Privacy Policy

Last updated: May 2026

Data Controller

PlanPlay is the data controller for personal data collected through this application. Contact us regarding your data: privacy@planplay.co.uk

What We Collect

• Name and email address (when you sign in)
• Postcode (to find nearby activities)
• Children's ages and names (to personalise recommendations)
• Activity preferences and interests
• Enquiry details — your name, email, children's ages, preferred dates and any message you add, when you use “Check availability” on a listing
• Activity alerts — your email address, the first half of your postcode, your children's ages and the dates you were searching for, when you ask us to notify you about a search that came up empty
• Usage data (pages visited, features used)
• Device information (browser type, OS) for service improvement

Legal Basis for Processing

• Legitimate interest — personalising activity recommendations based on your family's preferences and location.
• Contract performance — providing the service you signed up for.
• Parental consent — where data relates to children under 13, we rely on parental consent provided during account setup.
• Explicit consent — for optional marketing emails (opt-in only, off by default).
• Explicit consent — for forwarding your enquiry details to an activity provider when you tick the box on the “Check availability” form (see below).
• Explicit consent — for emailing you when new activities appear, when you tick the box on the “Notify me when something opens” form (see below).

Enquiries (“Check availability”)

Some listings don't have online booking. If you use the “Check availability” form on one of these, we collect your name, email address, your children's ages, your preferred dates and any message you add.

Legal basis: your explicit consent, given by ticking the box on the form. We only forward your details to a provider when you have ticked it.

Who we share it with: the activity's provider, so they can reply to you directly — your email address becomes the reply-to address on the message we send them. We do not sell this data or share it with anyone else.

Follow-up emails: we send you a confirmation, and if the provider hasn't replied within 48 hours we email you again with alternative activities.

Retention: enquiry records are kept for as long as needed to support the lead, then deleted or anonymised. You can ask us to delete an enquiry at any time — see Contact & Complaints below.

Activity alerts (“Notify me when something opens”)

When a search doesn't find anything in your area, we offer to email you if that changes. If you take us up on it we collect your email address, the first half of your postcode (the district, e.g. “RH1” — never your full postcode), what you were looking for, your children's ages and the dates you were searching for.

Legal basis: your explicit consent, given by ticking the box on the form. The box is never pre-ticked, and we record the exact wording you agreed to.

What we send: a confirmation, and later a message if activities matching your search appear near you. Nothing else — we don't use this address for newsletters or any other marketing.

Unsubscribing: every one of those emails carries a one-click unsubscribe link, which works without signing in. You can also email us (below) and we'll remove you.

Who we share it with: nobody. We do share counts with activity providers — for example “47 parents in RH1 are looking for holiday clubs in August” — so they know where the demand is. Those counts never include your email address, your name or your full postcode, and unsubscribed signups are excluded.

Retention

We retain your personal data for as long as your account is active. Upon receipt of an erasure request, all personal data is deleted within 24 hours. Aggregated, anonymised analytics data (with no personal identifiers) may be retained longer.

Your Rights (UK GDPR)

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data (“right to be forgotten”).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw marketing consent at any time in your Profile settings.

To exercise any right, email privacy@planplay.co.uk or use the “Delete my account and all data” option in your Profile.

Cookies

We use functional cookies only — no advertising or tracking cookies. You can manage cookie preferences in your Profile settings.

Contact & Complaints

For privacy queries: privacy@planplay.co.uk

You have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint