Privacy Policy

Last updated: April 2026

Baby Days Edinburgh is the data controller responsible for your personal data.

This policy explains how your personal data is collected and used.

If you have any questions or concerns, please contact:

1. What information we collect

We collect personal data directly from you (for example, when you make a booking) or indirectly (if someone else provides information on your behalf).

This may include:

Name
Postal address
Email address
Phone number
Payment details
Baby/babies’ date of birth
Physical and/or mental health information
Safeguarding information
Any other information you choose to provide

2. How we use your information

We use your personal data to:

Process and manage your booking
Make changes to your booking at your request
Send important course and venue information
Respond to enquiries or complaints
Send information about other courses where you have consented to receive marketing communications (you can unsubscribe at any time)

We may contact you by email, phone or text message.

3. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

Contract – to provide your booked course
Legal obligation – for accounting and tax purposes
Legitimate interests – for administration and communication
Consent – for marketing communications

For sensitive (special category) data such as health information:

Explicit consent – we only process this with your clear permission

We may also rely on:

Vital interests – in emergencies or safeguarding situations
Legal obligations where safeguarding concerns arise.

4. Do you have to provide your data?

If you do not provide the personal data required to complete a booking, we may not be able to offer you a place on the course.

5. Who we share your data with

We use trusted third parties (data processors) to support our services. These include:

Wix.com – website hosting and booking system
PayPal – payment processing
Google Mail (Gmail) – email communication

These providers only process your data on our behalf and must comply with UK data protection law.

Some providers may process data outside the UK. Where this happens, appropriate safeguards are in place.

6. How long we keep your data

We only keep your data for as long as necessary. Booking records are retained for 6 years after the end of the financial year in which the course took place.

7. Your rights

You have rights under UK data protection law, including:

Access to your personal data
Correction of inaccurate data
Objection to processing (including marketing)
Data portabilityErasure (in certain circumstances)
Restriction of processing (in certain circumstances)

You can learn more from the Information Commissioner's Office.

To exercise your rights, email:

contact@babydaysedinburgh.co.uk

We will respond within one month.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your data is handled.

8. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page.