Last updated: 5 August 2026

1. Applicable Regulations

This Privacy Policy is drawn up in accordance with the following applicable regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation — GDPR).

Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD) — the Spanish law that complements the GDPR at national level, including specific provisions on minors' consent.

Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSICE) — applicable to our website, cookie usage, and any electronic commercial communications (e.g. newsletters).

Ley Orgánica 1/1996, de 15 de enero, de Protección Jurídica del Menor, modificada por la Ley Orgánica 8/2021, de 4 de junio — relevant given that the data processed largely concerns minors.

2. Data Controller

Little Forest Montessori SL Tax ID (CIF): [number] Address: Carrer de Lope de Vega, 47, 08005 Barcelona, Spain Contact email: info@littleforestmontessori.com

3. What Data Do We Collect?

We collect the following personal data, depending on context:

From parents or legal guardians: name, surname, ID/passport number, address, phone number, email.

From the child: name, surname, date of birth, relevant health data (allergies, medical conditions, vaccination records), and, where applicable, photos or videos taken during school activities.

Browsing data: if our website uses cookies or analytics tools, we collect usage data (see our Cookie Policy).

4. Why Do We Process Your Data?

To manage enrollment and admission of the child.

To provide daily educational care, including attention to medical or dietary needs.

To communicate with families about progress, activities, and school organization.

To manage billing and payments.

To share photos or videos of school activities on our website or social media, only with prior express consent.

To respond to inquiries from prospective families through our contact form or email.

5. Legal Basis for Processing

The processing of data is based on the express consent of the parents or legal guardians, given at the time of enrollment or when contacting the school. Since children cannot give their own consent before the age of 14 under Spanish law, it is always the parent or legal guardian who provides it on their behalf.

6. How Long Do We Keep Your Data?

We retain personal data for as long as the child is enrolled at the school, and for the legally required period afterward under applicable tax, labor, and education regulations. Once that period ends, the data will be securely deleted or anonymized.

7. Who Do We Share Your Data With?

We do not share your data with third parties, except:

Providers necessary to deliver our service (for example, an accounting firm, external catering provider, or school insurance), always under a confidentiality agreement.

When required by law (for example, upon request from a public authority).

If we use technology providers located outside the European Economic Area (such as web hosting services), any such transfer is carried out with the safeguards required under GDPR.

8. Your Rights

As the data subject (or on behalf of your child), you have the right to:

Access your personal data.

Rectify inaccurate data.

Request the deletion of your data.

Object to the processing.

Request restriction of processing.

Request data portability.

You can exercise these rights by writing to info@littleforestmontessori.com, specifying the right you wish to exercise and attaching a copy of your ID. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe your rights have not been respected.

9. Data Security

We apply the technical and organizational measures necessary to ensure the security of your personal data and to prevent its alteration, loss, unauthorized processing, or access — particularly given that we process children's data and health data, which are considered specially protected categories.

10. Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that are downloaded onto a device when someone accesses a website or an application. If you need information on how to view the cookies installed on your device, visit About the cookies used by Squarespace.

These necessary and mandatory cookies are always used, allowing Squarespace, our website hosting platform, to provide you with this website securely.

These analytics and performance cookies are used on this website, as described below, only when you accept our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

Squarespace hosts this website. Squarespace collects personal information when you visit this website, including:

Information about your browser, network, and device

Web pages you visited before coming to this site

Pages you view while on this website

Your IP address

Squarespace needs this data to operate this website, as well as to protect and improve its platform and services. You can read more about how Squarespace uses your data (end users' website usage information) for its own purposes in its Privacy Policy.

11. Changes to This Policy

We may update this privacy policy to reflect legal changes or changes to our services. We recommend reviewing it periodically.