Privacy Notice

Last updated: 21st August 2026

Little Gannets Nutrition ("Little Gannets", "we", "us" or "our") respects your privacy and is committed to protecting the personal information we hold about you and, where relevant, your child.

This Privacy Notice explains what information we collect, why we collect it, how we use it, who we may share it with, how we protect it and your rights in relation to your information.

It applies to all Little Gannets services, including:

Baby Brunch Clubs;
nutrition advice and consultations;
weaning support;
picky eating support;
general healthy eating advice for families;
Little Gannets Kitchen Club and virtual cook-alongs;
cooking clubs and food education sessions delivered in schools;
cooking clubs delivered in nurseries and pre-schools;
cooking clubs delivered in community centres and other community settings; and
other family nutrition, food education and cooking activities provided by Little Gannets.

1. Who is responsible for your information?

The organisation responsible for your personal information is:

Little Gannets LTD

Business address:

Little Gannets Ltd.
61 Bridge Street,
Kington,
HR5 3DJ

Email:
hello@littlegannets.co.uk

Website:
www.littlegannets.co.uk

For data protection purposes, Little Gannets is generally the data controller for personal information collected directly from customers and participants in our services.

Where Little Gannets delivers a service on behalf of a school, nursery, pre-school, community centre or other organisation, the organisation may sometimes determine how personal information is collected and used. In those circumstances, the organisation may be the data controller and Little Gannets may act as a data processor or another party involved in delivering the service.

Where this applies, we will work with the relevant organisation to ensure personal information is handled appropriately.

2. What information do we collect?

The information we collect depends on which Little Gannets service you use.

Information about parents, carers and adult customers

This may include:

name;
preferred name;
email address;
telephone number;
address where necessary;
billing and payment information;
booking information;
records of correspondence and communications;
dietary requirements;
allergy and intolerance information;
relevant health information;
information needed to provide nutrition advice or support; and
feedback about our services.

Information about children

Where relevant to the service, we may collect limited information about a child, such as:

name;
age or date of birth;
relevant dietary requirements;
food allergies or intolerances;
medical conditions relevant to food, eating or participation;
relevant developmental or feeding information;
information about foods a child currently eats or avoids;
information needed to provide appropriate weaning, picky eating or nutrition support; and
information needed to keep a child safe while participating in a cooking or food-related activity.

We will only collect information that is reasonably necessary for the service being provided.

We do not generally need detailed medical histories.

3. Information collected for Baby Brunch Clubs

Baby Brunch Clubs involve the provision of food to babies and young children.

To help us provide food safely, we may ask parents or carers for information about:

food allergies;
food intolerances;
foods already introduced;
dietary requirements;
relevant medical conditions; and
other information that may affect what food can safely be provided.

This information is particularly important because food allergies and certain medical conditions may affect the safety of the food we provide.

Parents and carers are responsible for providing accurate and up-to-date information about their child's dietary requirements and allergies.

We will use the information provided to help us plan and provide appropriate food and to reduce foreseeable risks.

Little Gannets cannot guarantee an allergen-free environment. Parents and carers remain responsible for supervising their child and for making the final decision about whether food is suitable for their child.

4. Nutrition advice, weaning and picky eating support

When providing nutrition advice, we may ask for information about the family, parent/carer or child that is relevant to the support being provided.

This may include:

age;
dietary preferences;
typical eating patterns;
foods eaten or avoided;
allergies and intolerances;
relevant medical conditions;
feeding difficulties;
information about weaning;
information about picky or selective eating; and
other information relevant to providing appropriate nutrition advice.

We will only ask for information that is reasonably necessary to provide the service.

Our nutrition services provide general nutrition education and practical support. They are not intended to replace medical diagnosis, treatment or specialist medical advice.

Where appropriate, we may recommend that a parent or carer seeks advice from their GP, health visitor, paediatrician, registered dietitian or another appropriately qualified healthcare professional.

5. Cooking clubs in schools, nurseries, pre-schools and community settings

Little Gannets may deliver cooking clubs or food education sessions on behalf of schools, nurseries, pre-schools, community centres or other organisations.

Depending on the arrangement, we may receive information about participants directly from parents/carers or from the organisation hosting the session.

This information may include:

child's name;
age or year group;
relevant dietary requirements;
food allergies and intolerances;
relevant medical conditions;
information about additional needs where relevant to safe participation;
emergency contact information where required; and
information needed to safely participate in the activity.

