Wish Upon a Starre Logo

Privacy Policy

Last Updated: [INSERT DATE]

Important Notice: This privacy policy is a template draft designed specifically for Wish Upon a Starre. It should be fully verified, customized, and approved by the business owner or a professional legal adviser prior to formal publication.

1. Who We Are

We are [INSERT LEGAL BUSINESS NAME] (operating as "Wish Upon a Starre"). We operate children's character party hosting and early childhood development classes across Dorset, United Kingdom. We are the "data controller" for any personal information you share with us.

If you have any questions regarding your data privacy or wishes to exercise your data rights, please contact us at:
Email: [INSERT CONTACT EMAIL]
Postal Address: [INSERT BUSINESS ADDRESS IF REQUIRED]

2. What Personal Information We Collect

We collect and process personal data about you when you complete our booking form, join our classes, contact us via email, or interact with our social media pages. This may include:

  • Identity Data: Full name of parents/guardians, names of children receiving the party coronation or attending our classes.
  • Contact Data: Your email address, telephone numbers, and billing/home addresses.
  • Event Specifics: The age your child is turning, party theme preferences, desired characters, event date, start times, and location address.
  • Financial Data: Bank payment coordinates, deposit tracking details (processed securely via direct banking; we do not store raw card numbers on this site).

3. How We Collect Your Data

You provide most of this data directly to us when you:

  • Submit an online enquiry via our Request a Booking form.
  • Send us an email enquiry, phone call, or text message.
  • Register for or purchase tickets to our Sensory and Song weekly classes.
  • Engage with us on social media channels (Facebook, Instagram, TikTok).

4. Why We Use It & Lawful Bases

Under the UK General Data Protection Regulation (UK GDPR), we only use your information when we have a valid lawful basis:

  • Contractual Performance: To process your booking request, confirm performer calendars, take deposits, and execute the physical character appearance at your event.
  • Consent: Where you have explicitly opted in (for example, consenting to receive email newsletters, or signing a photo release waiver for child photos).
  • Legitimate Interests: To respond to basic pre-sale enquiries, manage customer relations, gather review feedback, and protect the security of our website.
  • Legal Obligation: To maintain accurate business accounting records, tax logs, and support general insurance claims.

5. Children’s Information

Because we provide children's entertainment, we occasionally record details about children (such as names and ages turning) strictly to personalise the party experience (e.g. coronation certificates, name calls during sessions). This data is collected solely from parents or legal guardians, is stored securely, and is deleted or anonymised immediately after the event has concluded.

6. Third-Party Sharing

We do not sell, rent, or trade your personal information with third parties for marketing purposes. We only share data with essential suppliers who help us run our service:

  • Our sub-contracted professional performers (who receive only necessary names, addresses, and party themes to host the event safely).
  • Secure hosting, database providers, and booking software partners.
  • HMRC, legal, and financial auditors as legally required under UK tax frameworks.

7. Data Retention

We keep your information only as long as necessary. Customer booking details and contracts are retained for 6 years to comply with HMRC accounting regulations. Simple, non-converted enquiry emails and child names are routinely scrubbed within 90 days after an enquiry or event date has passed.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

  • Access: The right to request copies of your personal information.
  • Rectification: The right to ask us to correct inaccurate details.
  • Erasure: The right to ask us to delete your personal details (subject to active contract limitations).
  • Restriction: The right to ask us to restrict how we process your information.
  • Portability: The right to ask that we transfer the data to another organisation.

9. Complaining to the ICO

If you have any concerns regarding how we handle your personal data, please contact us first. If we cannot resolve your issue, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk