Privacy Policy

Data Controller

Happy Tiddlers Ltd is the Data Controller responsible for your personal data.

Our Commitment to Data Protection

Happy Tiddlers Ltd complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data where we have a lawful basis to do so and where it is necessary to deliver our services.

Our Website

We collect very limited technical information from visitors to our website. No personal data is actively collected. Website statistics gathered by our hosting provider may include IP address and date of visit for security and analytics purposes.

Our Booking Software

We use secure third-party cloud-based booking software. Data collected may include:

• Name
• Address
• Telephone number(s)
• Email address(es)
• Children’s names and dates of birth
• Relevant medical or health information (where applicable)

We may contact you regarding booking confirmations and reminders, venue information and updates, health and safety information, payment receipts, newsletters, offers and promotions (where consent has been given), and invitations to future terms. Providing this information and consenting to contact is necessary for Happy Tiddlers to fulfil its contractual obligations.

Data Relating to Children

We only collect and process children’s personal data with the consent of a parent or legal guardian. This data is limited to what is necessary for the safe and effective delivery of our swimming lessons:

• Child’s name
• Date of birth
• Relevant medical information (if applicable)

Special Category Data

Medical and health information is classed as special category data under UK GDPR. We process this information only where necessary for health and safety purposes, and only with explicit consent from a parent or legal guardian.

Card Payments and Purchases

Happy Tiddlers Ltd is PCI compliant. We do not store debit or credit card details on site. Where card details are retained with consent, they are securely stored by authorised third-party payment providers. Card details are encrypted and inaccessible to Happy Tiddlers staff, except for the final four digits and expiry date.

Lawful Basis for Processing Data

We process personal data based on one or more of the following lawful bases:

• Consent – where you have given clear permission
• Contract – where processing is necessary to provide our services
• Legitimate interests – where relevant and balanced against your rights

Third-Party Processors

We do not sell personal data or share it with third parties for marketing purposes. We use trusted third-party service providers (such as booking and payment systems) solely to deliver our services. All providers are required to meet appropriate data protection and security standards.

International Data Transfers

We do not transfer personal data outside the United Kingdom or the European Economic Area.

Protecting Your Data

Personal data is stored securely using password-protected systems. Access is restricted to authorised personnel only. We regularly review our security measures to ensure ongoing protection.

Data Retention

We retain personal data only for as long as necessary to provide our services or to comply with legal obligations. Financial records are retained for up to seven years in accordance with UK law. Retention periods are reviewed periodically to ensure data is not kept longer than necessary.

Your Rights

Under UK GDPR, you have the right to:

• Access personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict data processing
• Object to automated decision-making
• Request transfer of your data to another provider (data portability)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Further information is available at www.ico.org.uk. To exercise your rights or request further information, please contact hello@happytiddlers.co.uk. Happy Tiddlers Swim School Ltd (company no. 10740608).