Privacy notice.

How Little Lido handles your data — briefly, and in plain English.

PLACEHOLDER — this notice is pending review by our solicitor. It describes our practices accurately but is not yet the final legal text.

What we collect

To take a booking we collect the minimum we need: your mobile number (verified by a one-time code), your name and your email address. No account is created and no password is stored. Payment card details go directly to Stripe, our payment processor — we never see or store them.

Instructors who apply for verification additionally provide their qualification, DBS and insurance documents. These are stored privately and viewed only by our operations team.

Children's data

We deliberately minimise children's data. For swimming-lesson bookings we ask for at most a child's first name and age band (for example “5–8”) — and both are optional. We never collect a child's surname, date of birth, school, photos or any other details.

WhatsApp and messages

We send booking confirmations, reminders and changes over WhatsApp (processed by Meta and our WhatsApp business service provider) with email as a backup record. When you message our chat-to-book line, that conversation is processed through WhatsApp under Meta's own terms. We keep a log of the notifications we send you so we can resolve disputes.

How long we keep it

Booking records (including your hire agreement) are kept for 6 years to meet legal and accounting obligations, then deleted. Incident reports are kept for as long as a claim could arise. One-time codes expire within minutes and slot holds within 10 minutes. Instructor documents are deleted when no longer needed for verification.

Cookies

We use only the cookies the site needs to function (for our operations team's sign-in, and Stripe's fraud prevention during payment). No advertising or cross-site tracking cookies.

Your rights and contact

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it — email us at hello@littlelido.co.uk and we'll act promptly. You also have the right to complain to the ICO, the UK data protection regulator.