Privacy Policy

1. Who We Are

BrickQuest ("we", "us", "our") operates brick building based creative learning sessions and parties for children. We are the data controller for the personal information you provide to us.

Contact us at: BrickQuestSessions@gmail.com

2. What Information We Collect

We may collect the following personal information:

• Parent/guardian name, email address, and phone number
• Child's first name, age, and date of birth
• Booking and payment information
• Special Educational Needs and Disabilities (SEND) or additional support information, including reasonable adjustments
• Enquiry and contact form submissions
• Marketing preferences and records of consent

We may but not necessarily collect the following special category information, which is subject to additional protection under UK GDPR due to its sensitive nature:

• Health information (e.g. medical conditions, allergies, or physical needs relevant to participation)
• Dietary requirements, including allergies, vegetarian, vegan, gluten-free, and religious requirements

We collect special category data only with your explicit consent, or where it is necessary to protect a child's health, safety, or wellbeing.

3. How We Use Your Information

We use your personal information to:

• Process and manage your bookings
• Communicate with you about your sessions or enquiries
• Send booking confirmations and reminders
• Ensure the safety, wellbeing, and appropriate support of children during sessions
• Meet our safeguarding and legal obligations
• Send you updates about our services where you have given consent or where we have a legitimate interest as an existing customer

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance: to fulfil your booking and provide our services
• Legitimate interests: to communicate with you about your booking, improve our services, and contact existing customers about similar services
• Legal obligation: where we are required to retain records by law, including safeguarding duties
• Vital interests: where someone's physical or mental health or wellbeing is at urgent or serious risk
• Consent: for marketing communications, photography/media, and collection of special category data such as health information — you may withdraw consent at any time

If you make a data protection rights request, we will respond without undue delay and in any event within one month.

5. Children's Privacy

Our sessions are designed for children, but our website and booking process are directed at parents and guardians. We do not knowingly collect personal data directly from children. All bookings must be made by a parent or guardian aged 18 or over. Any information about a child (such as their name, age, or health needs) is provided by the parent/guardian and used solely for the purpose of delivering our sessions safely and appropriately. We do not use children's information for marketing or share it for commercial purposes.

6. Safeguarding

As a children's activity provider, we have safeguarding responsibilities. In certain circumstances we may be required to share personal information — including sensitive information — with relevant authorities such as social services, safeguarding partners, schools, or emergency services. We will only do so where we have a legal obligation or where it is necessary to protect a child's safety or wellbeing. This may occur without your prior consent where the law requires or permits it.

7. Where We Get Your Information From

We collect personal information:

• Directly from you (parents or guardians) via our booking process, contact forms, or enquiries
• From payment processors when you complete a transaction
• Occasionally from other sources such as schools or local authorities, where relevant to delivering our services

8. Who We Share Your Information With

We do not sell or rent your personal data to third parties. We may share your information with the following:

Data processors

• Stripe (US-based): Processes payments securely on our behalf. Data may be transferred outside the UK — see international transfers section below.
• GoDaddy / Airo (US-based): Hosts our website and processes contact form submissions. Data may be transferred outside the UK.
• Google Workspace (US-based): Business email and document storage.

We may also share information with:

• Local authorities or safeguarding partners where we have a legal duty to do so
• Schools, where we coordinate sessions and need to share relevant child safety information with necessary staff
• Emergency services in the event of a medical emergency or serious incident
• Legal bodies or relevant regulatory authorities where required by law

9. International Data Transfers

Some of our data processors are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in compliance with UK GDPR:

We will only transfer your data internationally where appropriate safeguards are in place to protect your rights and freedoms.

10. How Long We Keep Your Information

We retain personal data only for as long as necessary for the purposes it was collected, or as required by law:

11. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data, subject to legal obligations
• Right to restrict processing: to request that we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at BrickQuestSessions@gmail.com. We will respond without undue delay and within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Photography and Media

We may take photographs or video during our sessions for use in our marketing materials, website, and social media. We will always ask for your explicit consent before doing so. You may withdraw consent at any time by contacting us at BrickQuestSessions@gmail.com. We will never share images of children without parental consent.

13. Cookies

Our website uses essential cookies to enable core functionality such as session management and security. We do not use tracking or advertising cookies without your consent. You can manage cookie preferences through your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. We will notify you of any significant changes where we are able to do so.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: