top of page

Privacy Policy

Effective Date: 04/04/2025
Last Updated: 12/04/2025
 

1. Who We Are

Lumiere is a UK-based charity that supports children with complex learning difficulties and their families. Our inclusive sensory and soft play centre is committed to creating a safe, welcoming, and respectful on-site and online environment. This Privacy Policy outlines how we collect, use, protect, and share your information when you visit our website or engage with our services.
 

Contact Details:
Lumiere Charity
Unit 2C,
Brookfield Dr,
Liverpool,
L9 7AJ

Charity Number: 1206968
Email: info@lumierecharity.org
Data Protection Officer: Linda Clark

 

2. What This Policy Covers

This Privacy Policy applies to:

  • Visitors to our website

  • Individuals who make bookings through our website

  • Donors and supporters

  • Individuals who contact us via email, phone, or social media

  • Children’s data submitted by parents/carers for bookings or support services

 

3. The Information We Collect

 

We may collect and process the following types of personal data:
 

A. Personal Identification Data

  • Name, address, phone number, email address

  • Contact preferences
     

B. Booking and Participation Data

  • Children’s names and relevant support needs

  • Parent/guardian emergency contacts

  • Attendance and booking history
     

C. Special Category Data

  • Health and disability information is necessary for providing safe access to our services.

  • Information provided voluntarily for access or safeguarding
     

D. Technical Data

  • IP address, browser type, device type

  • Cookies and analytics information via tools like Google Analytics and Wix
     

E. Marketing and Donation Data

  • Information provided when you sign up to newsletters or donate online

  • Preferences and feedback

 

4. How We Collect Your Data

We collect data in the following ways:

  • When you complete a booking form or contact us

  • Through donations and newsletter sign-ups

  • Automatically via our website’s cookies and analytics

  • When a parent/carer provides details about a child to facilitate support


5. How We Use Your Information

We use your data to:

  • Process bookings and communicate with you about sessions

  • Tailor support to meet individual children’s needs

  • Improve our services and website

  • Respond to enquiries and feedback

  • Send you relevant updates, fundraising information, or service announcements (with consent)


6. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Consent – for newsletter sign-ups, special category data, and marketing communications

  • Contract – to manage bookings and provide services

  • Legal Obligation – where required to retain records or report safeguarding concerns

  • Legitimate Interests – to improve services and maintain contact with supporters


7. Children’s Data

Lumiere only collects children’s data from parents or legal guardians to ensure safe and appropriate participation in our programmes. This includes accessibility and safeguarding information. We will never directly market to children.


8. Sharing Your Data

We do not sell your data. We may share data with trusted service providers under data processing agreements, including:

  • Wix (website hosting)

  • Google (email, analytics, business profile)

  • Constellation Marketing Solutions (marketing support – under strict Data Processing Agreement)

  • HMRC or regulatory authorities when legally required

All third parties are GDPR-compliant and contractually obligated to safeguard your data.


9. Data Transfers Outside the UK/EEA

Data may be hosted on servers outside the UK, such as via Wix or Google. All transfers meet adequacy requirements and are protected by standard contractual clauses or equivalent safeguards.


10. How We Protect Your Data

We implement appropriate technical and organisational measures:

  • Secure servers and encryption

  • Two-factor authentication for admin access

  • Regular staff training

  • Access on a need-to-know basis only


11. Data Retention

We retain personal data only for as long as necessary:

  • Booking and participation data: up to 3 years

  • Donor records: up to 7 years (for legal compliance)

  • Children’s support data: as per safeguarding or statutory requirements

After this period, data is securely deleted or anonymised.


12. Your Rights

You have the following rights under UK GDPR:

  • Right to access your data

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object

  • Right to withdraw consent

To exercise any of these rights, contact us at [Insert Contact Email].


13. Cookies and Tracking Technologies

Our website uses cookies for functionality, analytics, and user experience improvement. You can manage cookie preferences via your browser or through our cookie banner.

For more information, view our [Cookie Policy].


14. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be available on our website, with the revision date at the top.


15. Complaints

If you're unhappy with how we’ve handled your data, please get in touch with us. You also have the right to complain to the UK Information Commissioner’s Office (ICO):
www.ico.org.uk

bottom of page