# Privacy notice

What personal information Toddly collects, why, who we share it with, how long we keep it, and how to see, correct or delete it.

Updated 13 November 2026. Page: https://toddly.co.uk/privacy

This notice explains how Sentient AI Inc ("we") uses personal information when you use Toddly. It is written in plain English. If anything is unclear, email us at hello@toddly.co.uk.

## Who we are

Toddly is run by Sentient AI Inc (71–75 Shelton Street, Covent Garden, London WC2H 9JQ). For the personal information described here we are the **controller**: we decide why and how it is used. Contact: hello@toddly.co.uk.

When you send an enquiry to a nursery, the nursery that receives it becomes a separate controller of the copy it gets, and its own privacy notice applies from then on.

## What we collect and why

| What | When | Why (lawful basis) |
|---|---|---|
| Your email address, sign-in times | You sign in (we email you a one-time link; there are no passwords) | To give you an account (contract) |
| Your shortlist | You save nurseries while signed in | To show it on all your devices (contract) |
| Your name, email or phone, your child's age, start date, days and the message you write | You send an enquiry, request a visit or a callback | To pass it to the nursery you chose, or keep it until it can be passed on (your consent, which you give with the tick box; you can withdraw it at any time) |
| What you type to the assistant on a nursery page, and its answers | You use the chat | To answer you, and to show a nursery that has claimed its page the chats with its assistant and the questions parents ask (legitimate interests: running the service you asked for) |
| Your review and ratings | You write a review | To publish it after we check it (consent) |
| For nursery staff: your name, role and work email | You claim a nursery's page | To check you work there and let you manage the page (legitimate interests; contract once you use the dashboard) |
| For nursery staff trying the demo: your name, work email and your nursery's website, and what you type to the demo assistant | You fill in the form at /for-nurseries/demo | To show you the assistant on your nursery's own page, and so we know who tried it (legitimate interests). We never email you because of it, and the nursery's dashboard never shows demo chats |
| For paying nurseries: the billing contact | You subscribe | To take payment through Stripe (contract; legal obligation for tax records) |
| Postcodes you search for | You search or check a distance | To find nurseries near it (legitimate interests). We do not link it to you |
| Technical information: the page asked for, the time and how long it took | Every visit | To keep the site working and secure (legitimate interests). Our access log does not record your IP address or what you searched for |

We never ask for your child's name, and please do not put it in a message. We do not publish anyone's email address, and we never publish the names of nursery staff.

We do not use your information for advertising, we do not build profiles of you, and we do not make decisions about you by automated means that have legal or similar effects.

## Who we share it with

- **The nursery you contact.** Your enquiry goes to the nursery you chose, and only to an address we have verified: the managers who claimed the page on Toddly, or an address the nursery confirmed to us. Until then we keep it and tell you so. We never send it to an address we have not verified, and never to any other nursery.
- **The nursery whose assistant you chat with**, once it has claimed its page on Toddly. The managers who claimed it can read chats with their assistant, on its page here and on its own website, so they can improve its answers; the chat says so before you start. They see what was typed, never your name or contact details unless you send them an enquiry. Chats from before a nursery claimed its page are never shown to it. Chats are deleted 12 months after the last message.
- **Service providers** who process information for us under contract and only on our instructions:
  - Amazon Web Services: hosting and backups of our database, and (through its Bedrock service, running Anthropic's Claude model) the AI assistant that answers chat questions and the AI search. What you type in the chat is sent to the model to produce an answer; it is not used to train the model.
  - Cloudflare: our network and security layer (it sees your IP address to deliver the site and block attacks), and storage for static map pictures, which contain no personal information.
  - Our email delivery provider, which sends sign-in links, enquiry emails and confirmations.
  - Stripe, which takes payments from nurseries that subscribe. We never see or store card details.
  - postcodes.io, which turns a postcode you search for into a location. We send only the postcode.
  - When you open a map, your browser loads map images from OpenStreetMap and the map software from Cloudflare's cdnjs service, which see your IP address like any website you visit.
- **Authorities**, if the law requires it.

We never sell personal information.

## International transfers

Some providers (Amazon Web Services, Anthropic through Amazon Bedrock, Cloudflare, Stripe) are US companies and may process information in the United States. Where they do, transfers rely on the UK–US data bridge or the UK International Data Transfer Addendum to standard contractual clauses, which those providers offer.

## How long we keep it

| What | How long |
|---|---|
| Chat conversations | 12 months after the last message, then deleted |
| Enquiries we could not pass on (the nursery has not joined yet) and "help me find a nursery" requests | 12 months, then deleted |
| Demo requests from nursery staff (/for-nurseries/demo) | 12 months, then deleted |
| Enquiries passed to a nursery | 24 months in our systems, then deleted (the nursery keeps its own copy under its own policy) |
| Queued copies of the emails we send (sign-in links, enquiries, confirmations) | 30 days after sending |
| Sign-in links | Expire after 20 minutes; deleted within a day |
| Your account, shortlist and reviews | Until you delete your account |
| Daily limits that stop abuse (a one-way scrambled form of an IP address or email, and a count) | Until the next day |
| Database backups | 7 days |

These periods are applied automatically by a daily job.

## Your rights

You have the right to see the personal information we hold about you, to have it corrected or deleted, to object to our use of it or ask us to restrict it, to take a copy with you, and to withdraw consent at any time (this does not affect what we did before).

- **See and download your data:** sign in and open [your account](/account), then "Download my data". You get everything linked to your account as a file.
- **Delete your account:** in [your account](/account), choose "Delete my account". It takes effect straight away.
- **Anything else** (for example an enquiry you sent without an account, or a correction): email hello@toddly.co.uk. We reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office (ICO): [ico.org.uk/make-a-complaint](https://ico.org.uk/make-a-complaint/), or call 0303 123 1113.

## Cookies and storage in your browser

We use only what the site needs to work. There are no advertising or analytics cookies, so we do not show a cookie banner. See [cookies](/cookies) for the full list.

## Children

Toddly is for parents and carers. We do not knowingly collect information from children. When you tell a nursery about your child, we ask only for their age and when you would like them to start, never their name.

## Changes to this notice

If we change how we use personal information, we will update this page and its "updated" date. If a change matters to people who have an account, we will email them.

## Frequently asked questions

### Do you sell my data?

No. We never sell personal information, and we never pass a parent's details to a nursery other than the one they chose to contact.

### How do I delete my account?

Sign in, open your account and choose "Delete my account". It removes your account, shortlist and reviews straight away, and removes your name and contact details from enquiries you sent.

### Do you use advertising or tracking cookies?

No. We use one sign-in cookie and a small "signed in" hint, both only after you sign in, plus a few settings kept in your own browser. No advertising, no analytics trackers.