Data Processing Agreement

Roles

Scope

Alder AI Labs processes personal data solely to provide call handling, enquiry handling, booking support, and related automation services.

Types of data

Depending on the customer setup, this may include:

• Parent or guardian names
• Child enquiry information, such as name, age, expected start date, or visit preferences
• Contact details
• Enquiry details
• Scheduling preferences
• Call interaction data

Purpose of processing

• Managing enquiries
• Supporting booking processes
• Scheduling visits
• Supporting nursery or business operations
• Delivering the contracted service

Processor obligations

This agreement is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR), EU GDPR (Regulation EU 2016/679), and the Data Protection Act 2018. Alder AI Labs will:

• Process personal data only on documented customer instructions
• Implement appropriate technical and organisational security measures
• Not use customer data to train AI models
• Not sell customer data
• Not use customer data for unrelated marketing purposes
• Assist the customer with data subject rights requests where reasonably possible
• Delete or return data upon request, unless retention is legally required
• Operate AI systems transparently, so nursery staff and parents understand where AI is involved
• Support human oversight of automated interactions at all times

AI systems

Our services are designed to comply with both UK and EU GDPR. We use the EU AI Act as a reference for responsible AI design, particularly given the sensitive context of nursery and childcare settings. Our AI systems are designed to handle data minimally, operate transparently, and keep humans informed and in control.

Subprocessors

Alder AI Labs uses subprocessors listed at: /legal/subprocessors

Data location

Data is primarily processed within the UK and EEA where possible.

Retention

Personal data is retained only as necessary for service delivery unless otherwise agreed with the customer.

Security

Alder AI Labs applies appropriate technical and organisational measures to protect personal data, including access controls, secure infrastructure, and limited data access.

Acceptance

By using Alder AI Labs services, customers acknowledge and accept this Data Processing Agreement unless a separate written agreement has been signed.