cocorio
    Log inSign up

    Data and Privacy Policy

    Last updated: June 2026

    A. Introduction

    1. COCORIO is committed to adhering to data protection laws and protecting Your privacy.
    2. The purpose of COCORIO's data policy ("Data Policy") is to set out how We collect personal data from 'You' (i.e. both Customers and Creative Nannies), what personal data We collect from You, the basis on which We process such personal data, the uses which We may apply to such personal data and a summary of legal rights which You have under UK data protection laws.
    3. This Data Policy applies to all personal data which You provide to Us under any means. For example You might provide Us with personal data through use of the COCORIO Website or App.
    4. Please note that the account which you may hold with under the COCORIO Website or App is not intended for use by children. Please prevent children from using either the App or this account.

    Glossary

    In this Data Policy, the following capitalised terms shall have the following meanings:

    • Booking Platform – means the booking platform which is available on the Website and through which you can procure our services.
    • COCORIO – this is the company who We are, being a company registered in England and Wales under company number 10641258.
    • Creative Nanny – means the person who provides childcare services to You as a result of You making a booking for child care services with Us.
    • Customers – any COCORIO customer (including You).
    • Data Controller – has the meaning given to that term in the GDPR.
    • Data Subject – has the meaning given to that term in the GDPR.
    • GDPR – means GDPR, including as it (subject to applicable amendments) forms part of domestic Law of all or any part of the United Kingdom by virtue of section 3 of the European Union (Withdrawal) Act 2019, together with the Data Protection Act 2018, in each case as the same may be replaced, supplemented, substituted or amended from time to time.
    • Services – means any services which We provide to You.
    • We or Us – means COCORIO.
    • Website – https://cocorio.co.uk/ and the App.
    • Your Account – means the account which You hold with Us on the Website or App.
    • Your Personal Data – has the meaning given to this term in Clause 5 (below).
    • You or Your – Customer or Creative Nanny (as the context applies).

    C. Your Personal Data

    5. Please note that You may choose to provide us with personal data relating to one or more of the following individuals:

    • You;
    • Your spouse or partner; and
    • one or more of Your children.

    For the purposes of this Data Policy document, any personal data relating to any of the above individuals is referred to (collectively) as "Your Personal Data".

    D. Your obligations

    6. We ask that You please let Us know as soon as possible when there are any changes to any of Your Personal Data – by updating Your profile in the account You hold with Us.

    7. If You provide Us with any personal data relating to any other adult then We politely remind You that You must get that person's consent to both the disclosure and to the processing of that personal data in accordance with the terms of this Data Policy.

    E. Legal basis for handling Your Personal Data

    8. GDPR sets out a number of different reasons for which an organisation may collect and process Your Personal Data. Depending on the circumstances We may collect Your Personal Data for one or more of the following reasons:

    Consent

    9. In specific situations, We can collect and process Your Personal Data with Your consent.

    10. For example, We rely on consent when you click 'accept' in relation to this Data Policy as part of the Customer on-boarding process.

    11. We may also email You certain marketing materials after You have registered an account with Us and You have accepted such mailing distribution.

    Contractual obligations

    12. In certain circumstances, We need Your personal data to comply with our contractual obligations.

    13. For example, if You book our Services on the Website or App then We will process Your address details and details relating to Your finances (for example, Your card details) in order to deliver the Services.

    Legal compliance

    14. If the law requires Us to, We may need to collect and process some or all of Your Personal Data.

    Legitimate interest

    15. In specific situations, We process Your Personal Data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact Your rights, freedom or interests.

    16. For example, We will combine the booking history of Our many customers to identify trends and allow Us to keep up with demand, or develop new products/services. We will also send our Customers members information about sector updates and policy changes by email and post to support their practice and development.

    F. When do We collect Your personal data?

    We collect Your Personal Data when You do any of the following:

    • Use the Website or App to browse our Creative Nannies and services, view information, or interact with a Creative Nanny.
    • Request any information about Us to be sent to You.
    • Create a new account, make bookings, buy products, redeem vouchers, or submit an enquiry.
    • Comment on or review our products or services or take part in competitions or public events.
    • Sign up to receive one of our newsletters.
    • Make any kind of booking or appointment with Us.
    • Communicate with Us via social media or live-chat.
    • Choose to complete any surveys and provide Your personal details.
    • Have given a third party permission to share with Us the information they hold about You.
    • Apply for a job to work for Us.
    • Attend any events which COCORIO or its Creative Nannies participate in.
    • Contact Us by any means with queries.

