How we collect, use and protect your personal information. Written in plain English, because legal documents shouldn’t need a translator.
ActiveED Multi-Sports is a trading name of Ryan Mulhere, a sole trader based in Kent. For the purposes of UK GDPR and the Data Protection Act 2018, Ryan Mulhere is the data controller responsible for your personal information.
We are registered with the Information Commissioner’s Office (ICO). Our registration number is CSN6603905. You can verify this at ico.org.uk.
Contact for data and privacy enquiries:
Email: ActiveEDMS@outlook.com
Phone / WhatsApp: 07356 238790
This policy applies to personal information we collect about you and your child when you use this website, book a session, contact us, or attend an ActiveED session. It explains what we collect, why, how we use it, who we share it with, and your rights over it.
Every enrolled child has a personal milestone journey page, accessible via a unique private link sent to you by your coach. This page is hosted securely and stores:
This data is stored securely in our database (Supabase — see section 5). The journey page is accessible only to someone who has the unique link. We do not publish or index these pages publicly. Access is managed by your coach and is not shared outside ActiveED.
Payments are processed by our booking system Bookwhen and their payment partner Stripe. We do not see, store, or have access to your full card details. We receive only confirmation that payment has been taken and the last four digits of the card for reconciliation.
Our website does not currently use Google Analytics, Meta Pixel, or any tracking analytics. We do not currently use cookies for analytics or advertising. Our hosting provider may collect basic server logs (IP address, browser type, pages visited) for security and performance reasons. These logs are not used to identify individual visitors.
If we add analytics or tracking in future, this policy will be updated and you will be asked for consent through a cookie notice before any tracking begins.
When you email us, contact us via WhatsApp, or send us a message through any other channel, we keep a record of that correspondence so we can respond and reference it later if needed. WhatsApp messages are processed by Meta Platforms Ireland Ltd as part of the WhatsApp service.
We only collect information we genuinely need. Here’s what we use each type for, and the legal basis under UK GDPR:
We use your contact details and your child’s information to manage your booking, communicate with you about sessions, and ensure your child is safe and properly cared for during sessions. Legal basis: performance of a contract.
We store your child’s name, programme, and milestone progress in order to operate their personal journey page, award badges, and generate printable certificates. Legal basis: performance of a contract.
We use medical, allergy, SEND and emergency contact information to keep your child safe. Legal basis: performance of a contract, and where the information is sensitive (medical or SEND), we rely on your explicit consent given at the point of booking. Special category data: health and SEND information are special category data under UK GDPR. We collect this only with your consent and only because it is necessary to keep your child safe.
We use the information you give us when you contact us to reply and follow up. Legal basis: legitimate interest in responding to potential or existing customers.
We use payment information to take payment for sessions and to keep records required by HMRC. Legal basis: performance of a contract, and legal obligation (tax records).
We will email you about session changes, cancellations, venue information and similar. Legal basis: performance of a contract.
Photography at ActiveED sessions is entirely optional. We will only take photographs of your child, or include them in any content we publish, if you have given us explicit consent at the point of booking.
If you consent, photographs may be used for the following purposes:
We will not caption or identify your child by name in any public post. We will not use photographs for paid advertising without asking you separately. Group and activity photographs will be preferred over individual close-up shots wherever possible.
Legal basis: your consent. You can withdraw consent at any time by emailing ActiveEDMS@outlook.com. Withdrawal will not affect photographs already published, but we will remove any we are able to upon request.
We do not sell your information to anyone. Ever. We share it only with the following parties, and only where necessary:
We take the security of your information seriously. Booking and payment data is held by Bookwhen and Stripe, both of which use industry-standard encryption. Journey page and milestone data is stored in Supabase, which uses encryption at rest and in transit. Email is held with Microsoft. WhatsApp messages are end-to-end encrypted by Meta; we do not use WhatsApp to send or request sensitive personal data such as medical information. We do not store medical or SEND information in spreadsheets, on personal phones, or in any unsecured location. Access to your child’s information is limited to the people who genuinely need it to deliver sessions safely.
Journey pages are accessible only via a unique private link. These links are not published publicly and are not indexed by search engines.
Under UK GDPR you have the following rights over your personal information:
To exercise any of these rights, email ActiveEDMS@outlook.com. We will respond within one month.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. If you’re still not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Our sessions are for children aged 18 months to 7 years, and we collect information about children only with parental consent and through their parent or guardian. Children do not interact with our booking system or website directly. Journey pages are sent to parents and guardians only.
If we change this policy, the “last updated” date at the top will change. For significant changes (for example, new types of data collection or new third parties), we will email existing customers to let them know.
For any question about this policy or your personal information:
Email: ActiveEDMS@outlook.com
Phone / WhatsApp: 07356 238790
Post: ActiveED Multi-Sports
ICO Registration: CSN6603905