Privacy Policy - We respect your Privacy
A quick summary: In order to run and organise Munchkin and me sessions, I need to collect certain information from you. I will need to process information such as: some personal and family details, email addresses, allergy details and digital photographs. I need you to sign to say that you are happy for me to collect and process the non-statutory information I require to best provide these classes.
All information on children and families is kept securely and treated in confidence. I am registered with the Information Commissioner’s Office (ICO) and I am aware of my responsibilities under General Data Protection Regulations (GDPR). The data controllers for your information is the Munchkin and me franchisee with whom you have a relationship with. Similarly where you request receiving a sample product from one of our partners and when you make a payment to us using a payment processing gateway such as Stripe or Paypal, they will process your data as separate controllers to us. Also, when you use Facebook and Bookwhen services, they will process your data as separate controllers to us.
Please contact them separately to exercise your data subject rights for the personal data they hold on you.
In general, the confidential information I have on file will only be shared if you give permission or there appears to be a child protection issue. I will only share information about your child (or the child you are supervising) with you or your child’s other carers, other professionals working with your child, or with the police, social services, local or central government including Ofsted. All details will be kept confidential and records are kept secure. You have a right to access any of the information that I hold on you or your child at any time.
When you decide to no longer attend Munchkin and me sessions I will only store information on you or your child for as long as necessary. Anything I don’t need to keep I will delete from my computer or securely shred. I may hold onto some photographs for use on social media or my website but these will never be published alongside names or personal information about your child. You have the option to request that photographs of your child are not taken or used online or in marketing material.
If you have any complaints with the way you feel I have handled any of your personal data, please speak to myself (Rachel) in the first instance so that we can resolve the complaint.
You have the right to complain to the Information Commissioners Officer (ICO) if you feel Munchkin and me have not resolved the complaint to your satisfaction.
Privacy Policy - In Full
What does this policy cover?
This policy describes how Munchkin and me will make use of your and your child's data when you book or attend a class or event with us or when you buy a product or service from us or use any of our facilities on www.MunchkinandMe.co.uk. or our third party booking service provider, Bookwhen.
This policy also describes your data protection rights, including a right to object to some of the processing which Munchkin and me carries out.
More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
What information do we collect?
We collect and process personal data about you when you interact with us, and our website, attend one of our classes or book an event and when you purchase goods and services from us. This includes:
your and your child's name
your and your child's gender
your child's age/date of birth
any allergies you or your child may have
your address and contact details (where supplied)
any enquiries you submit to us
your payment details including billing and credit card details
information related to the browser or device you use to access www.MunchkinandMe.co.uk website such as your IP address, browser type and broad geographical location
your child's photographs and videos during our classes for our training and promotional material or when you submit them for our competitions
your marketing preferences, including any consents you have given • any enquiries you submit to us
What information do we receive from third parties?
Sometimes, we receive information about you from third parties. These are outlined below:
When you book a class or event we receive your payment details from our third party booking service provider
Our Site is hosted by Squarespace. Squarespace collects personal data when you visit Our Site, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run Our Site, and to protect and improve its platform and services. Squarespace analyses the data in a de-personalised form.
Our Site uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses. At https://support.squarespace.com/
functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve Our Site to you.
analytics and performance cookies are used on Our Site, only when you acknowledge our cookie banner. Our Site uses analytics and performance cookies to view site traffic, activity, and other data.
Our Site uses font files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where the font files are stored may receive personal information about you, including:
Information about your browser, network, or device
Your IP address
How do we use this information, and what is the legal basis for this use?
We process this personal data for the following purposes:
To fulfil a contract, or take steps linked to a contract: this is relevant where you make a purchase from us or enter a competition we run.
