Privacy Policy

Hello & Flow LTD

Hello And Flow Ltd (“we”, “us”, “our”) is committed to protecting your privacy and the privacy of your child. This Privacy Policy explains how we collect, use, store, and protect personal data relating to adults, babies, and children when you visit our website or use our services.

Who We Are

1

1. Who We Are

Hello And Flow Ltd is a UK-registered company offering yoga, wellness, and family-focused services, including classes for babies and children.

Contact details:
Email: tash@helloandflow.co.uk

Personal Data We Collect

2

We may collect personal data relating to parents, carers, babies, and children, including:

Parent / Carer information

Name
Email address
Phone number
Billing or payment details (processed securely by third-party providers)
Information submitted via contact forms, emails, or booking systems

Child information (provided by a parent or legal guardian only)

Child’s first name
Child’s age or date of birth
Relevant medical, developmental, or additional needs information (only where necessary for safe participation)

We do not knowingly collect personal data directly from children.

How We Use Personal Data

3

We use personal data to:

Manage bookings and class attendance
Ensure classes are safe, suitable, and age-appropriate
Communicate with parents or carers about classes or services
Process payments and maintain financial records
Meet safeguarding, health, and legal obligations
Improve our services and website

Children’s data is only used where necessary for their wellbeing and participation.

Lawful Basis for Processing

4

Under UK GDPR, we process personal data on the following lawful bases:

Consent (given by a parent or legal guardian for a child)
Performance of a contract (to provide booked classes or services)
Legal obligation (for safeguarding, health, or financial requirements)
Legitimate interests, where these do not override your rights or your child’s rights.

Special Category Data

5

Any health or developmental information shared about a baby or child is treated as special category data and is:

Collected only where necessary
Provided voluntarily by a parent or guardian
Stored securely
Accessed only by authorised persons
Never shared without a lawful reason

How We Store and Protect Data

6

We take appropriate technical and organisational measures to protect all personal data, including children’s data, from unauthorised access, loss, misuse, or disclosure.

Data is stored securely and accessed only by those who need it to deliver our services.

Sharing Personal Data

7

We do not sell or rent personal data.

We may share data with trusted third parties such as:

Booking and payment providers
Website hosting services
Email communication platforms (where consent has been given)

All third parties are required to comply with data protection legislation.

Photographs and Videos

8

We will never photograph or record babies or children without explicit consent from a parent or legal guardian.

Any consent given for photographs or videos (for example, for marketing or social media) can be withdrawn at any time.

Data Retention

9

We keep personal data only for as long as necessary to fulfil the purpose it was collected for, including legal or safeguarding requirements.

Parents or guardians may request access to or deletion of their own data or their child’s data at any time.

Your Rights

10

Under UK GDPR, you have the right to:

Access personal data we hold about you or your child
Request correction of inaccurate data
Request deletion of data
Withdraw consent at any time
Object to or restrict processing
Request data portability

To exercise any of these rights, please contact us using the details above.

Complaints

11

If you are unhappy with how we handle personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

Changes to This Policy

12

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

Last updated Jan 2026