LITTLE LUMENS LTD

PRIVACY POLICY

Effective Date: 20 February 2026

Version: 1.1

Little Lumens Ltd (“Little Lumens”, “we”, “our” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you book or attend our classes, use our website, or otherwise interact with us.

 

This policy should be read alongside our Booking Terms & Conditions and Website Terms of Use.

 

We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Who We Are

Little Lumens Ltd

Company Registration Number: 17045187

ICO Data Protection Registration Reference: ZC184055

 

Registered Office:

71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

 

Data Protection Lead: The Director, Little Lumens Ltd

Email: hello@littlelumens.co.uk

Telephone: +44 7362 918286

 

2. Information We Collect

2.1  We may collect and process the following personal data:

 

About the adult making the booking

• Name;

• Email address;

• Telephone number;

• Billing address;

• Payment information (processed securely by our payment provider — see section 6);

• Booking and attendance history;

• Marketing preferences (where consent is given).

 

About the child attending

• Name;

• Date of birth or age;

• Relevant medical conditions, allergies and additional needs;

• Emergency contact details.

2.2  Information about a child’s health, medical conditions, allergies or additional needs is “special category data” and is treated with additional care, as explained in section 4.

 

3. How We Collect Your Data

3.1  We collect personal data:

• when you complete a booking form on our website;

• through our Wix website booking system;

• when you contact us by email or telephone;

• when you sign up to receive marketing communications;

• when you interact with us on social media.

 

4. How and Why We Use Your Data

4.1  We use personal data for the following purposes, relying on the lawful bases set out below:

 

To manage your booking (Lawful basis: Contract)

To process bookings and payments, confirm attendance, communicate about classes, and provide our services.

 

To keep children safe (Lawful basis: Legal obligation / Vital interests)

To hold medical, allergy and emergency contact information so that we can respond appropriately in the event of an emergency, and to meet our safeguarding and duty-of-care responsibilities.

 

Special category (health) data (Condition: Explicit consent / Vital interests)

Where you provide information about a child’s medical conditions, allergies or additional needs, we process this on the basis of your explicit consent given at the time of booking, or where necessary to protect the vital interests of the child.

 

To send marketing (Lawful basis: Consent)

Where you have given consent, we may send you news, offers and updates about Little Lumens. You can withdraw consent at any time (see section 7).

 

To run and improve our business (Lawful basis: Legitimate interests)

To keep records, understand how our website is used, improve our services, and respond to enquiries and complaints.

 

5. Children’s Data

5.1  Our classes are for young children, and the personal data we hold about a child is always provided by the accompanying adult, not the child.

5.2  We collect only the information necessary to deliver our services safely and to safeguard the children in our care.

5.3  We treat all children’s data, particularly health and medical information, with the highest level of care and restrict access to it to those who need it to deliver or supervise the relevant class.

 

6. Sharing Your Data

6.1  We do not sell your personal data. We only share it where necessary, with:

• Stripe, our payment processor, to take payment securely (we do not store your full card details);

• our booking software provider, to administer your booking;

• our website provider (Wix), which hosts our site and booking system;

• email marketing and analytics providers, where you have consented;

• professional advisers, insurers or authorities where required by law or to protect a child.

6.2  Each third-party provider acts as a processor on our behalf (or as a controller in their own right) and is required to keep your data secure and use it only for the agreed purpose.

6.3  Some providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place, such as UK-approved data transfer mechanisms.

 

7. Your Rights

7.1  Under data protection law, you have the right to:

• be informed about how your data is used;

• access the personal data we hold about you;

• request correction of inaccurate data;

• request erasure of your data in certain circumstances;

• restrict or object to our processing of your data;

• request portability of your data;

• withdraw consent at any time, where we rely on consent.

7.2  To exercise any of these rights, please contact us at hello@littlelumens.co.uk. We will respond within one month.

7.3  You can unsubscribe from marketing at any time using the link in our emails or by contacting us directly.

 

8. How Long We Keep Your Data

8.1  We keep personal data only for as long as necessary for the purposes set out in this policy.

8.2  Booking and financial records are generally kept for up to six years to meet legal and accounting requirements.

8.3  Children’s medical and emergency information is retained only for the duration of your relationship with us and is securely deleted when no longer needed.

8.4  Marketing data is kept until you withdraw consent or ask us to stop contacting you.

 

9. How We Protect Your Data

9.1  We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

9.2  Access to personal data is limited to those who need it to deliver our services.

9.3  While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

 

10. Cookies

10.1  Our website uses cookies to help it function and to understand how visitors use it.

10.2  You can control cookies through your browser settings. Further detail is set out in our Cookie Policy.

 

11. Complaints

11.1  If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the matter.

11.2  You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at www.ico.org.uk or by calling 0303 123 1113.

 

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and the effective date at the top of this policy will show when it was last updated.

 

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

 

Little Lumens Ltd

Email: hello@littlelumens.co.uk

Telephone: +44 7362 918286

Website: www.littlelumens.co.uk

 

This Privacy Policy is effective from 20 February 2026 and may be updated from time to time. The latest version will always be available on our website.