Privacy Policy

Last updated: 14 September 2026

Welcome to Nurtured Roots Care.

We care deeply about privacy, trust, and the responsible handling of personal information. This Privacy Policy explains how Nurtured Roots Care collects, uses, stores, and protects personal data when you visit our website, contact us, submit an application, or use our childcare matching services.

We handle personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection law, including Lei n.º 58/2019.


1. Who we are

Nurtured Roots Care is a childcare matching and introduction service based in Ericeira, Portugal. We connect families with independent childcare providers, including nannies and babysitters, through a thoughtful and relationship-led matching process.

We are the data controller for the personal information described in this policy.

Business name: Nurtured Roots Care
Trading as: Fabienne Kijk in de Vegte,
sole trader NIF: 332883140
Address: 2655-486 Ericeira, Portugal
Email: fabienne@nurturedroots.eu
Phone: +351 938 820 992

For any question about this policy or your personal data, contact us at the details above.


2. What information we collect

Information families may provide

  • Full name, email address, phone number

  • Home address, area, NIF or passport number

  • Information about your children and household

  • Parenting preferences and childcare expectations

  • Schedule and availability requirements

  • Allergy, medical, developmental, or special care information relevant to matching

  • WhatsApp or email communications

  • Feedback submitted through forms or communications

Information childcare providers may provide

  • Full name, email address, phone number, date of birth

  • CV or resume, childcare experience and qualifications

  • References and reference contact details

  • Identification documents and right to work documentation

  • NIF and NISS

  • Availability and work preferences

  • A criminal record certificate (certificado de registo criminal) or equivalent

  • WhatsApp or email communications

Website and technical information

Browser type, device information, IP address, pages visited, website usage information, and cookies and analytics data where you have consented to them.

3. Why we use it, and on what legal basis

















We only collect information that is reasonably necessary for the operation of our services.

4. Health and other special category information

Because of the nature of childcare, some information shared with us is special category data under Article 9 of the GDPR. This includes health information, allergies, medication, and developmental or special care needs, usually relating to a child.

We process this only with your explicit consent, only to make a safe and suitable match, and we share it only with a caregiver you have chosen to proceed with. You can withdraw that consent at any time by contacting us, and we will delete the information unless we are required to keep it.

5. Criminal record certificates

For every caregiver we introduce, we ask for a criminal record certificate covering work involving contact with minors.

This is information relating to criminal convictions and offences under Article 10 of the GDPR, and we treat it accordingly.

  • It is processed for one purpose only: safeguarding the children in the families we work with

  • It is provided by the caregiver with their explicit consent

  • It is reviewed by Fabienne Kijk in de Vegte alone and is stored separately with restricted access

  • It is not shared with families. We tell a family only whether a valid certificate has been seen, and the date it was issued

  • A caregiver may withdraw consent at any time, in which case we can no longer introduce them to families


6. How information is shared

We do not sell personal data and we do not share it for advertising.

Information is shared only where reasonably necessary:

  • Relevant family information with a potential caregiver during matching

  • Relevant caregiver information with a potential family

  • With service providers supporting website hosting, email, cloud storage and forms

  • With our accountant, for invoicing and tax records

  • Where legally required

We share only what is necessary for an introduction or placement.


7. Third-party services and transfers outside the EU

We use the following providers to run the business and website:

  • Squarespace (website hosting and functionality)

  • Google Workspace and Google Forms (email, document storage, application forms)

  • WhatsApp (communication)

  • Instagram (social communication and marketing)

These providers process personal data according to their own privacy policies.

Some of them, including Google, WhatsApp and Instagram, may transfer personal data outside the European Economic Area, principally to the United States. Where that happens we rely on the safeguards required under GDPR, including the EU-US Data Privacy Framework and Standard Contractual Clauses put in place by those providers. You can ask us for details of the safeguards that apply.

8. Data storage and security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure or alteration:

  • Password-protected accounts with two-factor authentication where available

  • Access limited to Fabienne Kijk in de Vegte

  • Secure cloud-based storage

  • Careful handling of identification and application documents, with criminal record certificates stored separately

No method of internet transmission or electronic storage can be guaranteed completely secure, but we take reasonable precautions.


9. How long we keep information













After these periods, personal data is securely deleted or anonymised. If you would like your information removed sooner, contact us using the details in this policy.


10. Your rights

You have the right to:

  • access your personal data

  • correct inaccurate information

  • request deletion of your data

  • restrict or object to certain processing

  • withdraw consent where consent is the basis

  • request transfer of your data to another provider


To exercise any of these, contact fabienne@nurturedroots.eu. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Portuguese supervisory authority:


Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa geral@cnpd.pt · www.cnpd.pt


11. Cookies

Our website, hosted on Squarespace, uses cookies. Essential cookies are required for the site to operate. Analytics and other non-essential cookies are only placed with your consent, asked for through the cookie banner when you first visit.

You can manage or withdraw your cookie preferences at any time through your browser settings or the consent tool on our website. Full details are in our Cookie Policy.


12. Children's privacy

As a childcare service, some information we process relates to children.

Child-related information must be provided by a parent or legal guardian. We handle it with heightened care, process it only where relevant to matching and service provision, and share it only with a caregiver the family has chosen to proceed with.

Children do not use our website or submit information to us directly.


13. International visitors

Our services are based in Portugal and primarily intended for people seeking childcare within Portugal.

If you access our website or contact us from outside Portugal, your information is still processed in accordance with this policy and applicable EU data protection standards.


14. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, legal requirements or business operations. Updates are published on this page with a revised date. The version in force is the one published here.


15. Contact

Nurtured Roots Care
Fabienne Kijk in de Vegte
NIF: 332883140
2655-486 Ericeira, Portugal
fabienne@nurturedroots.eu
+351 938 820 992