    G. Cookie policy

    29. Cookies are small text files placed on your device when you visit a website. We also use similar technologies, such as browser storage, to help our Platform function correctly. This Cookie Policy applies to cocorio.co.uk and app.cocorio.co.uk.

    For full details on essential, analytics and marketing cookies, third-party services, and how to manage Your preferences, see our Cookie Policy.

    H. What sort of data do We collect and how We use it

    44. We want to deliver excellent customer service. In order to achieve this We do need to have relevant information about our service users.

    45. When You register with Us, We ask You for Your name, billing/service delivery address, contact telephone number, email address, credit card or other payment information. We will use Your information to verify Your credit card details for Your purchase, process Your order and to send You Your goods. We will also send You a receipt via email and We may use Your telephone number to contact You regarding Your purchase (such as requesting feedback).

    46. As part of the registration process You may choose to provide details of Your spouse or partner and of Your child(ren).

    47. We may also contact You after a booking has happened in order to follow up on Your interest and ensure that We have answered it to Your satisfaction.

    48. We may ask You and You may consent to participate in research, surveys, prize draws and other promotions. We will use such personal data to give greater insight and accuracy into our research and to administer our prize draws (where applicable), and to develop and improve our products and services.

    49. We require information about Our Customers in order to be able to deliver Our customer service and benefits and to provide other products and services. This will include name, address and contact details.

    50. If You communicate with Us requesting guidance or further information We may ask for Your name, e-mail address, telephone number and postal address (where applicable) so We can respond to and communicate with You about Your questions, comments or enquiry.

    51. We collect Your name and address directly from the App and the Website in order to gather support when We run a campaign which normally endeavours to represent the interests of the childcare sector. We will use Your Personal Data in order to collate statistical information to be presented to the government in support of our campaigns.

    52. In some cases We may require evidence of documentation to be able to use certain services or to take up employment with Us.

    53. If You make a complaint about one of our services then We will normally require Your name, contact details and relevant information about Your concern, in order to be able to resolve the matter.

    54. Your employment history and details of referees (who We presume consent to Us contacting them if We wish to proceed with Your application).

    55. Information about Your partner/spouse and/or child(ren) if relevant to the enquiry or registration.

    J. Who do We share Your Personal Data with?

    56. We use trusted third-party service providers to support the operation of our platform and services, including:

    • Supabase for secure hosting, authentication, database infrastructure, and file storage.
    • Stripe for payment processing.
    • Google Analytics for website and platform analytics.
    • Google Maps APIs for location, distance, and travel-time functionality.
    • Resend for transactional email delivery.

    57. We may also share your Data with:

    • Our Creative Nannies in order to assist them to provide the Services.
    • Print and distribution processors.
    • Marketing companies that help Us manage our marketing communications (for example an e-newsletter platform, online survey and online learning journal provider).
    • Our insurance underwriter (only where required as a condition of the provision of any insurance policy).

    58. These providers may process Personal Data on our behalf in accordance with applicable data protection laws and appropriate contractual safeguards.

    59. We use analytics and performance tools, including Google Analytics, to help us understand how users interact with our website and platform, improve our services, and measure the effectiveness of advertising and marketing campaigns. These tools may collect information such as device information, browser type, pages visited, and interactions with our platform. Where required by law, analytics cookies will only be used with your consent.

    K. Legal obligations to share Your personal data

    In some cases We may have a legal obligation to share Your personal data, for example:

    • If We are legally required to do so, for example, by a law enforcement agency, court or local government department that deals with child protection issues.
    • To enforce or apply the terms and conditions of Your contract with Us.
    • If it is necessary to protect our rights, property or safety or to protect the rights, property or safety of others.
    • As part of any transaction whereby We transfer the management out or take over any other organisation or part of it (including Us).

    L. How do We protect Your Personal Data?

    64. We take the security of Your personal data seriously. We have internal policies and strict controls in place to try to ensure that Your Personal Data is not lost, accidentally destroyed, misused or disclosed and to prevent unauthorised access. Any payment transactions will be encrypted.

    65. Where We engage third parties to process personal data on our behalf, they are obligated to comply with data protection laws, only use the data for the purpose(s) for which it was supplied, are under a duty of confidentiality, and are required to implement appropriate technical and organisational measures to ensure the security of Your Personal Data.

    M. Where do We store Your Personal Data?

    66. We use Supabase as our secure cloud hosting and database provider to support the operation of our platform, including authentication, database hosting, file storage, and application infrastructure. Our Supabase project data is hosted in the United Kingdom. We require Supabase and our other service providers to implement appropriate technical and organisational security measures to protect Personal Data.

