Last updated: July 2026
Small+Mighty Play Hub Ltd (“Small+Mighty”, “we”, “our” or “us”) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains what information we collect, why we collect it, how we use it and your rights under UK data protection law.
By using www.smallandmighty.club, booking a play session, purchasing a membership, attending an event or contacting us, you agree to the practices described in this policy.
Who We Are
Small+Mighty Play Hub Ltd operates Small+Mighty, a modern sensory play café based in Godalming, Surrey.
Website: https://www.smallandmighty.club
If you have any questions regarding this Privacy Policy, please contact us using the details on our Contact page.
What Information We Collect
Depending on how you interact with us, we may collect:
Payment confirmations (we do not store full payment card details)
Name
Email address
Telephone number
Postal address (where required)
Children’s names and ages (where voluntarily provided for bookings or events)
Emergency contact information
Membership details
Booking history
Technical Information
When you visit our website we may automatically collect:
- IP address
- Browser type
- Device type
- Pages visited
- Time spent on pages
- Referring website
- Cookies and similar technologies
How We Use Your Information
We use your personal information to:
- Process bookings
- Manage memberships
- Confirm reservations
- Process payments
- Respond to enquiries
- Provide customer support
- Send booking confirmations
- Send important service updates
- Improve our website
- Prevent fraud
- Meet our legal obligations
- Administer competitions and promotions
- Send marketing communications where you have chosen to receive them
We only collect information that is necessary for these purposes.
Marketing Communications
If you opt in, we may send you:
- Newsletters
- Event announcements
- Special offers
- Membership updates
- Seasonal activities
- New product launches
You can unsubscribe at any time using the link in our emails or by contacting us.
We will never sell your information to third parties for marketing purposes.
Lawful Basis for Processing
Under UK GDPR we rely on one or more of the following lawful bases:
- Performance of a contract (for bookings and memberships)
- Consent (for marketing communications)
- Legal obligation (tax, accounting and safeguarding requirements)
- Legitimate interests (running and improving our business, preventing fraud and providing customer service)
Children’s Information
Our services are designed for families with young children.
Any information relating to children is provided by a parent or legal guardian.
We only collect children’s information where necessary for bookings, events, memberships or safeguarding purposes.
Payments
Payments may be processed through trusted third-party payment providers.
We do not store your full debit or credit card details on our systems.
Please refer to the privacy policies of our payment providers for more information.
Booking Systems
We use trusted third-party booking and membership platforms to manage reservations and memberships.
These providers process personal information on our behalf in accordance with UK data protection law.
Cookies
Our website uses cookies to improve your browsing experience.
Cookies help us:
- Remember your preferences
- Analyse website traffic
- Improve website performance
- Measure marketing effectiveness
You can manage or disable cookies through your browser settings.
Please note that disabling cookies may affect parts of the website.
Analytics
We may use website analytics tools to understand how visitors use our website.
These tools may collect anonymous information such as:
- Pages visited
- Time spent on the site
- Device type
- General geographic location
- Website performance
This information helps us improve our website and customer experience.
How Long We Keep Information
We only keep personal information for as long as necessary.
Retention periods depend on the reason for collecting the information, including legal, accounting and safeguarding requirements.
When information is no longer required, it is securely deleted or anonymised.
Sharing Your Information
We may share information with trusted service providers who help us operate our business, including:
- Payment providers
- Booking software providers
- Website hosting providers
- Email marketing providers
- IT support providers
- Professional advisers where required by law
We require these providers to protect your information appropriately.
We never sell your personal information.
Security
We take appropriate technical and organisational measures to protect your personal information from:
- Unauthorised access
- Loss
- Misuse
- Disclosure
- Alteration
- Destruction
While no online service can guarantee absolute security, we continually review our systems to keep your information safe.
Your Rights
Under UK GDPR you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information where appropriate
- Restrict processing
- Object to certain processing
- Withdraw consent for marketing at any time
- Request a copy of your information (data portability)
If you would like to exercise any of these rights, please contact us.
Complaints
If you are unhappy with how we use your information, please contact us first so we can try to resolve your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information is available at:
Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites.
We recommend reading their privacy policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this page together with the date of the most recent update.
We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy or how your personal information is handled, please contact Small+Mighty Play Hub Ltd using the contact details provided on our website.
We will respond as quickly as reasonably possible.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.