Privacy policy

Last updated 30 October 2026. Hobix is the data controller for the account and booking information on this site. Contact: privacy@hobix.co.uk.

What we collect

• Account holders: name, email, password (hashed), and, for teachers, business details and verification documents (DBS, insurance).
• Children: first name, date of birth, allergies or medical notes, emergency contact, and photo consent — entered by the parent, used only to run booked sessions.
• Bookings and payments: what was booked and paid; card details are handled by Stripe and never stored by Hobix.

Why (lawful basis)

To provide the service you asked for (contract); to keep children safe at sessions (legitimate interests, and consent for photos); to meet legal obligations (payment records); and, where you opt in, to send marketing from teachers you've booked with.

Who sees it

The teacher of a session you've booked sees your child's details for that session only. Stripe processes payments; Cloudflare hosts the site; Resend sends our emails. We don't sell data.

Children

We follow the ICO Age Appropriate Design Code. Children don't have accounts; parents control all information about them and can delete it at any time.

How long we keep it

Payment records: 7 years (tax law). Bookings, forms and child profiles: 12 months after your last activity, or sooner if you delete your account, when we anonymise your records and delete children's data and uploaded documents.

Your rights

Access, correct, delete, restrict or object to our use of your data, and complain to the ICO (ico.org.uk). Email privacy@hobix.co.uk.