Privacy Policy

Who we are

Privacy Policy for Fish Factory Swim School

This Privacy Policy sets out how Fish Factory Swim School (referred to as “we,” “us,” or “our”) uses and protects any information that you give us when you use this website.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

This policy is in compliance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who We Are

  • Website Name: Fish Factory Swim School
  • Website Address: https://www.fishfactoryswimschool.co.uk
  • Location: Bolton, UK
  • Data Controller: The data controller and owner can be contacted at:
    • Email: Fishfactory.ss.bolton@gmail.com

2. What Personal Data We Collect and Why We Collect It

We collect data to provide you with our services, process your bookings, and communicate with you. The types of data we collect depend on how you interact with our website.

A. Payments and Bookings (via WooCommerce) When you make a booking or purchase a service from our website, we collect personal information to process your transaction and fulfil your order. This may include:

  • Contact Information: Name, billing address, shipping address, email address, and phone number.
  • Payment Information: We use a secure third-party payment processor (e.g., Stripe, PayPal) to handle payments. We do not store your full credit card details on our servers. The payment processor may provide us with a token or a masked version of your card number to process refunds and manage transactions, but your sensitive payment details are not held by us.
  • Booking Details: Information about the swimming lessons you are booking, including the name and age of the child(ren) attending, for the purpose of class allocation and safety.
  • Legal Basis: We process this data for the performance of a contract—to process your booking, take payment, and provide the swimming lessons you have purchased.

B. Contact Form When you use the “Contact Us” form on our website, we collect the information you provide, such as your name and email address, and the content of your message. This information is sent directly to us as an email. We use this data solely to respond to your inquiry and communicate with you.

  • Legal Basis: We process this data based on our legitimate interest in responding to your inquiries and providing customer service.

C. Analytics We use analytics services (such as Google Analytics) to collect information about how visitors use our website. This data is aggregated and does not directly identify any individual. The information collected may include:

  • Your IP address (anonymised)
  • The pages you visit
  • The time and date of your visit
  • The type of device and browser you are using

We use this information to understand our website traffic, improve our website’s functionality and content, and enhance the user experience.

D. Embedded Content Pages on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


3. Cookie Policy and Consent

Our website uses cookies to function correctly and to provide us with information on how our website is used. When you first visit our site, you will be presented with a cookie consent banner. You have the option to accept or decline the use of cookies.

  • Essential Cookies: These are necessary for the website to function (e.g., remembering your shopping cart). They do not require consent.
  • Analytics Cookies: We use these to understand how our website is performing. These cookies require your consent.

You can change your cookie preferences at any time through your browser settings.


4. Who We Share Your Data With

We only share your data with trusted third parties as necessary to provide our services and fulfil our legal obligations.

  • Payment Processors: We share your payment information with a secure payment processor (e.g., PayPal, Stripe) to process your bookings and payments.
  • Service Providers: We may share data with service providers who help us run our business, such as web hosting providers.

We do not sell, rent, or lease your personal information to any third parties.


5. How Long We Retain Your Data

We retain your personal data for as long as is necessary to provide the services you have requested and for a reasonable period thereafter to fulfil our legal obligations (e.g., for accounting and tax purposes).

  • Booking Data: We will retain booking and transaction data for a period of up to seven years to comply with financial and tax regulations.
  • Contact Form Submissions: We may retain these for a period of up to 12 months for customer service purposes.

6. Data Security

We are committed to protecting your personal data. We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. For example, our website uses SSL encryption to secure your data during transmission.


7. What Rights You Have Over Your Data

Under UK data protection law, you have certain rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to have any inaccurate or incomplete data we hold about you corrected.
  • Right to Erasure (Right to be Forgotten): You have the right to ask us to delete your personal data in certain circumstances.
  • Right to Restrict Processing: You have the right to ask us to limit how we use your data.
  • Right to Object to Processing: You have the right to object to our processing of your data in certain circumstances.
  • Right to Data Portability: You have the right to request that we transfer your data to another organisation or to you directly.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes UK GDPR. In the UK, this authority is the Information Commissioner’s Office (ICO). You can find their contact details on their website: https://ico.org.uk/.

To exercise any of these rights, please contact us at Fishfactory.ss.bolton@gmail.com.


8. Children’s Privacy

While our services are for children, our website is intended for use by parents and legal guardians. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent. If we learn that we have collected personal data from a child without such consent, we will take steps to delete that information as quickly as possible.


9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and update the “Effective Date” at the bottom. We encourage you to review this policy periodically for any changes.

Effective Date: 01/09/2025