Bright Start privacy notice
This privacy notice explains how we process and protect your data when you register for Bright Start Services for under 5’s including: Start for Life, Family Hubs and Children’s Centres.
Last updated: May 2026
What this notice is about
This privacy notice explains how the council (in conjunction with Whittington Health NHS Trust and other partners) collects, uses, and protects your personal information when you register for or use services provided through Bright Start, Start for Life, children’s centres, and Family Hubs. These services support families from pregnancy through to a child’s 5th birthday, and in some cases up to age 19 (or 25 for young people with special educational needs and disabilities)
What information we collect, hold and use
When you register or use our services, we may collect:
- your details (including name, contact information, ethnicity, disability, employment and benefit status, first language, lone parent status, refugee or asylum seeker status)
- your child’s details (including name, date of birth, ethnicity, disability, and other relevant characteristics)
- information about your family’s needs and the services you access
- information provided by other professionals involved in your or your child’s care, such as health visitors, schools, other local authorities)
Where we get your information from
We get information from:
- directly from you and your family
- from other organisations involved in your care (e.g. NHS, schools, police, safeguarding partners)
- from other council departments
How we use this information
This information is used for registering your family with Bright Start Islington or accessing our services. We will also use it so that you can be contacted about Bright Start activities and related Early Help and Family Support services.
Our legal reasons (under UK GDPR) for processing (using) your data
Under UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018) and the Data Use and Access Act 2025 (DUAA 2025) we use your data because:
- we are doing something in the public interest or as part of our official duties (public task)
- it’s our legal obligation (the law says we must)
- you give your consent (you say that we can)
Other laws that apply to our services
We follow these laws:
- Children Act 1989
- Children Act 2004
- Children and Families Act 2014
- Other relevant education, health, and safeguarding laws
- Data Protection Act 2018
- UK General Data Protection Regulation (UK GDPR)
- Data Use and Access Act (2025)
Who we share your information with
We may share your information with:
- NHS organisations and health providers
- schools and education providers
- other local authorities and government departments, such as Department for Education
- police and safeguarding agencies
- voluntary and community sector partners
- other council departments, where necessary and lawful
We only share information when it is necessary and lawful. Sometimes the law requires us to share your data, and in those cases, we do not need your consent.
How we store your data
Your information is stored securely on council servers and in our case management systems. Only authorised staff can access it.
We only keep information for as long as the law requires. For more details check our main privacy notice and retention schedule.
Your individual rights
You have rights over your personal data. For more details see our main privacy notice and the page about your individual rights.
Complaints
If you are unhappy with how we use your data please see the council’s main privacy notice to find out how to contact our Data Protection Officer and make a complaint.