Privacy Policy
1. About This Policy
Cedar Gables Preschool & Childcare is operated by two affiliated entities: Cedargables Preschool LLC, which operates our Clapboard Ridge location at 187 Clapboard Ridge Road, Danbury, Connecticut 06811, and Little Rascals Nursery School, Inc., which operates our Barnum location at 15 Barnum Road, Danbury, Connecticut 06811 (collectively, "Cedar Gables," "we," "us" or "our"). Each entity is responsible for the personal information of the families it serves. Cedargables Preschool LLC operates our website at www.cedargablespreschool.com (the "Website").
This Policy explains how we collect, use, share, keep and protect personal information about parents, guardians, children, prospective families and Website visitors, including information handled through the third-party platforms we use to deliver our services. It is part of, and should be read with, our Terms and Conditions.
This Policy does not cover information about job applicants and employees, which is addressed in our separate Applicant Privacy Notice (www.cedargablespreschool.com/applicant-privacy) and Employee Privacy Notice.
2. Children's Privacy
Caring for young children means we must keep information about them. We collect information about children from their parents or legal guardians, and we create records about children in the course of caring for them, as required by Connecticut licensing regulations. Our Website is intended for adults and is not directed to children. We do not knowingly collect personal information directly from children through the Website or any online service. If we learn that a child has submitted personal information to us online, we will delete it.
We do not sell children's personal information, use it for targeted advertising, or use it to build profiles for marketing. We do not run advertising directed to children, and we do not upload enrolled or prospective families' contact information or records to Google, Meta or any other advertising platform.
3. Information We Collect
3.1 Information you give us
3.2 Information we create while caring for your child
Attendance and check-in and check-out records; daily activity reports (meals, naps, diapering or toileting); incident, injury and accident reports; medication administration logs; developmental observations, screenings and assessments; classroom photos and videos; building access records; and notes of communications with families.
3.3 Video monitoring
For the safety of children and staff, our classrooms and other areas of our buildings and grounds are monitored by video cameras that record video only, with no audio. Recordings are kept for at least 30 days, as Connecticut licensing requires, and longer when needed to review an incident, respond to a complaint or licensing inquiry, or address a legal claim. Recordings are viewed by authorized Cedar Gables leadership and, where required or appropriate, by the Connecticut Office of Early Childhood ("OEC"), the Department of Children and Families, law enforcement or our insurers. Families do not have live access to camera footage. When an incident warrants it, the Executive Director may allow a parent to view relevant recorded footage in person.
3.4 Information collected automatically on our Website
When you visit the Website, our website host and the analytics and advertising tools described in Section 9 automatically collect technical information such as IP address, browser type, device type, pages viewed, referring website, ads you clicked and time of visit, using cookies, tags and similar technologies.
3.5 Information from other sources
We may receive information from the OEC and Care 4 Kids program administrators about subsidy eligibility and payments; from our payment processors about payment status; from your child's health care providers when you ask them to send us forms; and from Google and social media platforms in the form of reviews you post and aggregated reports about how our ads and pages perform.
4. Sensitive Data and Your Consent
Some information we collect is considered "sensitive data" under Connecticut law, including personal data of a known child under 13, health information, Social Security numbers and financial account information. We process sensitive data only as needed to respond to your inquiry, provide care, meet licensing and legal requirements, and administer billing. We obtain a parent's or guardian's consent before processing a child's information or the parent's or guardian's own sensitive data, through our inquiry forms and our Enrollment Agreement.
You may withdraw consent at any time by using our privacy request form. Because licensing regulations require us to keep certain records while a child is in our care and for a period afterward, withdrawing consent to processing that is essential to care may mean we cannot continue to provide care, and we may need to keep records we are legally required to keep.
5. How We Use Information
To provide safe, high-quality care and education, including supervising, feeding and caring for your child, and administering medication with your authorization
To communicate with you about your child's day, development, health, incidents and program news
To verify the identity of people picking up your child and to enforce custody orders on file
To process enrollment, tuition, fees and subsidy payments
To meet Connecticut licensing, health and recordkeeping requirements and respond to inspections
To respond to tour requests and inquiries, and to send program information to prospective and former families, including about openings for siblings and future children, unless you opt out
To evaluate and improve our program using assessment information in aggregated, de-identified form. We do not use or publish an individual child's assessment results for marketing.
To operate, secure and improve our Website and services
To advertise our programs and job openings and measure how well our ads work, using limited Website usage data as described in Section 9 (never children's information or families' records)
To protect the safety of children, families, staff and our property, and to comply with law, including mandated reporting obligations
We do not collect, use or sell personal information to train large language models or other artificial intelligence systems. Our staff may use only artificial intelligence tools we have approved, which we configure so that information staff enter is not used to train the tool, and staff may not enter child, family or health information into any such tool unless it has been expressly approved for that type of information under written conditions that protect it.
