Privacy Policy
A legal disclaimer
At FunZone Bounce & Play, we're committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use and protect your information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: 10th September 2026
1. Who we are
FunZone Bounce & Play is a children's inflatable indoor play centre in Doncaster. We are the data controller for the information described in this policy.
Company: FunZone Bounce & Play Ltd Registered address: FunZone Bounce & Play, Shaw Wood Way, Doncaster DN2 Email: funzoneplay@outlook.com
References to "we", "our" and "us" mean FunZone Bounce & Play
2. What information we collect
Identity data — your full name and date of birth, and the names and dates of birth of any children in your care.
Contact data — address or postcode, email address, phone number, and the name and number of an emergency contact.
Booking data — session and party details, attendance records, and payment information, which is processed securely by our payment providers. We do not store your card details.
Waiver data — your signature, your declarations and consents, and the date you signed.
Health data — any medical conditions, allergies or additional needs you tell us about, for yourself or a child in your care. See section 4 below, as this is treated differently in law.
CCTV footage — images recorded on our premises. See section 6.
Marketing preferences — whether you've asked to hear from us, and how.
Technical data — IP address, browser and device type, and how you use our website, collected through cookies. See section 10.
3. How we use your information and our legal basis
What we do | Why | Legal basis |
|---|---|---|
Meet accounting, insurance and legal duties | Because we have to | Legal obligation |
Improve our website and services | To run a better business | Legitimate interests |
Send marketing | Because you asked us to | Consent |
Operate CCTV | Public safety and crime prevention | Legitimate interests |
Keep emergency contact details | To reach someone if a child is hurt | Legitimate interests, and vital interests in an emergency |
Contact you about your booking, including closures and changes | So you're not left out of pocket or turned away | Contract |
Hold waivers and safety declarations | To run the venue safely and keep a record of what was agreed | Legitimate interests, and legal obligation |
Manage bookings, parties and payments | To provide what you've booked | Contract |
4. Health and medical information
Information about health, allergies, disability and additional needs is "special category" data and gets extra protection in law.
We ask for it so our staff can keep your family safe — for example, so we know about an allergy before an incident rather than after one. We rely on your explicit consent, given when you complete the waiver, and you can withdraw it by contacting us. If you withdraw it, we may not be able to accommodate a specific need, but you can still visit.
In a genuine emergency, we may also rely on vital interests to share relevant health information with paramedics or medical staff.
We keep this information for the life of the waiver only, and it's visible only to staff who need it.
5. Children's information
Most of the data we hold is about children, and it's provided by a parent, guardian or responsible adult rather than by the child.
We collect only what we need to keep children safe: name, date of birth, any medical needs, and who is responsible for them during a visit. We don't market to children, and we don't build profiles of them.
If you're a parent or guardian and want to see, correct or delete information we hold about your child, contact us and we'll deal with it.
6. CCTV
CCTV operates throughout our premises, including entrances and play areas, for public safety and crime prevention. Signage is displayed at the entrance.
Footage is retained for 30 days and then automatically overwritten, unless it's needed for an incident investigation, an insurance claim, or a request from the police.
We may share footage with the police, our insurers, or our legal advisers where there's a lawful reason to do so. You can request footage of yourself — see section 11.
7. Who we share your data with
We do not sell your data.
We share it only where necessary, with:
-
Payment providers, to take and refund payments
-
Our website and booking platform, which hosts our site and stores bookings and waivers
-
IT and support providers, who may see data while maintaining our systems
-
Insurers and legal advisers, if there's an incident or a claim
-
Emergency services, if someone is hurt
-
The police, where we're legally required or it's necessary to prevent crime
We put contracts in place requiring these providers to protect your data and to use it only on our instructions.
8. International transfers
Some of our providers, including our website platform, are based outside the UK. Where data is transferred outside the UK, we rely on the safeguards permitted under UK data protection law, such as an adequacy decision or the International Data Transfer Agreement. You can ask us for details.
9. How long we keep it
Data | Retention |
|---|---|
Waivers, including health information | 12 months from signing |
Booking and payment records | 7 years, for accounting and tax |
Accident and incident records | 3 years for adults; until a child turns 21 |
CCTV | 30 days unless needed for an incident |
Marketing preferences | Until you withdraw consent |
Website and cookie data | See our cookie settings |
When the period ends we delete the data or make it anonymous.
10. Cookies
Our website uses cookies. Essential cookies keep the site and booking system working. Non-essential cookies — including analytics and marketing — are only set if you agree through the banner shown when you first visit.
You can change your choices at any time through the cookie settings on our site, and you can also block cookies in your browser, though parts of the site may then stop working.
11. Your rights
Under UK GDPR you have the right to:
-
Access the personal data we hold about you
-
Correct anything inaccurate or out of date
-
Delete your data, in certain circumstances
-
Object to or restrict how we use it
-
Data portability — receive your data in a portable format
-
Withdraw consent at any time, where we rely on consent
-
Not be subject to automated decision-making — we don't make automated decisions about you
To exercise any of these, contact us using the details in section 1. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
We'd appreciate the chance to put things right first.
12. Security
We use appropriate technical and organisational measures to prevent your data being lost, misused or accessed without authorisation, and we limit access to staff who need it. If a breach occurs that's likely to affect your rights, we'll notify you and the ICO as required.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.