Privacy Policy

Sensory Play Studio ("we", "us", "our") is operated by Sensory Play Studio, located at Burgagery-Lands West, Davis Road, Clonmel, Co. Tipperary, E91 Y312, Ireland.

We are the data controller for the personal information you provide to us when booking classes, purchasing products, or otherwise interacting with our website and services.

You can contact us about data protection at: hello@sensoryplaystudio.ie.

We may collect the following categories of personal information:

• Booking details: your name, email address, phone number, and the class or event you have booked.
• Child information: your child's name, date of birth or age, and any relevant medical or accessibility needs you choose to share with us.
• Payment information: billing name, address, and transaction records. Card details are processed directly by Stripe — we do not store raw card numbers.
• Communications: emails, enquiry forms, or messages you send us.
• Newsletter subscriptions: your email address, first name, and subscription preferences. Newsletter signups use a double opt-in process — you must click a confirmation link in your email before you are added to our mailing list. The lawful basis for this processing is consent.
• Website usage data: IP address, browser type, pages visited, and time on site — collected via cookies where you have given consent. See our Cookie Policy.

We use your personal information to:

• Process and manage your bookings and send booking confirmations and reminders.
• Process payments and issue refunds where applicable.
• Communicate with you about changes to classes, events, or policies.
• Send you marketing emails only if you have opted in. You can unsubscribe at any time.
• Improve our website and services using anonymised analytics data.
• Comply with our legal obligations.

We collect the minimum amount of information about children necessary to deliver our services safely. We do not use children's data for marketing purposes, and we do not share it with third parties other than as described in the "Who we share information with" section below.

We process your personal data under the following lawful bases set out in the EU GDPR (Regulation 2016/679) and the Irish Data Protection Act 2018:

• Contract: to perform a contract with you (e.g. processing your booking).
• Consent: where you have given clear consent (e.g. marketing emails, analytics cookies).
• Legitimate interests: for internal administration, service improvement, and fraud prevention, where these interests are not overridden by your rights.
• Legal obligation: to comply with applicable laws and regulations.

We may share your information with the following third parties who help us deliver our services:

• Stripe, Inc.: payment processing. Stripe's privacy policy is available at stripe.com/privacy.
• Google (Gmail API): to send transactional emails such as booking confirmations, enquiry responses, and gift card receipts.
• Beehiiv, Inc.: our newsletter platform, used to manage marketing email subscriptions, send newsletters, and process double opt-in confirmation. Beehiiv's privacy policy is available at beehiiv.com/privacy. Beehiiv acts as a data processor under a standard Data Processing Agreement.
• Website platform: to manage class schedules and bookings.

All third-party processors are subject to data processing agreements and are required to protect your data in accordance with GDPR. We do not sell your personal data.

We retain personal data only for as long as necessary:

• Booking records: 7 years (to comply with Irish tax and accounting obligations).
• Marketing consent records: until you withdraw consent.
• Website analytics: up to 14 months.
• Enquiry / contact records: 2 years from last contact.

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict or object to our processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where consent is the lawful basis.

To exercise any of these rights, please contact us at hello@sensoryplaystudio.ie. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland.

Some of our third-party service providers are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate protections are in place (e.g. EU Standard Contractual Clauses or an adequacy decision). Please contact us if you would like more information about the specific safeguards we use.

Our website is not directed at children. We do not knowingly collect personal data from children visiting our website independently. All child-related data we hold is provided by a parent or guardian in the context of a booking. Please see the "How we protect children's data" section above.

We use cookies on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or, where appropriate, by email. Please check this page periodically for updates. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: hello@sensoryplaystudio.ie
• Post: Sensory Play Studio, Burgagery-Lands West, Davis Road, Clonmel, Co. Tipperary, E91 Y312