Tarlatan Limited (“Tarlatan”, “we”, “us”, “our”) is committed to protecting the privacy of the children and families we work with. This policy explains what personal data we collect, why, how we use it, and your rights.
We are the data controller for the personal data described below. ICO Registration Number: ZC204153 Registered address: 50 Bromells Road, London SW4 0BG Contact: ben@tarlatan.co.uk
Because we collect allergy and medical information to keep children safe — particularly during cooking sessions — this counts as special category data under UK GDPR. We only collect what’s necessary, only use it to inform session safety and staff planning, and only share it with staff members directly supervising your child. We will always ask for your explicit consent before collecting this information.
We keep personal data only for as long as necessary for the purposes it was collected, guided by the following criteria:
Booking, attendance, and safeguarding records: retained for as long as required to meet our insurance, legal, and safeguarding obligations — including the time limits within which a claim could reasonably be brought against us.
Medical and allergy information: retained only while your child is actively enrolled, plus any additional period required by our insurance policy or safeguarding guidance.
Marketing email data: retained until you unsubscribe or ask us to delete it.
Photographs/video: retained until consent is withdrawn, or in line with the above criteria if no withdrawal request is made.
We may take photographs or video during sessions to share on our website or social media (Instagram, Facebook). We will only do this with your explicit, separate consent, collected at the point of booking or in person. You can withdraw this consent at any time by contacting us — we’ll remove any existing published images featuring your child as soon as reasonably possible.
Much of the data we hold relates to children. We take extra care to collect only what’s necessary, restrict access to staff who need it for safeguarding or session-delivery purposes, and never use children’s data for marketing purposes.
• Access the personal data we hold about you or your child
• Correct inaccurate data
• Request deletion of your data (subject to our legal obligations, e.g. safeguarding records)
• Withdraw consent at any time (for marketing or photo/video use)
• Object to or restrict certain processing
• Data portability, where applicable
To exercise any of these rights, contact us at ben@tarlatan.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have mishandled your data.
We may update this policy from time to time. The “last updated” date at the top will reflect the most recent revision. We encourage you to review it periodically.