We use this information to:

provide suitable food or ingredients;
make reasonable adjustments where appropriate;
manage foreseeable risks;
support safe participation;
communicate with parents, carers or the organisation hosting the activity; and
meet our contractual, legal and safeguarding responsibilities.

Where a school, nursery, pre-school or community organisation is responsible for collecting and determining how participant information is used, we will follow the agreed arrangements with that organisation.

6. Health information and special category data

Information about a person's health is special category personal data under UK GDPR and requires additional protection.

This may include information about:

medical conditions;
food allergies;
disabilities;
dietary restrictions resulting from a medical condition;
feeding or eating difficulties;
relevant physical or mental health information; and
other information concerning health that you choose to provide.

We will only collect health information where it is reasonably necessary for the service being provided.

Depending on the circumstances, we may process this information where necessary for the provision of the service, to protect health and safety, where required by law, or where we have obtained appropriate explicit consent.

Where we rely on explicit consent, this will be requested separately and clearly from agreement to our general Terms & Conditions.

You may withdraw consent where consent is the lawful basis for processing.

However, withdrawing consent may mean that we cannot safely provide certain services or make appropriate adaptations.

Where this is the case, we will explain this to you.

7. Children's information

We recognise that children's personal information deserves particular care.

We will collect only information that is reasonably necessary for the service being provided.

Where appropriate, we will obtain information and permissions from a parent or person with parental responsibility.

Where a school, nursery, pre-school or other organisation arranges a service, we may receive relevant information from that organisation in accordance with the arrangements agreed with them.

We will not use children's information for unrelated purposes.

We will not use children's information for marketing without an appropriate lawful basis and, where required, appropriate parental permission.

We will take particular care when processing information relating to children and will use age-appropriate and proportionate approaches where children themselves provide information.

8. Photographs and video

From time to time, photographs or video may be taken during Little Gannets activities for purposes such as:

documenting activities;
providing information about our services;
promoting Little Gannets on our website or social media; or
creating educational or promotional materials.

We will only use identifiable photographs or video of children for promotional purposes where we have obtained the appropriate permission.

Parents and carers will be told what the images will be used for.

We will not use children's images for unrelated purposes.

Where photography or filming is arranged by a school, nursery, pre-school or other organisation, that organisation may have its own photography and media policy, which will apply alongside this Privacy Notice.

9. Kitchen Club and online session recordings

Little Gannets Kitchen Club sessions are normally delivered online using Microsoft Teams and are normally recorded.

The purpose of recording is to allow customers who have purchased the relevant session to access the cook-along afterwards.

A recording may contain:

the Little Gannets host's image and voice;
recipes and cooking demonstrations;
participants' voices where their microphones are switched on;
participants' images where their cameras are switched on;
participants' display names; and
comments or questions made during the session.

Participants can protect their privacy by:

switching off their camera;
keeping their microphone muted;
using a preferred name or first name rather than their full name; and
avoiding sharing personal or sensitive information during the session.

Recordings will not be publicly published by Little Gannets.

Access to recordings will be restricted to customers who have purchased the relevant session or package.

Participants must not share recordings or access links with people who have not purchased the relevant session.

Recordings will normally be retained for one calendar month after the relevant session and then deleted unless there is a legitimate reason to retain them for longer.

10. Why do we use your information?

We may use personal information to:

process bookings;
provide services;
provide nutrition advice;
provide suitable food and recipes;
identify and manage dietary requirements and allergies;
make appropriate adaptations to activities;
support safe participation;
arrange consultations;
provide Kitchen Club recordings and resources;
communicate about bookings and sessions;
process payments;
respond to enquiries;
manage complaints;
maintain appropriate business records;
comply with legal and regulatory obligations;
protect the safety and wellbeing of participants;
improve our services; and
protect our business against fraud or misuse.

11. Our lawful bases for processing personal information

UK GDPR requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide a service you have purchased.

For example, we need your contact details to arrange your appointment or Kitchen Club booking.

Legal obligation

Where we need to process information to comply with a legal obligation, such as accounting, tax or legal requirements.

Legitimate interests

Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

This may include managing enquiries, maintaining appropriate business records, improving our services and protecting our business.

Consent

Where consent is the appropriate lawful basis, we will ask for it clearly and separately.

You can withdraw consent at any time where we rely on consent as our lawful basis.

12. