Privacy Policy (UK GDPR Compliant)

Who We Are

Gym Jams Soft Play (“we”, “us”, “our”) is the data controller responsible for the personal information you provide to us.
If you have any questions about this policy or how we handle your data, you can contact us at: info@gym-jams.co.uk

What Personal Data We Collect

We may collect the following information when you make a booking, contact us, or attend our sessions:

  • Your name
  • Your email address
  • Your phone number
  • Your child’s name and age
  • Any additional information you choose to provide (e.g., health information, accessibility needs)

Why We Collect Your Data (Purpose of Processing)

We use your information for the following purposes:

  • To process and manage bookings for private hire or weekly sessions
  • To contact you by email, text, or telephone with information relating to your booking
  • To ensure the safety and wellbeing of children attending our sessions
  • To comply with legal obligations (e.g., accident reporting)

Our Lawful Basis for Processing Your Data

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to process and manage your booking
  • Legitimate Interests – to communicate essential information about your booking
  • Legal Obligation – for safety records or incident reporting where required

How Your Data Is Stored and Protected

We take data accuracy and security seriously.
Your information is stored securely and only accessed by staff who need it to carry out their duties.
We use secure systems and processes to protect your data from loss, misuse, or unauthorised access.

Who We Share Your Data With

We do not sell or share your information with third parties for marketing purposes.
We may share your data with trusted service providers who help us operate our business, such as:

  • Our booking system provider
  • Our payment processor
  • IT or website service providers

These providers only process your data on our instructions and must keep it secure.

How Long We Keep Your Data

We keep your personal information only for as long as necessary:

  • Booking information: up to 12 months after your session
  • Accident/incident reports: 3 years (or longer if legally required)
  • Financial records: 6 years (required by HMRC)

After this period, your data is securely deleted.

Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request corrections to inaccurate information
  • Request deletion of your data (in certain circumstances)
  • Object to or restrict how we process your data
  • Withdraw consent (if consent was the basis for processing)
  • Make a complaint to the Information Commissioner’s Office (ICO)

For any of these requests, contact us at:
info@gym-jams.co.uk

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.