Brood Privacy Policy
Last updated: 7 October 2026
Brood Family Studio Ltd ("Brood", "we", "us", "our") runs baby and toddler classes, after school clubs, holiday camps, parties and family events.
This policy explains what personal information we collect, why we need it, how we use it and how we look after it, in accordance with UK data protection law, including the UK GDPR and Data Protection Act 2018.
Who we are
Brood Family Studio Ltd, company number 14106713, is responsible for the personal information described in this policy.
For any questions about your data or this policy, contact us at hello@broodfamilystudio.com.
What information we collect
When you enquire about or book activities at Brood, we may collect:
Your name, address and contact details, including email and phone number
Your child's name, age and date of birth
Details of the classes, clubs, camps and events you book and attend
Emergency contact details and information about adults authorised to collect your child
Allergy, dietary, medical and additional needs information relevant to your child's care
Information about accidents, incidents or safeguarding concerns where necessary
Your communication and photography preferences
We only ask for information that's relevant to the activities you're booking or the care we're providing.
Health information is treated as special category data under UK GDPR and requires additional protection. We collect and use it where necessary to care for children safely, with an appropriate legal basis and special category condition.
Card payments are handled securely by our payment provider, Stripe. We don't see or store your full card details.
Why we use your information
We use personal information to:
Manage bookings, payments, attendance and waiting lists
Provide classes, clubs, camps and events
Keep children safe and meet our responsibilities as an Ofsted registered childcare provider
Understand and accommodate children's medical, dietary and additional needs
Contact you about bookings, changes or emergencies
Maintain records required by law
Improve our services and respond to enquiries
Send marketing communications or use photographs where we have the appropriate permission
Under UK GDPR, we rely on different legal grounds depending on how information is used:
Contract: to manage bookings and provide the services you've purchased.
Legal obligation: to meet childcare, safeguarding, financial and other legal requirements.
Legitimate interests: to run and improve Brood, respond to enquiries and manage our business, where these interests don't override your rights.
Consent: where required, including for marketing communications and the use of children's photographs.
For children's health information and other special category data, we also rely on an applicable additional condition under data protection law. This may include explicit consent or another condition relevant to our childcare and safeguarding responsibilities.
Where we rely on consent, you can withdraw it at any time.
Who we share information with
We use a small number of trusted services to help run Brood. These include:
Baluu: our booking platform, which manages bookings, attendance and waiting lists.
Stripe: processes card payments.
Mailchimp: manages our marketing emails for people who have signed up to hear from us.
Squarespace: hosts our website and newsletter sign-up forms.
Google Workspace: provides our email, documents, registration forms and internal records.
Claude (Anthropic): an AI assistant we use to support internal administration, analysis and drafting. We limit the personal information shared with AI tools and don't use them to make automated decisions about children or families.
We may also share relevant information with staff and teachers who need it to provide appropriate care, and with safeguarding authorities, emergency services or other organisations where required or permitted by law.
If you choose to join one of our class WhatsApp groups, other members will be able to see your name and phone number. Joining these groups is always optional.
We don't sell your personal information.
We expect the services we use to handle personal information securely and in accordance with applicable data protection requirements.
International transfers
Some of the services we use may process personal information outside the UK.
Where this happens, we take steps to ensure appropriate data protection safeguards are in place, in accordance with UK data protection law.
Cookies
Our website uses cookies to help it work properly and understand how visitors use it.
Essential cookies are needed for the website to function.
Analytics cookies help us understand how visitors use our website. These are only set where you've given the required consent.
Booking cookies may be used by Baluu when you check availability or make a booking.
You can manage your cookie preferences through our website's cookie controls and your browser settings.
Photographs and videos
We love capturing the things children create and the experiences they have at Brood.
We'll always ask for your written consent before using identifiable photographs or videos of your child in our marketing, including our website, social media and printed materials.
You can withdraw your consent at any time by contacting us. We'll stop using the images for future marketing and remove them from channels we control wherever reasonably possible. However, we may not be able to remove images from printed materials already distributed or copies shared by others.
For professional photography or filming projects, we may ask families to sign a separate release agreement explaining the intended uses of the images, the duration of those uses and the arrangements if permission is later withdrawn.
Hearing from us
You can choose to receive our newsletter, with news about classes, events, new bookings and availability.
We'll only send marketing emails where we have the appropriate permission or another lawful basis to do so.
You can unsubscribe at any time using the link in our emails or by contacting us directly.
We'll still contact you about bookings you've made and other essential information relating to your child's care.
How long we keep your information
We keep personal information only for as long as it's needed, taking account of why it was collected and our legal responsibilities.
Booking and financial records are generally kept for up to six years.
Children's registration, accident, medical and safeguarding records may need to be kept for longer in accordance with childcare regulations and applicable guidance.
Marketing information is kept until you unsubscribe or we no longer need it.
You can ask us to delete your information at any time. We'll remove information we no longer need, but some records must be retained for legal, safeguarding or accounting reasons.
We take reasonable steps to keep personal information secure and restrict access to those who need it.
Your rights
Under UK GDPR, you have the right to:
Access the personal information we hold about you
Ask us to correct anything inaccurate or incomplete
Ask us to delete your information in certain circumstances
Object to or restrict certain uses of your information
Withdraw consent at any time where we're relying on it
Request a copy of your data in a portable format, where applicable
Complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your information
You can contact the ICO directly at ico.org.uk.
To exercise your rights or ask a question about your information, email hello@broodfamilystudio.com.
We'll normally respond within one month.
Changes to this policy
We may update this policy from time to time to reflect changes to our services, systems or legal requirements.
The latest version will always be available on our website.
Brood Family Studio Ltd
Company number: 14106713