    67. We may also store limited paper records securely in locked filing cabinets or locked cupboards where necessary for operational, legal, recruitment, or safeguarding purposes.

    68. Our third-party service providers and processors, including hosting, communications, analytics, mapping, and payment providers, may securely process and store Personal Data on systems located within or outside of the United Kingdom or European Economic Area ("EEA"). Where Personal Data is transferred outside of these jurisdictions, such transfers will be carried out in accordance with applicable data protection laws, including the UK GDPR and EU GDPR where relevant.

    69. Payment card details are processed securely by our third-party payment provider, Stripe. We do not store or have access to full card payment details. Payment information is handled directly by Stripe in accordance with PCI-DSS security standards.

    N. For how long do We keep Your Personal Data?

    70. We will only retain Your personal data for as long as necessary to fulfil the purposes We collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

    71. To determine the appropriate retention period for Your Personal Data, We consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of Your personal data, the purposes for which We process Your personal data and whether We can achieve those purposes through other means, and the applicable legal requirements.

    O. Automated Decision Making

    72. We may monitor, analyse, and compile statistical and performance information based on and/or related to Your use of the services, in an aggregated and anonymised format.

    73. We may also use Your personal information to communicate with You about our products, services and promotions. This correspondence may be generated from Your interest based on Your sales profile and/or Your enquiry.

    P. Your rights

    74. As a data subject, You have a number of rights. For example (and this is not an exhaustive list), You can:

    • Request to access and obtain a copy of Your Personal Data on request.
    • Request that We change incorrect or incomplete data.
    • Request that We delete or stop processing Your Personal Data, for example where the data is no longer necessary for the purposes of processing.

    75. Where We rely on Your consent to processing Your Personal Data You can request to withdraw Your consent at any time, for example by clicking the unsubscribe link in any e-mail We send to You.

    76. You may instruct Us to restrict, suspend or amend Our usual processing practices of Your Personal Data, in any of the following scenarios: (a) if You want Us to establish the accuracy of the data; (b) where Our use of the data is unlawful but You do not want Us to erase it; (c) where You want Us to hold the data even if We no longer require it as You need it to establish, exercise or defend legal claims; or (d) You have objected to Our use of Your Personal Data but We need to verify whether We have overriding legitimate grounds to use it.

    77. If You would like to exercise any of these rights or have any questions about this Data Policy, please contact our data manager via our App or contact form on the website, or at info@cocorio.co.uk.

    78. Please note that if You do withdraw Your consent, this decision will not affect the lawfulness of any processing carried out before You withdrew Your consent.

    Q. How to contact the Information Commissioner Office (ICO)

    79. If You are concerned about the way Your Personal Data is handled and remain dissatisfied after raising Your concern with our privacy team, You have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or https://ico.org.uk/

    R. Changes to this Data Policy

    80. We keep this notice under regular review. Any changes to this notice will be posted on the Website, so that You may be aware of how We use Your Personal Data at all times.

    S. Date of this privacy notice

    81. This privacy notice was last updated on 1 May 2026.

    T. Personal data in respect of Your child(ren)

    82. When You register with Us in respect of Your child(ren) You will be asked to provide their date of birth details; it is entirely up to You whether or not You provide those details and/or any other details about Your child(ren).

    83. It is entirely up to You whether or not You choose to provide Us or our Creative Nannies with personal data relating to Your child(ren). For example, You may choose to provide Child Health Data as part of the Customer booking journey through the Website, or when communicating with an employee of Ours or with a Creative Nanny – perhaps because You judge it sensible to do so because, for example, it is in the safety interest of Your child(ren) that the Creative Nanny is aware of such information.

    84. COCORIO will never directly ask You to provide to Us any Child Health Data. If You choose to provide Child Health Data to Us then the only circumstances we will process this data is to communicate such information to the Creative who is scheduled to provide the Services to Your child(ren).

    85. We have instructed Our Creative Nannies to also never directly ask You to provide to them any Child Health Data.

    86. Child Health Data is a 'special category' of personal data under GDPR and specific legal requirements apply to such personal data and to any entity that processes such data. It is our understanding of GDPR that, under these circumstances, We are legally entitled to process Your Health Data pursuant to "the social care condition" as set out in Condition 2(2) of Schedule 1 of the Data Protection Act 2018.

    COCORIO Limited — June 2026