This includes, but might not be limited to:
communicating with you
verifying your identity
taking payments
reserving a space for you in our classes when you book a class with us via our third party booking service provider or attend your event or private parties
As required by Munchkin and me to conduct our business and pursue our legitimate interests, in particular:
we monitor use of Our Site and online services incl. Social Media, and use your information to help us monitor, improve and protect our products, content, services and websites, both online and offline
to personalise our site, products or services for you to investigate any complaints received from you or from others, about our website or our products or services
to provide products and services you have requested such as your private party requests, and respond to any comments or complaints you may send us
if you provide a credit or debit card as payment, we also use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud (see data sharing below)
Where you give us consent
we will send you direct marketing in relation to our relevant products and services, or other products and services provided by us, our affiliates and carefully selected partners
we place cookies and use similar technologies in accordance with our Website cookie policy and the information provided to you when those technologies are used
on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time
we will send you direct marketing in relation to our relevant products and services, or other products and services provided by us, our affiliates and carefully selected partners
we will process your or your child's allergy information, to provide you with an allergy free environment where we can and when you inform us
on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law:
In response to requests by government or law enforcement authorities conducting an investigation.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the unsubscribe link in the communication where this is an electronic message, or by contacting us using the details set out below.
Who will we share this data with, where and when?
We will share your personal data with other Munchkin and me franchisees (where documented) for training and marketing purposes. All franchisees will only be listed on this website under the Franchisee page.
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws
Personal data will also be shared with third party service providers, who will process it on behalf of for the purposes identified above. In particular, we use third party providers of website hosting and maintenance
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business
When you visit our Facebook page, Facebook Ireland will collect certain personal data from you and they will give us anonymous analytics data about you. This is called insight data and you can find more information about how Facebook processes it from Facebook’s help and advice pages. Facebook and Munchkin and me are joint controllers over the insight data. For any other processing we are separate controllers, please refer to Facebook's Data Policy to understand how they process your personal data. We process the insight data for our legitimate interests to understand how you interact with our Facebook page and its contents and to help us improve our services and contents. If you would like to exercise your data subject rights over this insight data please contact us or Facebook.
When you visit our Bookwhen page, they will collect certain personal data from you and they will give us anonymous analytics data about you. Bookwhen Ltd is responsible for your data. Their registered address is Belsyre Court 57 Woodstock Road, Oxford OX2 6HJ. Bookwhen is registered as a company in England and Wales, company number 08914060. Bookwhen is the data controller of the data we collect from you. It is Bookwhen’s responsibility to control the way your personal data is collected and the purposes for which your personal data is used.
Bookwhen also acts as the data processor for the data that we collect from attendees when using Bookwhen. You can learn more about the measures they have taken to ensure they are meeting the GDPR requirements as a processor on their support pages at http://support.bookwhen.com/en/articles/1922652-gdpr-how-bookwhen-is-compliant-and-how-we-re-helping-you
What rights do I have?
You have the right to ask Munchkin and me (and its franchisee) with whom you have a relationship with for a copy of your personal data held by each respective entity; to correct, delete or restrict (stop any active) processing of your personal data held by each respective entity; and to obtain the personal data you provide to either party for a contract or with your consent in a structured, machine readable format, and to ask either entity to share (port) the personal data they hold about you to another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in the GDPR. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, you can get in touch with us using the details set out below.
For booking a class the provision of your card data is mandatory: if relevant data is not provided, then the franchisee will not be able to enrol you on a class or when you purchase a product from us we will need your payment information and address otherwise we will not be able to send you the product. All other provision of your information is optional. For example if you do not inform the Munchkin and me (or its appropriate franchisee) about your child's allergies or disabilities, they may not be able to ensure that the class you attend will be free from such allergens or special arrangements will be provided to meet your child's needs.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch with:
Munchkin and me at Rachel@MunchkinandMe.co.uk or the relevant franchisee at their email address.
Who is my data controller, and which affiliates might my data be shared with?
The data controllers for your information is the Munchkin and me franchisee with whom you have a relationship with. Similarly where you request receiving a sample product from one of our partners and when you make a payment to us using a payment processing gateway such as Stripe or Paypal, they will process your data as separate controllers to us. Also, when you use Facebook and Bookwhen services, they will process your data as separate controllers to us.
Please contact them separately to exercise your data subject rights for the personal data they hold on you.
How long will you retain my data?
Munchkin and me and its Franchisees
Where we process registration data, we do this for as long as you are an active attendee of our classes and for 2 years after this
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us.
How to complain
If you have unresolved concerns about the use of your personal information, you have the right to complain to the data protection authority where you live, work or where you believe a breach may have occurred.
In the UK you can complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address is:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF and their website address is https://www.ico.org.uk
Last updated: 31st July 2023