Privacy Policy – Rainbow Rascals

Last updated: August 2026

Rainbow Rascals is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website, contact us or make a booking.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Rainbow Rascals is responsible for the personal information described in this Privacy Policy and acts as the data controller for that information.

If you have any questions about how we use your personal information or wish to exercise your data protection rights, you can contact us using the details shown in the Contact Us section below.

Information We Collect

Depending on how you interact with us, we may collect information including:

• First name and last name

• Email address

• Telephone number

• Booking details

• Selected services, sessions and admission options

• Number and age categories of children included in a booking

• Number of adults attending

• Payment and transaction information

• Messages, enquiries or other information you provide to us

• Information required to deal with cancellations, refunds or booking changes

Payment card information may be processed directly by our payment provider and is not necessarily stored by Rainbow Rascals.

Our website may also collect certain technical information automatically, such as device, browser, IP address and website usage information, depending on the cookies and services enabled on our website.

How We Use Your Information

We may use your personal information to:

• Process, confirm and manage bookings

• Take and record payments

• Send booking confirmations, reminders and service-related communications

• Contact you about changes to your booking

• Process cancellations, refunds or rescheduling requests

• Respond to enquiries

• Provide customer support

• Manage attendance and venue capacity

• Maintain appropriate financial and business records

• Protect our website, customers and business from misuse or fraud

• Comply with our legal and regulatory obligations

We do not sell or rent your personal information.

Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for using your personal information.

Depending on the circumstances, we may rely on:

Contract

We process personal information where it is necessary to enter into or perform a contract with you.

For example, we need your contact and booking information to process and administer your booking.

Legal Obligation

We may process and retain certain information where necessary to comply with legal obligations, including accounting, tax or other regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Providing effective customer service

• Protecting our business and customers

• Preventing misuse or fraud

• Managing and improving our booking processes and services

• Maintaining the security of our website and systems

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether it may adversely affect your privacy rights.

Consent

Where consent is required, for example for certain types of marketing or non-essential cookies, we will request your consent.

You can withdraw consent at any time.

Children’s Information

Our services are intended for families and children, so booking information may include details relating to children, such as their age category.

We aim to collect only the minimum information necessary to administer the booking and operate our services safely.

Unless specifically required for a service or legal reason, we do not require customers to provide unnecessary personal information about children.

Sharing Your Information

We may share personal information with trusted service providers where this is necessary to operate our website or provide our services.

These may include:

• Wix, which provides our website and booking platform

• Payment processing providers

• Email and communications providers

• Professional advisers such as accountants where required

• Government, regulatory or law-enforcement bodies where required by law

These organisations may process information on our behalf or act as separate data controllers depending on the service they provide.

We do not share personal information with third parties for their own unrelated marketing purposes.

International Data Transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards are used where required by UK data protection law.

How Long We Keep Your Information

We keep personal information only for as long as necessary for the purpose for which it was collected.

Booking and customer-service information may be retained for a reasonable period after your booking so that we can deal with enquiries, disputes, refunds or other issues.

Certain transaction and financial records may need to be retained for longer where required for accounting, tax or legal purposes.

When personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it where reasonably possible.

Security

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access

• Accidental loss

• Misuse

• Alteration

• Unauthorised disclosure

However, no internet-based system can be guaranteed to be completely secure.

Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including:

• The right to be informed about how your information is used

• The right to request access to your personal information

• The right to request correction of inaccurate information

• The right to request deletion of your information in certain circumstances

• The right to request restriction of processing in certain circumstances

• The right to object to certain processing

• The right to data portability in certain circumstances

• Rights relating to certain automated decision-making and profiling

• The right to withdraw consent where processing is based on consent

These rights are not absolute and may depend on the lawful basis and circumstances of the processing.

Marketing

We will only send electronic marketing communications where permitted by applicable law.

Where consent is required, you may withdraw that consent or unsubscribe at any time.

Service messages relating directly to an existing booking are not marketing communications.

Cookies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website and booking system to function. Other cookies, such as analytics or advertising cookies, may require your consent.

Further information about the cookies used on our website should be provided through our cookie banner or Cookie Policy.

Contact Us

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact Rainbow Rascals using the email address or telephone number provided on our website.

We may need to verify your identity before responding to certain requests.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or the way we process personal information.

Any updated version will be published on this page with a revised Last updated date.