Privacy Policy

Little Boots – Bonnyrigg (“we”, “us”, “our”) is committed to protecting the privacy of the children who attend our classes and the parents and guardians who book with us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK data protection law.

This policy applies to all personal data collected in connection with Little Boots – Bonnyrigg classes and should be read alongside our Terms & Conditions.

1. Who We Are

Little Boots – Bonnyrigg is a sole trader business operated by Greg Woloszyn, providing toddler football classes in the Bonnyrigg and Midlothian area of Scotland. For the purposes of UK GDPR, we are the Data Controller in respect of personal data collected through our booking and registration processes.

Contact: littlebootsbonnyrigg@outlook.com

2. What Data We Collect

We collect personal data about parents, guardians, and the children attending our classes. This includes:

Parent / Guardian Data

•      Full name

•      Contact telephone number

•      Email address

•      Emergency contact details

Child Data

•      Child’s first name and surname

•      Date of birth and age

•      Any medical conditions, allergies, or additional support needs relevant to participation

•      Photographs or video footage taken during sessions (only where separate image consent has been provided)

Booking & Payment Data

•      Booking records including session dates and attendance history

•      Payment records (we do not store full payment card details; these are handled by our payment provider)

3. Why We Collect It & Our Lawful Basis

We collect and process personal data only where we have a lawful basis to do so under UK GDPR. The table below sets out our purposes and the corresponding lawful basis:

•      Administering bookings and managing class places – Contract – necessary to fulfil your booking

•      Communicating about sessions, cancellations, or changes – Contract / Legitimate interests

•      Recording and acting on medical or health information to keep children safe – Vital interests / Legal obligation

•      Processing payments – Contract

•      Sending newsletters or class updates (where opted in) – Consent

•      Using photographs or video for marketing purposes – Consent

•      Maintaining records for insurance and safeguarding purposes – Legal obligation / Legitimate interests

•      Responding to complaints or enquiries – Legitimate interests

4. How We Store Your Data

Personal data is stored securely in digital form, accessible only to Little Boots – Bonnyrigg staff and coaches. We take reasonable technical and organisational measures to protect data against unauthorised access, loss, or disclosure.

•      Booking and registration information is stored in password-protected systems.

•      We do not transfer personal data outside of the United Kingdom.

5. How Long We Keep Your Data

We retain personal data only for as long as it is necessary for the purpose for which it was collected, or as required by law. Our standard retention periods are:

•      Booking and attendance records – 3 years from the date of the last session attended

•      Medical / health information – for the duration of attendance, then deleted promptly

•      Payment records – 6 years, in line with HMRC requirements

•      Safeguarding records – retained in line with guidance from Disclosure Scotland and the Scottish FA

•      Marketing consents and photographs – until consent is withdrawn or 3 years from last contact, whichever is sooner

6. Sharing Your Data

We do not sell, rent, or trade personal data with third parties. We may share data in the following limited circumstances:

•      With our public liability insurer (Morton Michel) where required in connection with an incident or claim

•      With Disclosure Scotland or the Scottish FA where required for safeguarding or regulatory purposes

•      With emergency services or healthcare professionals where a child’s safety is at risk

•      With payment processing providers, solely for the purpose of processing your booking payment

•      Where required by law, regulation, or court order

All third parties with whom we share data are required to handle it in accordance with UK data protection law.

7. Photography & Image Consent

Little Boots – Bonnyrigg may take photographs or video footage during sessions for use on social media and in promotional materials. We will always:

•      Request explicit, written consent from parents or guardians before using any image or footage of a child for marketing purposes

•      Never publish images that include a child’s full name alongside their photograph

•      Respect any withdrawal of consent and remove images from active use promptly upon request

•      Never share images of children with third parties for commercial purposes

Image consent is separate from the booking process and is entirely optional. Declining consent will never affect your child’s place or participation in classes.

8. Children’s Data

We are particularly careful with the personal data of children. We collect only the minimum data necessary to deliver our classes safely, and we do not use children’s data for any marketing or commercial purpose beyond the delivery of our services.

All data relating to children is collected from, and consented to by, their parent or guardian.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data and your child’s personal data:

•      Right of access – you may request a copy of the personal data we hold about you or your child

•      Right to rectification – you may ask us to correct any inaccurate or incomplete data

•      Right to erasure – you may ask us to delete your data where there is no longer a lawful reason to retain it

•      Right to restrict processing – you may ask us to limit how we use your data in certain circumstances

•      Right to object – you may object to processing based on legitimate interests, including direct marketing

•      Right to withdraw consent – where processing is based on consent (e.g. marketing, photography), you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at littlebootsbonnyrigg@gmail.com. We will respond within one month of receiving your request.

10. Cookies & Website

If Little Boots – Bonnyrigg operates a website or booking platform, any cookies or tracking technologies used will be disclosed separately in a Cookie Policy on that platform. We do not currently operate a website that uses tracking cookies beyond standard booking platform functionality.

11. Complaints

If you have a concern about how we handle your personal data, please contact us in the first instance at littlebootsbonnyrigg@outlook.com and we will do our best to resolve it.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator:

•      Website: www.ico.org.uk

•      Telephone: 0303 123 1113

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in data protection law. The current version will always be made available to parents and guardians on request. Where changes are material, we will notify existing customers by email.