What a Nursery Photo Consent Form Actually Has to Cover

October 30, 2026 · 8 min read

Most nurseries collect photo consent the same way: one tick box on the enrolment pack, signed by a parent who was filling in emergency contacts, allergy details and fee agreements at the same time, then filed and never looked at again. It holds up until the day a photo appears somewhere a parent did not expect, and nobody in the office can produce a record showing that particular use was ever agreed to. This article does not tell you what your form must say, because consent, data protection and safeguarding requirements for children genuinely vary by country, region and inspection regime. What follows is the set of questions a workable consent process usually has to answer, so you can take them to your safeguarding lead, your data protection adviser and your regulator and get answers that apply to you.

One box is being asked to do five different jobs

A blanket permission is typically expected to cover the child's learning journal, a closed parent app, the setting's public website, a public social media account, printed leaflets, paid advertising and occasionally the local paper. Those are not the same thing to a parent, and treating them as one agreement is the single most common weakness in nursery consent. A photo in a learning journal goes to one family. A photo on a public feed is downloadable, indexed and for practical purposes permanent.

The usual fix is to break the permission into separately selectable uses rather than one all-or-nothing box. A parent who is delighted for you to photograph their child making a collage for the learning journal may be firmly against that same photo appearing in a boosted advert aimed at families three postcodes away. Both positions are reasonable, and a form that cannot record the difference will record the wrong thing. Separating them also gives you an accurate, countable picture of what you are actually permitted to publish.

  • Internal use only: learning journals, the child's own record, displays inside the room
  • Closed parent app or password-protected album seen only by that child's family
  • The setting's public website and prospectus
  • Public social media accounts
  • Paid advertising, including boosted posts and local print ads
  • Press, local media and third-party publications
  • Photos that include other children, not just this child alone

Consent that cannot be withdrawn is not really consent

Whatever your jurisdiction requires, a process that has no route back is a process that will eventually fail you. A parent's view can change because the family's circumstances changed, because a relationship ended, or simply because they thought about it more carefully than they did during enrolment week. Assume withdrawal will happen and design for it.

That means two practical things. First, a named, easy way to withdraw: who a parent contacts, in what form, and how quickly you will confirm it in writing. Second, a record system where the current position for each child is visible at a glance to the person who actually posts. A withdrawal that lives in an email in the manager's inbox is not operationally real. Many settings keep a single register, reviewed at least annually, that the person managing social media checks before anything goes out.

Be honest with parents about the limits of withdrawal. You can remove an image from your website and your feed. You cannot reliably retrieve a printed leaflet already handed out, or a screenshot someone took. Saying so plainly at the point of consent is better than discovering the gap during a difficult conversation later.

Shared custody, safeguarding and the child who must not be findable

Some children in your setting cannot appear in public images at all, and the reasons are rarely disclosed to staff in detail. A family may be subject to a court order, a domestic abuse arrangement, a fostering or kinship care placement, or an arrangement where one parent's location is deliberately not known to another. These situations are exactly why a blanket approach is dangerous, and exactly why the person who posts needs a current list rather than a memory.

Who is legally able to give consent for a child is a question with a jurisdiction-specific answer, and it is not one for a nursery manager to settle alone. Where parental responsibility is shared or contested, or where a child is looked after by a local authority or equivalent body, the right move is to ask your safeguarding lead and, where appropriate, the placing authority or a legal adviser, rather than accepting the signature of whichever adult happens to be at the door. Where one person consents and another objects, the workable default is to treat the child as not consented for public use until someone qualified resolves it.

What happens to the images when the child leaves

This is the question almost no enrolment form answers, and it produces the most awkward calls a nursery manager takes. A child moves on to school, the family sees the setting's website eighteen months later and their child is still on the homepage. Nothing was done wrong at the time, but nothing was decided either.

Decide a default and write it down. Common approaches include treating consent as ending when the child leaves, treating existing published material as staying but not being reused in new material, or asking leaving families a short exit question about what they are happy for you to keep using. Any of these can be defensible; not having chosen is what causes trouble. Whether your regulator or data protection regime requires a specific retention period is a question to put to your own adviser.

