: alys@fayes-sitters.com
[Postal address if you choose to include one]Where Data Is Stored
All personal data is stored securely in Airtable, which acts as our primary data storage system. Payment and bank account details are processed and stored exclusively by Stripe. We do not store bank accounts or card details ourselves.Personal Data We Collect
4.1 Babysitters
We collect and store the following personal data about Babysitters:
Full name
Full date of birth
Contact details, including email address and phone number
Home area or postcode
Qualifications, experience, and training
DBS certificate number and verification status
Right to work verification records
Availability and hourly rate
Booking history and platform activity
Incident, complaint, or safeguarding records
Communications sent via the platform
EMERGENCY CONTACT INFO
No photos are stored.
4.2 Customers (Parents or Guardians)
We collect and store the following personal data about Customers:
Full name
Contact details, including email address and phone number
Home address where services take place
Booking details and preferences
Emergency contact information
4.3 Children
We collect limited personal data about children for safeguarding and care purposes only, including:
Month and year of birth
Basic medical or care related information provided by the parent or guardian
We do not store photographs of children.
5. Special Category Data
We process limited special category personal data where necessary, including:
DBS related information
Safeguarding and incident records
Basic medical information about children
This data is processed only where necessary for safeguarding, legal compliance, and the safe provision of childcare services, and is subject to enhanced security controls.
6. How We Use Personal Data
We use personal data to:
Operate and manage the Faye’s Sitters platform
Verify identity, safeguarding, DBS, and right to work compliance
Facilitate bookings between Babysitters and Customers
Process payments and payouts through Stripe
Communicate about bookings, platform updates, and support
Manage complaints, incidents, and safeguarding concerns
Send newsletters and promotional communications
Comply with legal and regulatory obligations
Lawful Bases for Processing
We process personal data under the following lawful bases:
Performance of a contract
Legal obligation
Legitimate interests, including safeguarding, platform safety, and fraud prevention
Consent, where required for marketing communications
Marketing communications are sent on an opt out basis, and recipients may unsubscribe at any time.
8. Data Retention
We retain personal data only for as long as necessary:
Babysitter account data: duration of the relationship plus 2 years
DBS certificate numbers and right to work records: duration of the relationship plus 2 years
Safeguarding and incident records: 5 years
Customer account and booking data: duration of the relationship plus 2 years
Communications and support records: up to 2 years
Data is securely deleted or anonymised when no longer required.
9. Data Sharing
We may share personal data with:
Stripe, for payment processing
DBS and background check providers
Insurance providers where required
Insurance providers in relation to Faye’s Sitters Limited’s own corporate insurance, where required
We do not sell personal data to third parties.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data, including access controls, role based permissions, and secure storage systems. Access to personal data is limited to authorised personnel only.
11. Data Subject Rights
Individuals have the right to:
Access their personal data
Request correction of inaccurate data
Request deletion where applicable
Restrict or object to processing
Request data portability
Withdraw consent for marketing communications
Requests can be made by contacting us using the details in Section 2.
12. Babysitters as Independent Data Controllers
Babysitters act as independent Data Controllers for any personal data they process directly while providing childcare services and are responsible for complying with data protection laws in that context.
13. Data Breaches
We maintain procedures to identify, assess, and report personal data breaches. Where required, we will notify the Information Commissioner’s Office and affected individuals without undue delay.
14. Changes to This Policy
We may update this policy from time to time. The most recent version will always be available on the platform.