Your data
Privacy Policy
Last updated: June 2026
Hebburn Day Care is committed to protecting your privacy and handling your personal data responsibly under the UK GDPR and the Data Protection Act 2018. This policy explains what we collect when you book with us online, why, who we share it with, and your rights.
1. Who we are (data controller)
Hebburn Day Care is the data controller for the information you give us. Address: Hebburn House, Rother Close, Hebburn NE31 2SP. Email: info@hebburndaycare.co.uk. Our booking system is operated on our behalf by Sant Limited (trading as Caralune), who act as our data processor under a written contract.
2. What we collect
When you make a booking we may collect: your name, email address, phone number, booking details, and any information you choose to share about access, mobility, medical or care needs — including where you book on behalf of someone you care for. Payment is handled by Stripe; we never see or store your card details.
3. Special category (health) data
Information about health, disability or care needs is “special category” data under UK GDPR (Article 9). We collect it only where you choose to provide it, and use it solely to deliver your session safely and appropriately. Our lawful basis is the provision of health and social care (Article 9(2)(h)) and/or your explicit consent. It is seen only by authorised care staff and is never used for marketing.
4. Why we use your data, and our lawful basis
- Taking and managing your booking and payment — performance of a contract.
- Keeping care and safeguarding records — legal obligation / provision of social care.
- Verifying your phone and email and sending confirmations — contract / legitimate interests.
- Marketing (open days, news) — only with your consent, which you can withdraw at any time. We do not market to you by default.
5. Who we share it with (our processors)
We use trusted providers who process data on our behalf under contract and are required to protect it:
- Stripe — secure card payments.
- Twilio — sending one-time verification codes by SMS.
- Brevo — sending booking and account emails.
- Sant Limited (Caralune), Supabase & Vercel — running, hosting and storing the booking platform and your records (UK/EU region).
- Website analytics — to understand and improve our website.
We do not sell your personal data.
6. How long we keep it
We keep your data only as long as necessary for the purposes above and to meet our legal obligations as a care provider. Care and safeguarding records may be retained for statutory periods.
7. Your rights
Under UK data protection law you can ask to access, correct, delete (where the law allows), or restrict/object to our use of your data, and withdraw consent at any time. Contact info@hebburndaycare.co.uk. You also have the right to complain to the Information Commissioner's Office.
8. Cookies
Our website and booking form use cookies that are necessary to make booking and sign-in work, and — with your consent — analytics cookies that help us improve. You can manage your choices via our cookie banner.
9. Changes to this policy
We may update this policy from time to time. The current version is always on this page with its revision date.