Policies
The small print, kept small.
Bookings and cancellations
Last updated 1 March 2026. This applies to play sessions, events, private hires and birthday parties, whether you book online, by phone, by email or in person.
Booking confirmation
A booking is confirmed once payment has cleared and you receive a confirmation email. The person who makes the booking is responsible for sharing our venue rules with their group.
Play sessions and events
Cancel more than 48 hours before the session for a full refund, or a move to another available session within 30 days. You can cancel online from your booking page. Within 48 hours tickets are non-refundable, although we will try to move you to another session where space allows. No-shows and arrivals more than 15 minutes late are non-refundable.
Birthday parties and private hire
More than 14 days’ notice: full refund or a free reschedule. Seven to 14 days’ notice: 50% refund, or one reschedule within 60 days, subject to availability. Less than seven days’ notice: non-refundable, because staff time, catering and decorations have already been committed. If we manage to re-sell the slot we can offer a goodwill credit of 50%.
Illness and emergencies
If the birthday child or a booked guest becomes ill, contact us as soon as possible. At our discretion we may offer a one-time reschedule or credit with medical confirmation or reasonable proof.
Weather or venue issues
If we have to close because of severe weather, maintenance or other safety reasons, you choose between a full refund and another date.
Food and add-ons
Food orders and party extras cancelled less than 72 hours before the event are non-refundable, because supplies will already have been bought.
Gift cards and play passes
Gift vouchers and passes are non-refundable but stay valid until the printed expiry date. Lost vouchers cannot be replaced.
How to ask for a refund
Email littlelegendsph@outlook.com with your booking reference, the name on the booking, the date and time, and the reason. Approved refunds go back to the original payment method within five to seven working days. Please contact us before raising a dispute with your bank; we will always try to sort things out quickly and fairly.
Play rules
Socks on for everyone in the play areas. Children must be supervised by a responsible adult at all times, and follow the safety rules, signage and staff instructions. Every child needs a signed disclaimer on file. Please tell us straight away about any accident so we can help and log it.
Privacy policy
Last updated 29 September 2026.
1. Introduction
This privacy policy explains how Little Legends Play Hub collects, uses and protects personal information when you browse www.littlelegendsplayhub.com, book a play session, party or event, sign our disclaimer, or visit our indoor play centre in Barry. We follow the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
2. Who we are
Little Legends Playhub Ltd, company number 16888813, trading as Little Legends Play Hub. We are the “controller” of your personal information. Registered office: 30 The Parade, Barry, CF62 6SE. Play centre: Esplanade Building, 3-10 Friars Road, Barry Island, CF62 5TJ. Email littlelegendsph@outlook.com, telephone 07943 825499.
3. The information we collect
- Bookings: your name, email and mobile number; the session, party or event you book; the number of children and adults; for parties, the birthday child’s name and age, the number of guests, any add-ons, your food choices and anything you tell us about allergies; and the booking reference, amounts and payment status.
- Payments: card payments are taken by Square on its own secure pages. We never see or store your card details; we keep Square’s order and payment reference so we can match and refund payments.
- The disclaimer: the parent or guardian’s name, email and mobile; each child’s name and date of birth; an emergency contact if you give one; any allergies or medical information you choose to share; your signature (drawn and typed); the date and time you signed; and the device and connection details of the signing (IP address and browser), which help show the signature is genuine.
- Your choices: whether you agree to photos of your children being used, and whether you want our emails.
- At the door: when you were checked in and which member of our team did it.
- Messages: what you send us through the contact form, by email, social media or phone.
- Our mailing list: your email address, how you joined and when you confirmed.
- Website use: your IP address and basic technical details, kept briefly to protect the booking system from abuse (see section 8), and, only if you accept analytics cookies, how you use the site (see section 10).
4. Children’s information
All bookings and disclaimers are made by a parent or guardian. We only collect the information about children that we need to keep them safe and run their visit or party. Health and allergy information is only recorded if you choose to give it, and we use it only so our team can look after your child. You can ask us to update or remove your children’s details at any time.
