Privacy Policy
Last Updated: July 2026
1. Introduction
Welcome to Amadoo.
Amadoo is a nursery management platform designed to help childcare providers manage child records, observations, communications, attendance, billing, staffing, and compliance activities.
We are committed to protecting personal information and processing data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.
Amadoo acts primarily as a Data Processor on behalf of nurseries and childcare providers. Nurseries remain responsible for determining the purposes and lawful basis for collecting and processing child, parent, and staff information.
2. Information Processed Through the Platform
The Amadoo platform may be used by nurseries and childcare providers to store and manage the following categories of information:
Parent and Guardian Information
- Names
- Email addresses
- Telephone numbers
- Emergency contact information
- Relationship to child
- Billing and payment information
Child Information
- Names
- Dates of birth
- Gender
- Attendance records
- Learning journey records
- Development observations
- Photographs
- Medical information
- Dietary requirements
- Allergy information
- Accident and incident records
Some of this information may constitute special category personal data and is processed with appropriate safeguards.
Staff Information
- Names
- Contact details
- Job titles
- Attendance records
- Qualifications
- Training records
- Leave records
3. How Information Is Used
Information processed through Amadoo is used solely to provide and improve nursery management services.
This includes:
- Managing nursery operations
- Maintaining child records and learning journeys
- Facilitating communication between parents and staff
- Recording attendance, incidents, and safeguarding information
- Supporting billing and administrative processes
- Providing customer support
- Maintaining platform security and reliability
- Improving platform functionality and performance
4. AI Features (Ami)
Amadoo may provide AI-powered features through Ami, including:
- Observation drafting
- Report generation
- Summaries
- Translation assistance
- Administrative support
Information submitted to Ami is used solely to provide the requested functionality.
Customer data submitted through Ami is not used to train publicly available artificial intelligence models.
5. Data Security
We implement industry-standard technical and organisational measures to protect personal information, including:
- Encryption of data in transit and at rest
- Role-based access controls
- Secure authentication mechanisms
- CAPTCHA and abuse prevention measures
- Activity monitoring and audit logging
- Regular security reviews and updates
- Secure backup and recovery procedures
In the event of a personal data breach, Amadoo will investigate the incident promptly and notify affected customers where required by applicable law.
6. Certifications & Compliance
Amadoo is independently certified and registered against UK data protection and cyber security standards:
Cyber Essentials Certified
Independently assessed and certified by IASME against the UK government-backed Cyber Essentials scheme.
ICO Registered
Registered with the UK Information Commissioner’s Office as a data controller and processor under UK GDPR.
These certifications provide independent assurance that Amadoo has implemented appropriate technical and organisational measures to safeguard the personal data of children, parents and staff processed through the platform.
7. Data Hosting
Amadoo uses Supabase as its database and infrastructure provider.
Data is hosted within secure cloud infrastructure and protected using industry-standard security controls. Appropriate safeguards are implemented to protect personal information and maintain service reliability.
8. Your Data Rights
Under UK GDPR, individuals may have the right to:
- Access their personal information
- Correct inaccurate information
- Request deletion of personal information where applicable
- Restrict processing
- Object to processing
- Request data portability where applicable
Where Amadoo processes data on behalf of a nursery or childcare provider, requests relating to personal data may need to be directed to the relevant nursery or childcare provider acting as the Data Controller.
9. Data Retention
Personal information is retained only for as long as necessary to provide services, comply with legal obligations, and fulfil contractual requirements.
Upon termination of services, data may be securely deleted, anonymised, or returned to the relevant nursery in accordance with applicable law and contractual arrangements.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Amadoo Ltd14 Wanstead Lane
Ilford
Essex
IG1 3SB
United Kingdom