The same applies to storage. Photos taken on a staff member's personal phone, moved to a personal cloud account and never deleted are a real and common exposure. Settings usually address this with a rule about which device photos may be taken on and how quickly they must be transferred and removed, which is far easier to enforce as a written policy than as an expectation.

A plain-language structure you can adapt

Parents skim forms. The structure below is written to be understood on one reading rather than to be legally exhaustive, and it should be reviewed by whoever advises your setting before you use it. Each item is a separate yes or no, not a single signature at the bottom.

Keep the language concrete. Instead of asking for permission for setting publicity, name the actual places: our website, our Facebook page, a paid advert on Instagram, a leaflet handed out at the library. Parents give more considered and more reliable answers when they can picture where the photo goes.

  • Child's name, date of the form, and the date it will next be reviewed
  • Who is completing it and their relationship to the child
  • A separate yes or no for each use, listed by name and not grouped
  • A line covering photos where the child appears in the background of another child's photo
  • Whether staff may take photos on a setting device only, which is a statement of your practice rather than a request
  • How to change or withdraw permission, with a named contact and an email address
  • What happens to photos already published if permission is withdrawn, stated honestly
  • What happens when the child leaves the setting
  • A space for restrictions the family wants to add in their own words

Making the images you are allowed to use work harder

Once consent is properly separated, most settings find their genuinely usable public pool is smaller than they assumed. That makes the quality of each permitted image matter more. A well-lit, uncluttered photo of the messy play area or the garden does more for an enquiring parent than six dim snapshots taken on a phone in a room lit by one window.

Editing has an honest role here and a dishonest one. Correcting a colour cast from fluorescent tubes, lifting shadows in a dark corner, straightening a wonky frame or tidying a distracting background is presentation. Foxi AI can do that kind of work from a photo you already took, and a shared credit balance across web and mobile means the person who took the photo on a tablet in the room is not blocked waiting for someone at a desk. What editing must never do is change what your setting actually is: not the state of the equipment, not the size of the room, not the ratio of adults visible, not a child's appearance.

No editing, and no marketing, can promise you more enquiries. What a clear consent process and a small set of good images does is let you publish confidently, without the pause before every post where someone wonders whether this one is allowed.

Frequently asked

Can we rely on the consent form parents signed at enrolment three years ago?

That depends on what the form actually said and on the rules that apply where you operate. If it was a single blanket tick box, it very likely does not record whether a parent agreed to paid advertising as distinct from a learning journal, and it will not reflect any change in the family's circumstances since. Most settings re-collect consent periodically for that reason. Whether you are required to is a question for your data protection adviser or regulator, not something to assume either way.

What do we do about a child who appears in the background of another child's photo?

Treat it as a use in its own right and ask about it on the form, because parents often have not considered it. Operationally, the safer habit is to check every face in a frame against your consent register before publishing, not just the child the photo is of. Where a background child is not consented, cropping or choosing a different frame is usually simpler than trying to obscure them.

A parent has withdrawn consent. Do we have to delete the photos?

Stopping further publication and removing images from material you control is the straightforward part. Whether you must delete stored copies, and how quickly, is governed by data protection rules that vary by jurisdiction and by any retention obligations that apply to your records. Ask your own adviser rather than adopting a rule you read online, and in the meantime be plain with the parent about what you have removed and what you have not.

Can we use Foxi AI to edit photos of children in our setting?

Foxi AI edits a photo you already have, changing lighting, colour and background presentation rather than the subject. Whether you should edit a particular photo of a child, and whether you may publish it at all, is entirely a matter of your consent position and safeguarding policy, and no editing tool changes that. Many settings use it mainly on images with no children in them: rooms, resources, the garden and food.

Try it on your own photo

Foxi runs this kind of edit in about a minute — upload a photo, pick a look or describe the change you want, and see the result before you pay for anything.