Our schedule

Privacy Policy

All Abilities Active Privacy Policy

Last updated 20/02/2026

All Abilities Active is committed to protecting your personal information and handling it responsibly and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.Who We Are

All Abilities Active provides inclusive sports and activity sessions for children. For the purposes of data protection law, All Abilities Active acts as the Data Controller in relation to the personal information you provide to us.

Contact details:

Email: hello@allabilitiesactive.co.uk

If you have any questions about this Privacy Policy or how we handle your data, you can contact us using the details above.

2.The Information We Collect

We collect only the information necessary to deliver our services safely and effectively.

Parent or Carer Information may include:

Name

Email address

Telephone number

Home address

Emergency contact details

Marketing preferences

Child Information may include:

Name

Date of birth

Gender

Home address

Medical information, including diagnoses, allergies and additional needs

Emergency contact details

We may also collect records of attendance, communication history and payment information where relevant to bookings and memberships.

3.How We Collect Your Data

We collect personal data when you:

Complete booking or registration forms

Provide information during sessions or through ongoing communication

Subscribe to marketing communications

In some cases, data may also be provided by you in relation to safeguarding or medical needs to ensure safe participation.

4.How We Use Your Information

We use personal information for the following purposes:

To process bookings and manage memberships

To deliver sessions and ensure the safety and wellbeing of your child

To communicate with you about sessions, schedule changes or important updates

To respond to enquiries or requests

To send marketing communications where you have given consent

To comply with safeguarding, legal and regulatory obligations

To manage payments and maintain business records

We do not sell, rent or trade your personal data to third parties for marketing purposes.

5.Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract – where processing is necessary to deliver sessions and memberships you have booked.

Legal obligation – where processing is necessary to comply with safeguarding, health and safety or other legal requirements.

Legitimate interests – where processing is necessary for the effective management and improvement of our services, provided these interests do not override your rights and freedoms.

Consent – where you have given clear consent, including for marketing communications and photography.

You have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

6.Special Category Data and Medical Information

Medical information and details relating to additional needs are treated as special category data under UK GDPR. We collect and process this information solely to ensure your child’s safety, wellbeing and appropriate support during sessions. This information is handled with additional care, confidentiality and security, and access is restricted to those who need it for safeguarding or operational purposes.

7.Data Storage, Security and Retention

Personal data is stored securely using ClassForKids secure systems and password protected devices. We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

We retain personal data only for as long as necessary for safeguarding, legal, insurance and operational purposes. Retention periods are determined based on the nature of the data and applicable legal requirements. When data is no longer required, it is securely deleted or anonymised.

8.Photography and Media

Photographs and videos may be taken during sessions for promotional, marketing or training purposes. Images will only be used where appropriate consent has been provided. You may withdraw consent at any time by contacting us in writing. Withdrawal will apply to future use of images.

9.Your Rights

Under UK GDPR, you have the right to:

Request access to the personal data we hold about you

Request correction of inaccurate or incomplete data

Request erasure of your data where legally permissible

Request restriction of processing

Object to processing based on legitimate interests

Withdraw consent where processing is based on consent

Request data portability where applicable

Lodge a complaint with the Information Commissioner’s Office

The Information Commissioner’s Office can be contacted via its website at https://ico.org.uk.

10.Third Party Processors

We use ClassForKids as our booking and registration system provider. They act as a data processor on our behalf and process data in accordance with UK GDPR and appropriate data protection standards.

We may share information with third parties only where necessary for safeguarding, legal compliance, emergency response, insurance or regulatory requirements. We do not share personal data for unrelated commercial purposes.

11.International Transfers

Where any third party provider processes data outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK GDPR to protect your information.

12.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation or our practices. The most current version will always be available on request or via our website. Continued use of our services after updates indicates acceptance of the revised policy.