Privacy Policy
How we collect, use and protect your personal data
Last updated: June 2026
Who we are
Little Exploradores Hub (operated by Elizabeth Rios as a sole trader, based in London, United Kingdom) is the data controller for the personal data collected through littleexploradoreshub.com and our bilingual play programme Little Exploradores Lab. You can contact us at spanishsensoryplay@gmail.com.
What data we collect
We collect only the data you give us directly: parent/guardian name, child's name and age, email, phone (optional), preferred session date and location, and any message or allergy/medical information you choose to share when booking or contacting us. If you subscribe to our newsletter we also store your email and consent date. Our website may automatically log basic technical data (IP address, browser type, pages visited) via privacy-friendly analytics, used only in aggregate.
Why we use it and the lawful basis
We process your data to: (a) manage and confirm bookings — lawful basis: performance of a contract; (b) reply to enquiries — lawful basis: legitimate interests; (c) keep children safe during sessions (allergies, emergency contact) — lawful basis: legitimate interests and, where relevant, vital interests; (d) send our newsletter and free play ideas — lawful basis: your consent, which you can withdraw at any time; (e) comply with our legal and accounting obligations — lawful basis: legal obligation.
Children's data
We only collect a child's first name and age, plus any allergy or accessibility information the parent or guardian chooses to share. This data is provided by the adult booking the session and is used solely to deliver the session safely and appropriately. We do not market to children.
Sharing your data
We do not sell your personal data. We share it only with trusted service providers who help us run the programme — for example our email/booking platform and (when paid sessions launch) our payment processor. These providers act as data processors under written agreements and only process your data on our instructions. Where any provider is based outside the UK, we rely on the UK International Data Transfer Agreement or equivalent safeguards approved under UK GDPR.
How long we keep it
Booking records are kept for up to 24 months after your last session. Enquiry emails are kept for up to 12 months. Newsletter subscriber data is kept until you unsubscribe. Records required for tax and accounting are kept for 6 years as required by UK law.
How we keep it safe
Your data is stored on reputable cloud platforms with appropriate technical and organisational security measures. Access is limited to Elizabeth Rios and, where strictly necessary, our processors.
Cookies
Our website uses only essential cookies needed for the site to work, plus (with your consent) limited analytics cookies. You can refuse non-essential cookies via your browser settings without affecting your ability to book a session.
Your rights under UK GDPR
You have the right to: access the data we hold about you; ask us to correct inaccurate data; ask us to delete your data; restrict or object to processing; withdraw consent at any time; and request a copy of your data in a portable format. To exercise any of these rights, email spanishsensoryplay@gmail.com — we will respond within one month.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The 'Last updated' date above will always show the current version.