Privacy

Stackwood Day Nursery is a fictional nursery. This site is a working demo by London DigiX: the booking, accounts, fees and staff tools really work, but no real nursery, child or family is behind them. Please use made-up details.

Who is responsible

London DigiX is the controller for the details stored by this demo. For questions, or to ask us to erase a demo, write to privacy@londondigix.example.

Why we keep anything

Our lawful basis is legitimate interests: showing how a nursery booking and family system works, by letting you try one. We keep that fair by asking for as little as possible, telling you to use made-up details, keeping each demo private to the browser that made it, and erasing it on a fixed date. You can delete it yourself at any time, so the demo never needs more than it already has.

Your own private demo

The first time you do something that saves (holding a visit time, creating an account, exploring as the sample parent, saving a quote), the site creates a private demo just for you: one fictional nursery with sample families and staff. Everything you add stays inside it. Nobody else can see it, and you cannot see anyone else’s. Browsing pages, checking free visit times and working out fees save nothing.

Your demo account lives in the browser where you made it. It works only there; clearing site data or using another device starts a new demo.

What is stored

• What you type: your name and email, a password (stored only as a salted, one-way hash), your child’s first name and month and year of birth, and any bookings, sessions, notes or messages you add.
• What the demo creates for you: letters in your demo inbox, sample invoices and receipts, and a short record of staff actions.
• Rate limits: your IP address is never stored as it is. It is turned into a code with a key that changes every day, and those codes are deleted after 24 hours.
• Server logs: the page address, the time, the result and a shortened code for your demo. Never what you typed, your email, your name or any password.

Please do not enter real medical, allergy, diet, faith or contact details. The forms that ask for them say so, the sample details are all fictional, and once you set a password those details sit behind it.

Who processes it

Cloudflare hosts the site and the demo database (Cloudflare Pages, Workers and D1). The database is held in the European Union. Nothing is sent to anyone else: there is no analytics, no advertising, no tracking and no outside fonts or scripts. The Google Calendar and Google Maps links open only if you choose them.

No emails, no payments

Nothing is ever emailed or texted to you. Every message the nursery would send lands in your demo inbox instead. Pay buttons are marked (demo): there are no card fields, and no money moves.

How long it is kept

Each demo closes 30 days after it was made, whatever you do in it. It becomes unreachable on day 30 and is erased soon after. Copies can stay in Cloudflare’s point-in-time backups for up to 30 more days.

A demo where nobody has created an account is removed after 2 days without a visit.

Cookies and storage

• stw_sbx opens your private demo. It is set only once you save something, and lasts until the demo closes.
• stw_sid keeps you signed in.
• stw_hint holds no data. It only tells the page you are signed in, so it can show Your account instead of Log in.
• Local storage keeps three preferences on your device: light or dark mode, Pause motion and Reduce 3D effects. Session storage keeps unsent form answers and which tab holds a visit time, until you close the tab.

These are needed for the demo to work, so there is no cookie banner. Nothing is used for tracking.

Erase it now

Press Delete my demo now in your account settings, or Leave this demo on this device in the account menu. Either one removes your account and everything in your demo straight away, and clears the cookies. How this demo works explains the rest.

Your rights

You can ask what we hold, ask us to correct or erase it, or object, by writing to the address above. You can also complain to the Information Commissioner’s Office (ico.org.uk).