6. Photos and Videos
Your own child. Staff photograph and video-record classroom activities on program-owned or program-authorized devices. Photos and videos of your child shared only with your family through our family communication app are a standard part of our family communication.
Other uses require your consent. We include your child in group photos shared with other enrolled families, internal displays, and public materials such as our Website, social media, brochures and other marketing only if you have consented in the Photography Consent section of your Enrollment Agreement. If you have not consented, your child will not appear in group photos or in any shared, displayed or public material.
Public materials. In public materials we identify children by first name only, if at all.
Changing your selection. You may change your selection at any time by using our privacy request form or, for enrolled families, email to the privacy address in your enrollment documents, with a copy to your child's Director. We will put the change into effect as promptly as practicable and no later than two business days after we receive it. Changes apply going forward. Materials already published, printed or distributed under a prior consent may remain in use.
Families and visitors. Families and visitors may not photograph or record children other than their own on our premises, except at events where the Director announces that family photography or recording is permitted, such as graduation. We ask all families not to post or share images of other children without their parents' permission.
Staff take classroom photos and videos on program devices or, when needed, on their own phones. On personal phones, staff must capture photos and videos inside our family communication app rather than the phone's camera, so they are not stored on the phone. Staff may never share photos of children by text, personal messaging or personal social media.
7. How We Share Information
We do not sell personal information for money. We share it only as follows:
7.1 Service providers
We use the following categories of service providers to deliver our services. They process personal information on our behalf and, where available, under contractual terms that require them to protect it and use it only to provide services to us.
Each provider has its own privacy policy that governs information you give it directly, for example when you create your own account in our family communication app.
7.2 Advertising, search and social media platforms
We use search, advertising and social media platforms to list our business, advertise, and connect with families. These companies also use information for their own purposes under their own privacy policies, including when you interact with our pages or ads while signed in to your account with them. Information involved includes reviews, comments and messages you send us on those platforms, and Website usage data collected by the analytics and advertising tools described in Section 9. Photos of children appear on these platforms only with consent.
7.3 Our list of service providers
Enrolled families receive our current list of the specific companies we use at enrollment. Anyone may request the list, including the specific companies to which we have disclosed their personal information, using our privacy request form.
7.4 Government agencies and as required by law
We share information with the OEC and other state agencies as required for licensing, inspections and subsidy administration; with public health authorities as required (for example, reportable illnesses and immunization reporting); and with the Connecticut Department of Children and Families or law enforcement where we are required by law to report suspected abuse or neglect. We may also disclose information to comply with a subpoena, court order or other legal process, or to protect the safety of a child or others.
7.5 Emergencies
In a medical emergency we will share relevant health information with emergency responders and health care providers.
7.6 With your direction
We share information with others, such as your child's pediatrician, therapists, early intervention providers, or a school your child will attend, when you ask us to or authorize us in writing.
7.7 Between our locations and in business transfers
Our two operating entities may share information with one another for administration, billing, staffing and transfers between locations. If Cedar Gables or either location is sold, merged or reorganized, personal information may be transferred to the successor, which will be bound by this Policy for information collected before the transfer.
8. Third-Party Platform Security
We select platforms with care, configure access so that each family sees only its own child's information (and group photos only of children whose families have consented), and limit staff access to what their role requires. However, we do not control the systems of third-party providers. If we learn of a security incident at a provider that affects your information, we will notify you as required by law and share what we know about the steps being taken.
9. Cookies, Analytics and Advertising
Our Website uses three kinds of cookies and similar technologies:
Necessary: set by our website host so the Website, its forms and our merchandise store work.
Analytics: Our website host's analytics and Google Analytics help us understand how visitors use the Website.
Advertising: we may use the Google tag (including Google Ads conversion tracking and Enhanced Conversions) and the Meta Pixel. These let Google and Meta recognize your browser, show you Cedar Gables ads on other websites and apps, and tell us whether our ads led to an inquiry or tour request. Connecticut law calls this "targeted advertising," and some laws treat sharing data with these platforms as a "sale" even though no money changes hands.
We configure these tools so they do not collect information from our enrollment or health forms or from our family communication app.
Your choices
Cookie banner: when you first visit the Website, a banner lets you choose "Okay" or "Decline." Choosing "Decline" turns off analytics and advertising cookies for your browser.
Opt out by form: submit our privacy request form and choose “Opt out of ad tracking” to opt out of targeted advertising and any sale of personal information.
