Privacy Policy

Last updated: 8th January 2026

We take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website to book classes, courses, or parties, or when you sign up to our newsletter.

1. Who We Are

Little Forest School (“we”, “us”, “our”) is a sole trader forest school business operating in the United Kingdom. We provide outdoor learning sessions for children, including weekly sessions, school sessions, birthday parties, and holiday workshops.

For the purposes of data protection law, we are the data controller responsible for the personal data you provide to us.

If you have any questions about this privacy policy or how we use your personal data, please contact us at:
Email: info@littleforestschool.com

2. The Personal Data We Collect

We may collect and process the following personal data:

For parents, carers, and adult clients:

  • Name

  • Email address

  • Phone number

  • Booking and payment details

  • Mailing list preferences

For children attending sessions:

  • Child’s first name

  • Age or date of birth

  • Medical, allergy, or additional needs information (where provided)

  • Emergency contact details

We only collect information about children that is necessary to ensure their safety, wellbeing, and participation in our sessions.

3. How We Collect Personal Data

We collect personal data when you:

  • Book a session, workshop, or event via our website

  • Complete booking or consent forms

  • Contact us by email or other means

  • Sign up to our mailing list

  • Provide information related to a child attending our sessions

Bookings and payments are handled through our website using Squarespace and Acuity Scheduling.

4. How We Use Personal Data

We use personal data to:

  • Manage bookings, sessions, and events

  • Communicate important information about sessions or changes

  • Ensure the safety and wellbeing of children attending our activities

  • Process payments and issue confirmations

  • Send newsletters or updates where you have consented

  • Meet legal, safeguarding, insurance, and record-keeping obligations

5. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process personal data on the following lawful bases:

  • Consent – for mailing list sign-ups and optional information

  • Contract – to provide booked sessions and services

  • Legal obligation – including safeguarding, health and safety, and financial record-keeping

  • Vital interests – where necessary to protect a child’s health or safety

  • Legitimate interests – to run and manage our forest school business appropriately

6. Children’s Data

We take children’s privacy seriously.

Personal data relating to children is provided by a parent, carer, or school and is used only for the purposes of delivering safe and appropriate forest school sessions. We do not use children’s data for marketing purposes.

We only retain children’s data for as long as necessary to meet safeguarding, insurance, and legal requirements.

7. Mailing List

We operate a mailing list to share updates, news, and information about our sessions and events.

  • Sign-up is optional and consent-based

  • You can unsubscribe at any time using the link in our emails or by contacting us at info@emailaddress.com

  • We do not share mailing list data with third parties for marketing purposes

8. Payments and Third-Party Services

Payments and bookings are processed securely via Squarespace and Acuity Scheduling. We do not store full payment card details.

These third-party providers process personal data in accordance with their own privacy policies and UK GDPR requirements.

9. Data Storage and Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure.

Personal data is stored securely and only accessed where necessary for legitimate business purposes.

10. Data Retention

We retain personal data only for as long as necessary, including:

  • Booking and financial records (for tax and accounting purposes)

  • Safeguarding and insurance-related records

  • Mailing list data until consent is withdrawn

When data is no longer required, it is securely deleted.

11. Sharing Personal Data

We do not sell personal data.

We may share personal data only where necessary, such as with:

  • Payment and booking service providers

  • Professional advisers (e.g. accountants)

  • Authorities where legally required (e.g. safeguarding concerns)

12. Cookies

Our website does not use analytics cookies.

Squarespace may use essential cookies necessary for website functionality, such as booking and payment processes. You can control cookies through your browser settings.

13. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time (where applicable)

To exercise your rights, please contact us at info@emailaddress.com.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

15. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have questions or want to exercise your rights, you can contact us:

Email: info@littleforestschool.com
Address: Wilderness Wood, Main Road, Hadlow Down, TN22 4HJ

If you are unhappy with how we handle your data, you also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.