5. How we use your information, and why we are allowed to
| What we do | Our lawful basis |
|---|---|
| Take and manage bookings, payments, refunds and party arrangements, and send your confirmations and booking emails | Contract: we need it to provide what you booked |
| Keep signed disclaimers and check families in at the door | Legitimate interests: running a safe play centre and keeping a record that the rules and risks were accepted |
| Hold allergy and medical information | Your explicit consent, given on the disclaimer or booking form. You can withdraw it by asking us to delete it. |
| Use photos of your children on our website and social media | Your consent, which you can withdraw at any time |
| Send news and offers by email | Your consent, confirmed by email. Every email has an unsubscribe link. |
| Answer enquiries and complaints | Legitimate interests |
| Keep accounting records and record accidents and incidents | Legal obligation |
| Protect the website and booking system from fraud and abuse, and log which team member made each change | Legitimate interests: keeping your information and our bookings secure |
| Understand how the website is used | Your consent, through the cookie banner |
We never sell your information, and we do not make decisions about you by automated means.
6. Who we share it with
Only with the companies that help us run Little Legends, each under a contract that allows them to use your information only for the service they provide to us:
| Company | What they do for us | Where |
|---|---|---|
| Vercel | Hosts our website | Servers in London (US company) |
| Supabase | Hosts the database that holds bookings and disclaimers | Servers in London (US company) |
| Square | Takes card payments and refunds | UK, Europe and US |
| Resend | Sends our booking emails and newsletters | Servers in Ireland (US company) |
| Microsoft | Our team email inbox (Outlook) | UK, Europe and US |
| Website analytics, only if you accept analytics cookies | Europe and US | |
| Wix | Our previous website and booking system, until we close that account | Europe, US and Israel |
| DAX Studio | Builds and looks after our website, with access only to support and secure it | UK |
We may also share information where the law requires it, for example with the police or our insurers after an incident.
7. International transfers
Your booking and disclaimer information is stored in London. Some of the companies above are based in the United States, or may reach your information from there, for example for technical support. When that happens we rely on the protections UK law requires: the UK Extension to the EU-US Data Privacy Framework where the company is certified, or the UK International Data Transfer Agreement or Addendum.
8. How long we keep it
| Information | How long |
|---|---|
| Booking, payment and refund records | Seven years, for accounting and legal reasons |
| Signed disclaimers, including signatures and any health information | Valid for 12 months. Kept until the youngest child on the form turns 21, as a record in case of a claim |
| Accident and incident records | For the period required by law |
| Enquiries and messages | Two years |
| Mailing list | Until you unsubscribe. Sign-ups that are never confirmed are deleted after 14 days. |
| Contacts brought over from our old Wix website | Deleted 12 months after the new website goes live, unless you book with us again |
| Records of which team member made each change | Two years |
| Connection records used to protect the booking system | 24 hours |
| Website analytics (only with your consent) | 14 months |
When we no longer need information, we delete it or remove anything that identifies you.
9. Keeping it safe
Our website and database only accept encrypted connections, and the database only accepts our website’s own login; its public access is switched off. Every member of our team has their own login, sees only what their role needs, and every change is recorded against their name. Card payments are handled entirely by Square.
10. Cookies
We use one essential cookie, which keeps our team signed in to the booking system. It is only set for our staff. We remember your cookie choice in your browser so we don’t ask again. We only load Google Analytics after you accept on the cookie banner; if you say no, nothing is loaded. You can change your mind with the “Cookie settings” link at the bottom of every page.
11. Your rights
You can ask for a copy of the information we hold about you and your children, ask us to correct it or delete it, restrict or object to how we use it, and ask for it in a format you can take elsewhere. Where we rely on your consent (health information, photos, emails, analytics) you can withdraw it at any time. We reply within one month. If you are unhappy with how we have handled your information, please contact us first; you can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
12. Contact
Email littlelegendsph@outlook.com, call 07943 825499, or write to Data Protection, Little Legends Playhub Ltd, Esplanade Building, 3-10 Friars Road, Barry Island, CF62 5TJ.
13. Changes to this policy
We will update this policy when the law or our services change. The newest version will always be on this page, with the date it was last updated at the top.
