Privacy & Cookies Policy | Creation Life Adventure Ltd
Creation Life Adventure Logo arrow_back Back to Home
Legal & Compliance

Privacy & Cookies Policy

How Creation Life Adventure Ltd collects, uses, and safeguards personal information for families, parents, and children.

Data Controller: Susan Hammond ([email protected])
Effective Date: August 2026
Review Cycle: Annual

info 1. Introduction

At Creation Life Adventure Ltd (CLA3), we are committed to protecting the privacy, security, and personal data of every family, parent, carer, and child who interacts with our services, website, and outdoor/indoor events.

This policy explains how we collect, use, store, and protect your personal information, as well as how we use cookies and tracking technologies on our website. This policy is governed by the statutory framework of the United Kingdom:

  • gavel UK General Data Protection Regulation (UK GDPR)
  • gavel Data Protection Act 2018
  • gavel Privacy and Electronic Communications Regulations (PECR)
  • gavel ICO Age-Appropriate Design Code (Children's Code)
  • gavel The Children Act 1989 & 2004
verified_user

2. Protection & Safeguarding of Children's Data

We recognize that children require specific privacy protections under UK law. The handling of any child's data by Creation Life Adventure Ltd is held to the highest standard of security, care, and statutory duty.

check_circle
Parental Consent: We never knowingly collect or process personal data directly from children under 13 without verifiable explicit consent from a parent or legal guardian.
check_circle
Data Minimisation: We only collect the minimum personal details required for safety and activity planning (such as a child's first name, age, and voluntary medical/dietary needs).
check_circle
Safeguarding Policy Alignment: All records concerning children are handled strictly in accordance with our Safeguarding & Child Protection Policy. Safeguarding records are stored on encrypted, access-restricted systems accessible only by the Lead Designated Safeguarding Officer (Susan Hammond) on a strict need-to-know basis.
check_circle
No Marketing to Children: Children’s data is never used for marketing, profiling, behavioral advertising, or commercial exploitation.
check_circle
Photography & Media: Photographs or videos of children are never taken, published, or used for promotional purposes without explicit, opt-in written consent from a parent or legal guardian. Published media will never include full names or identifying personal details.

dataset 3. Information We Collect

edit_note 3.1 Provided by Parents & Carers

When registering for events, submitting booking forms, or downloading activity packs:

  • Parent/Carer Details: Full name, email address, phone number, and emergency contact details.
  • Child Details: First name(s), age(s), and voluntary medical, dietary, or accessibility requirements for activity safety.
  • Communication Preferences: Marketing newsletter opt-in or opt-out preferences.

devices 3.2 Collected Automatically

When visiting our website, technical data may be automatically captured to optimize user experience:

  • IP address, device type, browser information, operating system, and page interaction timestamps.
  • Form entry tracking scripts for managing reservation requests.

balance 4. How We Use Your Information (Legal Basis)

Purpose / Activity Type of Data UK GDPR Legal Basis
Processing event bookings & reservations Parent Contact Info, Child Names/Ages Contractual Necessity
Ensuring child safety & medical readiness at events Emergency Contacts, Medical/Dietary Info Vital Interests / Explicit Consent
Responding to parent inquiries or support requests Parent Contact Info Legitimate Interest
Sending event reminders or optional newsletter updates Email Address Consent (Opt-in)
Safeguarding reporting & statutory child protection Attendance & Incident Logs Legal Obligation (Children Act)
Website optimization & analytics Cookies & Technical Data Consent (Cookie Banner)

cookie 5. Cookies & Tracking Technologies

Cookies are small text files stored on your browser or device when visiting our website. They help the website function smoothly, remember preferences, and process booking forms.

5.1 Strictly Necessary Cookies

Required for basic website navigation, form security, and session state. Exempt from explicit consent requirements under PECR.

5.2 Performance & Analytics Cookies (Randleads CRM Tracking)

We use external tracking scripts (such as Randleads CRM tracking) to monitor how visitors interact with our booking forms, measure marketing effectiveness, and manage contact requests.

Script Identifier: https://link.randleads.com/js/external-tracking.js

hub 6. Data Sharing & Third Parties

We respect your privacy and never sell, rent, or trade personal data to third parties for marketing purposes. We only share information under strict confidentiality:

  • CRM & Hosting Partners: Secure cloud platforms (such as Randleads CRM and SharePoint) used to process form entries and store encrypted data securely within the UK/EEA.
  • Event Helpers & Facilitators: Named helpers receive attendee lists containing only necessary first names and emergency medical details for session safety.
  • Statutory Safeguarding Authorities: If we have reasonable cause to suspect that a child is experiencing or at risk of significant harm, we have a statutory duty under UK law to report relevant information to Local Authority Multi-Agency Safeguarding Hubs (MASH) or Emergency Services (999).

lock 7. Data Security & Retention

Security Standards

We use SSL/TLS encryption, secure cloud servers, multi-factor authentication, and strict permission controls to safeguard all personal records.

Retention Periods

Event booking records are retained for 2 years following your last interaction with CLA3, after which they are securely deleted. Safeguarding incident records are retained in accordance with UK statutory guidance.

front_hand 8. Your Legal Rights Under UK GDPR

As a parent or user, you hold the following rights regarding your personal data (and data held on behalf of your children):

Right to Access: Request a copy of the personal data we hold about you or your child.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data when processing is no longer required.
Right to Withdraw Consent: Withdraw consent for marketing or optional cookies at any time.

contact_support 9. Contact Us & Supervisory Authority

If you have questions or wish to exercise any of your data rights, please contact our Lead Data Officer:

Lead Officer: Susan Hammond

You also have the right to lodge a complaint with the UK data supervisory authority:

Information Commissioner's Office (ICO) | Website: ico.org.uk | Helpline: 0303 123 1113