Privacy policy

1. Data controller

For website enquiries and general service contact, Ilum Kids also uses info@ilumkids.com.

2. Information we collect

From parents, guardians and clients we may collect name, telephone/WhatsApp, email, address or area, preferred language, contact preferences and booking information. For Baby English we may collect a child’s name, date of birth, sex, languages and class selection.

Where a parent or guardian chooses to provide it, we may also process allergies, medical conditions, medication, dietary requirements and additional or SEN needs. These are special categories of personal data and receive enhanced protection.

For staff applicants we may collect identity and contact details, nationality, address, languages, experience, qualifications, availability and safeguarding information, including the Sexual Offences Certificate where required.

3. Purposes and legal bases

• Providing childcare, tutoring, Baby English classes and events: performance of a contract or steps requested before a contract.
• Managing enquiries, bookings, availability, quotes and payments: contract and legal obligations.
• Keeping a child safe using health, allergy and SEN information: explicit consent and, where legally applicable, protection of vital interests.
• Service communications through email, telephone or WhatsApp: performance of the service or consent where required.
• Marketing or social-media images: separate, explicit consent. Booking consent never implies image consent.

4. Recipients and processors

We share only the information needed to provide the requested service with assigned collaborators who are bound by confidentiality. Our website is hosted through Vercel and booking/CRM records are stored in Notion. WhatsApp or email providers may process messages when you choose to contact us through those channels. Payment providers will be identified at the point a payment service is activated.

We do not sell personal data and may disclose information to public authorities where legally required.

5. International transfers

Some technology providers may process information outside the European Economic Area. Where this happens, appropriate safeguards such as an adequacy decision or Standard Contractual Clauses should be verified for the specific provider before publication.

6. Retention

We retain information for the duration of the family or service relationship and for the periods required by accounting, tax, safeguarding and legal obligations. Marketing consent is retained until withdrawn. Afterwards, information is securely deleted or anonymised.

7. Your rights

You may request access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time without affecting earlier lawful processing. Contact info@ilumkids.com and include enough information to identify your request. You may also complain to the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Children and image rights

We only process a child’s information when provided by a parent or legal guardian who confirms parental authority. Photos and videos are used only with separate consent, and consent can be withdrawn at any time.

9. Security and cookies

We apply access controls, confidentiality measures and reputable technology providers. This website uses necessary cookies and displays a consent notice before any non-essential analytics are activated. See the Cookie Policy for more information.

10. Changes

We may update this policy. The current version is published on www.ilumkids.com with its last-updated date.