Privacy policy | Cradle Bean | Postnatal Care in London

Privacy Policy Last Updated: 1 June 2026

1. Introduction

Cradle Bean ("Cradle Bean", "we", "us", or "our") is committed to protecting your privacy and handling your personal information fairly, lawfully, and transparently.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you:

Visit our website;
Contact us with an enquiry;
Request information about our services;
Book services through us;
Apply to work with us as a carer or support professional; or
Otherwise interact with Cradle Bean.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

2. Data Controller

Cradle Bean is the data controller responsible for the personal information covered by this Privacy Policy.

Contact details:

Email: contact@cradlebean.com

Website: www.cradlebean.com

If you have any questions regarding this Privacy Policy or how we process personal information, please contact us using the details above.

3. Personal Information We Collect

Information Provided by Families and Clients

We may collect:

Full name
Email address
Telephone number
Home address
Emergency contact details
Booking requirements and preferences
Information about your baby, newborn, or family support needs
Records of communications with us
Information provided during consultations or enquiries

Health and Wellbeing Information

In certain circumstances, clients may voluntarily provide information relating to:

Pregnancy
Birth recovery
Postnatal wellbeing
Feeding arrangements
Sleep arrangements
Medical considerations relevant to the safe provision of support

We will only process such information where necessary for the provision of our services, safeguarding purposes, compliance with legal obligations, or with your consent where required.

Information Provided by Carers and Applicants

We may collect:

Full name
Contact details
CV and employment history
Professional qualifications
Training certificates
References
DBS information
Right to work documentation
Proof of identity
Proof of address
Insurance information where applicable
Other information necessary for recruitment, vetting, safeguarding, and compliance purposes

Website Information

When you visit our website, we may automatically collect:

IP address
Browser type
Device information
Operating system information
Website usage data
Cookies and analytics information

4. How We Use Personal Information

We may use personal information to:

Respond to enquiries
Arrange consultations
Provide our services
Match families with suitable carers
Manage bookings
Communicate regarding services
Process invoices and payments
Maintain safeguarding standards
Verify qualifications and suitability of carers
Conduct recruitment and compliance checks
Improve our website and services
Prevent fraud or misuse
Meet legal, insurance, regulatory, and safeguarding obligations
Establish, exercise, or defend legal claims

5. Lawful Bases for Processing

We process personal information under one or more of the following lawful bases:

Contract

Where processing is necessary to provide services requested by you or to take steps before entering into a contract.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements.

Legitimate Interests

Where processing is necessary for our legitimate business interests, including operating and improving our services, safeguarding clients, recruiting carers, maintaining records, and protecting our business.

Consent

Where consent is required by law, including certain marketing activities and certain categories of personal information.

Where processing is based on consent, you may withdraw your consent at any time.

6. Special Category Data

Certain information, such as health-related information, may be classified as special category data under UK GDPR.

Where we process special category data, we will do so only where an appropriate legal basis exists, including where:

You have provided explicit consent;
Processing is necessary for safeguarding purposes;
Processing is necessary to establish, exercise, or defend legal claims; or
Processing is otherwise permitted under applicable law.

7. Sharing Personal Information

We may share personal information where necessary with:

Approved Cradle Bean carers and support professionals;
Professional advisers, including legal, accounting, insurance, and compliance advisers;
Technology and service providers who support our operations;
Payment providers;
Regulatory authorities;
Safeguarding authorities;
Law enforcement agencies where required by law.

We require third parties handling personal information on our behalf to maintain appropriate confidentiality and security measures.

We do not sell personal information to third parties.

8. International Transfers

Some of our service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate safeguards to ensure that personal information receives a level of protection consistent with UK data protection law.

9. Data Security

We implement appropriate technical and organisational measures designed to protect personal information against:

Unauthorised access;
Accidental loss;
Destruction;
Misuse;
Alteration; and
Disclosure.

Despite these measures, no electronic transmission or storage system can be guaranteed to be completely secure.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on the nature of the information and our legal obligations.

As a general guide:

Client records may be retained for up to 7 years following the end of our relationship;
Recruitment, compliance, safeguarding, and vetting records may be retained for up to 7 years or longer where legally justified;
Financial records may be retained as required by tax and accounting laws.

Information that is no longer required will be securely deleted or anonymised.

11. Your Rights

Subject to applicable law, you may have the right to:

Request access to personal information;
Request correction of inaccurate information;
Request erasure of personal information;
Request restriction of processing;
Object to processing;
Request data portability;
Withdraw consent where applicable.

Requests may be submitted using the contact details provided in this Privacy Policy.

We may request proof of identity before responding to certain requests.

12. Cookies

Our website may use cookies and similar technologies to:

Improve website functionality;
Analyse website performance;
Understand visitor behaviour; and
Enhance user experience.

You can manage cookie preferences through your browser settings.

13. Third Party Websites

Our website may contain links to third-party websites.

We are not responsible for the content, security, or privacy practices of third-party websites. Users should review the privacy policies of any external websites they visit.

14. Children's Information

Our services are intended for parents, guardians, and families.

We do not knowingly collect personal information directly from children through our website.

Where information relating to a child is provided as part of delivering our services, it will be handled with appropriate confidentiality, safeguarding considerations, and security measures.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updates will be published on this page and will become effective upon publication unless otherwise stated.

16. Contact Us

If you have questions about this Privacy Policy or how we process personal information, please contact:

Cradle Bean