Privacy Policy for Little Tots International Oy

Effective date: 14 August 2026
Last updated: 14 August 2026

Little Tots International Oy (“we”, “us”, “our”, or “LTI Daycare”) operates the website https://littletotsinternational.fi and provides private daycare services in Helsinki, Finland.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act, and other applicable laws.

1. Data Controller

Little Tots International Oy
Y-tunnus: 3465349-9
Address: Takaniityntie 5 F, 00780 Helsinki, Finland
Email: info@littletotsinternational.fi
Phone: +358 44 087 7617

2. What Personal Data We Collect

We may collect the following categories of personal data:

From parents/guardians and website visitors:

  • Name, email address, phone number, postal address
  • Information submitted via contact forms, application forms, or email inquiries
  • Details about your child (name, date of birth/age, any relevant health, allergy, dietary, or developmental information you provide)
  • Payment and billing information (for registration fees and monthly daycare fees)
  • Communication records (emails, messages, visit notes)

Automatically collected data (website):

  • IP address, browser type, device information, pages visited, and approximate location (via standard web server logs and any analytics tools we may use)
  • Cookies and similar technologies (see Section 8)

Special category data (sensitive):
Health-related or other sensitive information about children is only collected when necessary for providing safe childcare and only with your explicit consent or as required by law.

3. How We Collect Data

  • Directly from you (contact forms, application process, emails, phone calls, in-person visits)
  • Automatically when you visit our website
  • From third parties only when necessary (e.g., Kela or City of Helsinki in connection with daycare subsidies, with your knowledge)

4. Legal Bases for Processing

We process personal data only when we have a valid legal basis under GDPR:

  • Contract – to process applications, enrol children, and provide daycare services
  • Consent – for marketing communications, optional cookies, or processing sensitive data
  • Legitimate interests – for responding to inquiries, improving our website/services, and ensuring the safety and quality of care
  • Legal obligation – to comply with Finnish childcare regulations, tax, accounting, and reporting requirements

5. How We Use Your Data

  • To respond to inquiries and process daycare applications
  • To provide, manage, and improve our daycare services
  • To communicate with parents (including weekly menus, updates, and important notices)
  • To handle payments, invoicing, and subsidies (Kela / City of Helsinki)
  • To ensure the safety, well-being, and appropriate care of children
  • To comply with legal and regulatory obligations
  • To maintain and improve our website

We do not sell personal data.

6. Sharing of Personal Data

We share personal data only when necessary and with appropriate safeguards:

  • Service providers who help us operate (e.g., IT/hosting, email, accounting) under data processing agreements
  • Public authorities (Kela, City of Helsinki education services, child protection authorities) when required by law or for subsidies
  • Professional advisors (accountants, lawyers) under confidentiality obligations

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards (such as Standard Contractual Clauses) are in place.

7. Data Retention

We keep personal data only as long as necessary:

  • Inquiry and application data: generally up to 2 years after last contact (or longer if enrolment proceeds)
  • Active daycare customer records: for the duration of the care relationship + required statutory retention periods (typically several years for accounting, tax, and childcare records under Finnish law)
  • Website logs: usually a short period (weeks to a few months)

When data is no longer needed, it is securely deleted or anonymised.

8. Cookies and Tracking Technologies

Our website may use essential cookies required for basic functionality. We may also use analytics cookies (with your consent where required) to understand how the site is used.

You can manage cookie preferences through your browser settings. For more details, see any cookie notice displayed on the site.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access to children’s and families’ data is limited to authorised staff on a need-to-know basis.

10. Children’s Data

Because we care for young children, we take special care with their personal data. We process children’s data primarily on the basis of parental/guardian consent or as necessary to fulfil our contract and legal obligations as a daycare provider. Parents/guardians have the right to exercise data subject rights on behalf of their children.

11. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data (“right to be forgotten”) in certain circumstances
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) at www.tietosuoja.fi

To exercise your rights, contact us at info@littletotsinternational.fi.

12. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be published on this page with the updated effective date. Significant changes will be communicated where appropriate.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:

Little Tots International Oy
Email: info@littletotsinternational.fi
Phone: +358 44 087 7617
Address: Takaniityntie 5 F, 00780 Helsinki, Finland