The Kids Club Collection

LEGAL

Privacy Policy

Last updated: 30 April 2026

1. Who We Are

The Kids Club Collection Ltd ("we", "us", "our") operates the website at www.thekidsclubcollection.com (the "Site"). We are the data controller for personal data collected through this Site.

For privacy enquiries, contact us at: [email protected]

2. What Data We Collect

2.1 Data you provide directly:
  • Family Passport: children's first names, ages, and activity interests
  • AI Concierge: travel preferences and family requirements you share in chat
  • Hotel partner applications: contact name, email, hotel name
  • Reviews and ratings you submit
2.2 Data collected automatically:
  • Browser type, IP address, and device type (via server logs)
  • Pages visited and time spent on site
  • Referral source (how you found us)
2.3 Cookies:

We use essential session cookies to maintain your Family Passport session. We do not use third-party advertising cookies.

3. How We Use Your Data

PurposeLegal BasisDetails
Provide Family PassportContract performanceStore your family's preferences to personalise hotel recommendations
AI Concierge responsesLegitimate interestsProcess your query to return relevant hotel suggestions
Partner onboardingContract performanceProcess hotel partner applications and Stripe payments
Site analyticsLegitimate interestsUnderstand how visitors use the Site to improve it
Legal complianceLegal obligationRetain records as required by UK/EU law

4. Children's Data

The Family Passport feature collects children's first names and ages. We collect this data solely to personalise hotel recommendations and do not share it with third parties. We do not build profiles of individual children or use their data for advertising purposes.

If you are a parent or guardian and wish to delete your family's data, please contact us at [email protected].

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe — for processing partner subscription payments (Stripe's privacy policy applies)
  • Our hosting provider — for secure data storage within the UK/EEA
  • Law enforcement — when required by applicable law

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above:

  • Family Passport data: until you delete your passport or request erasure
  • Partner application data: 7 years (legal/financial record-keeping)
  • Server logs: 90 days rolling

7. Your Rights (UK GDPR / EU GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing in certain circumstances
  • Data portability — receive your data in a machine-readable format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are based in the UK.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. International Transfers

Our servers are located within the UK/EEA. If we transfer data outside this region, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date. Continued use of the Site after changes constitutes acceptance.

11. Contact

The Kids Club Collection Ltd
United Kingdom
Email: [email protected]