Global Privacy Control: we treat a Global Privacy Control signal from your browser as a valid request to opt out of targeted advertising and sale.
Platform settings: you can also adjust ad settings directly with Google (myadcenter.google.com) and Meta (Facebook and Instagram ad preferences), or use the industry opt-out at optout.aboutads.info. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
Browser settings: you can block or delete cookies, although some Website features may not work.
When you visit our pages on Google, Facebook, Instagram, X, Pinterest or LinkedIn, that platform's own privacy policy and settings apply. Anything you post publicly on those pages can be seen by others.
10. How Long We Keep Information
We keep personal information only as long as needed for the purposes described in this Policy and as required by law:
We review our records at least once a year and delete, destroy or de-identify information that has passed its retention period, unless we must keep it to meet a legal obligation or for a pending claim or investigation.
11. How We Protect Information
We use reasonable administrative, technical and physical safeguards, including password-protected and multi-factor authenticated accounts where available, role-based access for staff, program-owned or program-authorized devices for classroom photos, secure storage for paper records, and staff training on confidentiality. No system is completely secure. If a breach of security affects your personal information, we will notify you and, where required, the Connecticut Attorney General, without unreasonable delay and within the time required by Connecticut law.
12. Your Privacy Rights
Subject to legal exceptions, you have the right to:
confirm whether we process your or your child's personal information and access it, including assessments, observations and other conclusions we have recorded about your child;
correct inaccurate information;
delete information, except where we must keep it (for example, licensing records, financial records, or information needed for a legal claim);
obtain a copy of information you provided to us in a portable format;
obtain a list of the specific third parties to whom we have disclosed personal information;
opt out of targeted advertising and any sale of personal information (see Section 9), and of profiling that produces legal or similarly significant effects (we do not engage in such profiling); and
withdraw consent to processing of sensitive data, subject to Section 4.
A parent or guardian may exercise these rights on behalf of a child. Separately, parents of enrolled children may review their child's file at any time by making an appointment with the Director.
How to make a request
Submit privacy requests through our privacy request form at www.cedargablespreschool.com/privacy-request. Enrolled families may also email the privacy address listed in their enrollment documents. If you raise a privacy request with a staff member, they will forward it to our privacy contact, and our response period begins when it arrives. We will verify your identity (and, for a child's records, your authority as parent or guardian) before acting, and we will respond within 45 days. If we need more time, we may extend this by another 45 days and will tell you why. We will not charge you or treat you differently for exercising your rights.
Appeals
If we decline your request, you may appeal by submitting our privacy request form and choosing “Appeal a decision.” We will respond in writing within 60 days and explain our reasons. If you are not satisfied, you may contact the Connecticut Attorney General at portal.ct.gov/ag.
13. Emails and Text Messages
You may unsubscribe from marketing emails using the link in any email, reply STOP to marketing texts, or use our privacy request form (see Section 12). While your child is enrolled, we will continue to send operational messages about your child's care, safety, billing and program closures.
14. Visitors From Outside Connecticut
Our services are provided in Connecticut, and we handle personal information under Connecticut and U.S. law. Families who live in another state may have additional rights under their state's law and may contact us using the details below.
15. Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, notify enrolled families through our family communication app or by email at least 30 days before the changes take effect. If a change would materially expand how we use sensitive data, we will ask for your consent where required by law.
16. Social Security Number Protection Policy
Cedar Gables collects Social Security numbers only when required by law or necessary for a legitimate business purpose, primarily from employees for payroll, tax, benefits and work authorization, from new hires for required background checks, and occasionally from families when required for subsidy or tax documentation. As required by Connecticut General Statutes Section 42-471, we follow this policy:
Confidentiality. Paper records containing Social Security numbers are kept in locked files. Electronic records are kept only in access-restricted systems protected by passwords and, where available, multi-factor authentication. Social Security numbers are never sent by unencrypted email or text message.
No unlawful disclosure. Social Security numbers are not publicly posted or displayed, not printed on badges, time cards or schedules, and not used as ID numbers. They are disclosed only to government agencies and to service providers that need them to perform payroll, benefits or background check services for us, as required by law, and only under confidentiality obligations.
Limited access. Access is limited to the people who need Social Security numbers to perform payroll, tax, benefits or background check duties. Records containing Social Security numbers are shredded or permanently deleted when no longer needed or required to be kept.
17. Contact Us
Questions about this Policy or our privacy practices may be submitted via our privacy request form.
Cedar Gables Preschool & Childcare, 187 Clapboard Ridge Road, Danbury, CT 06811
Effective Date: October 13, 2026 | Replaces the policy dated July 16, 2019