Privacy Policy

Welcome to KidzRGoGo, operated by Challenging Expectations Ltd ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.kidzrgogo.com (the "Website") and use our services.

Company Details:
Challenging Expectations Ltd
Email: info@kidzrgogo.com

Please read this Privacy Policy carefully. By using our Website, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Challenging Expectations Ltd
Contact email: info@kidzrgogo.com

We collect and process the following types of personal data:

3.1 Information You Provide to Us

• Account Information: Name, email address, password, phone number, postal address
• Profile Information: Profile photo, bio, preferences for activities and age ranges of children
• Payment Information: Payment card details, billing address (processed securely through third-party payment processors)
• Booking Information: Activity bookings, attendance history, preferences
• Communication Data: Messages sent through our platform, customer service enquiries, feedback and reviews
• Provider Information: If you are an activity provider, we collect business name, registration details, insurance information, qualifications, and activity details

3.2 Information Automatically Collected

• Usage Data: Pages visited, time spent on pages, links clicked, search queries
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address or precise location if you grant permission
• Cookies and Tracking: See our Cookie Policy for detailed information

3.3 Information from Third Parties

• Social Media: If you log in via Facebook, Google, or other social media platforms, we receive basic profile information
• Analytics Providers: Google Analytics, Facebook Pixel, and other analytics tools
• Payment Processors: Stripe and other payment service providers

We process your personal data for the following purposes and legal bases:

4.1 Contract Performance

• To create and manage your account
• To process bookings and payments
• To provide customer support
• To connect parents with activity providers

4.2 Legitimate Interests

• To improve and personalise our services
• To send service-related communications
• To detect and prevent fraud and abuse
• To conduct analytics and research
• To display relevant content and recommendations

4.3 Legal Obligations

• To comply with applicable laws and regulations
• To respond to legal requests and prevent harm
• To enforce our terms and conditions

4.4 Consent

• To send marketing communications (you can opt out at any time)
• To use cookies and similar technologies (see our Cookie Policy)
• To collect precise location data

We share your personal data with the following categories of recipients:

5.1 Activity Providers

When you book an activity, we share necessary information (name, contact details, child's age) with the activity provider to facilitate the booking.

5.2 Service Providers

• Payment Processors: Stripe
• Cloud Hosting: Supabase, Vercel
• Analytics: Google Analytics, Google Tag Manager

5.3 Advertising Partners

• Google Ads
• YouTube
• Facebook Pixel
• X Pixel

5.4 Legal Requirements

We may disclose your information to law enforcement, regulatory authorities, or other third parties if required by law or to protect our rights.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.

Some of our service providers are based outside the United Kingdom. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Adequacy decisions recognising that certain countries provide adequate data protection
• Privacy Shield Framework (where applicable)

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Account Data: Retained while your account is active, plus 2 years after account closure
• Booking History: Retained for 7 years for accounting and legal purposes
• Marketing Data: Retained until you withdraw consent or 2 years of inactivity
• Analytics Data: Typically retained for 26 months (Google Analytics default)

Under UK data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at info@kidzrgogo.com. We will respond within one month of receiving your request.

Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Helpline: 0303 123 1113

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

• SSL/TLS encryption for data transmission
• Encrypted data storage
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Our services are intended for adults (18+) who are searching for activities for children. We do not knowingly collect personal data directly from children under 18 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at info@kidzrgogo.com, and we will delete such information.

We use cookies and similar tracking technologies to improve your experience on our Website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

Our Website may contain links to third-party websites, including activity provider websites and social media platforms. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

With your consent, we may send you marketing communications about our services, special offers, and updates. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us at info@kidzrgogo.com

Please note that even if you opt out of marketing communications, we will still send you essential service-related messages (e.g., booking confirmations, account notifications).

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: