Fidget and Spin Privacy Policy

Last updated: May 2026

Who we are

Fidget and Spin Ltd is a sensory stay-and-play business for neurodiverse children, based in Brighton & Hove. We run weekly sessions for children aged 1–6 and sensory-friendly birthday parties for children aged 1–7.

• Website: https://www.fidgetandspin.com
• Contact: info@fidgetandspin.com

This privacy policy explains what data we collect about you, how we use it, and what your rights are. We've written it in plain language because legal documents shouldn't need a translator.

What personal data we collect

We may collect the following information through our website, booking forms, contact forms, or membership platform:

1. Parent or carer name
2. Email address
3. Phone number (when provided)
4. Child's first name and age
5. Emergency contact details (when provided for sessions)
6. Information about your child's preferences, needs, or sensitivities (for example: dislikes loud noises, non-verbal, particular sensory needs)
7. Booking history, session attendance, and party details
8. Payment information (handled securely by Stripe — we never see your card details)
9. Marketing preferences

Some of this information may be classified as special category data under UK GDPR if it relates to your child's health or neurodiversity. We treat this information with extra care and only use it for the specific purpose you shared it with us.

How we use your data

We collect your data so we can:

1. Tailor our sessions and parties to your child's specific needs
2. Manage bookings, payments, attendance, and venue logistics
3. Provide a safe, supportive play experience
4. Communicate with you about your session, party, or membership
5. Send newsletters, updates, and offers — but only if you've opted in
6. Improve how we run sessions and parties over time

We never sell or rent your data to anyone.

Legal basis for processing

Under UK GDPR, we process your data based on one or more of the following:

• Consent — when you voluntarily share preferences about your child or opt in to marketing
• Contract — to manage your booking, party, or membership
• Legal obligation — where we're required to keep records (for example, safeguarding)
• Legitimate interest — to improve our services and stay in touch about relevant updates

We always obtain explicit consent before processing any special category data about your child.

How your data is stored

We use the following GDPR-compliant tools to run the business:

• Webflow — website hosting and form submissions
• Airtable — booking records, session attendance, and customer details
• Stripe — secure payment processing (no card details are stored by us)
• MailerLite — email newsletters and marketing communications
• Make — connecting our tools together so bookings flow correctly

All platforms have their own appropriate data protection measures in place. We've reviewed their privacy practices and use them in line with UK GDPR requirements.

Marketing

With your permission, we may email you about:

• Session updates, schedule changes, and reminders
• Newsletters and resources for SEN families
• Special offers, new sessions, or local events

You can unsubscribe at any time using the link at the bottom of any email, or by emailing info@fidgetandspin.com.

Sharing your data

We don't share your personal data with anyone unless:

1. It's necessary to deliver our services (for example, our payment processor)
2. You've given us explicit consent
3. We're legally required to (for example, safeguarding concerns)

Your rights under UK GDPR

You have the right to:

1. Access the personal data we hold about you
2. Request that we correct or delete it
3. Withdraw your consent at any time
4. Object to certain uses of your data
5. Request that we restrict how we use your data
6. Receive your data in a portable format
7. Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please email info@fidgetandspin.com. We'll respond within 30 days.

Children's data

We collect information about children (their first name, age, and any sensory or accessibility needs) so we can deliver our sessions and parties safely. This information is provided by parents or carers — we never collect it directly from children. We only use it for the purpose you shared it with us, and we delete it when it's no longer needed.

Data retention

We keep your data only for as long as we need it:

• Booking records: 6 years (UK accounting requirement)
• Marketing preferences: until you unsubscribe
• Child preference notes: for as long as you're an active customer, then deleted within 12 months of last contact
• Payment records: retained by Stripe in line with their policies and UK financial regulations

Cookies and analytics

We use a small number of cookies and anonymous analytics to understand how people use our website and to improve it. You can read more in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The latest version will always be at https://www.fidgetandspin.com/privacy.

Contact us

If you have any questions about this policy or about how we handle your data, email info@fidgetandspin.com. We're real people and we'll respond personally.

‍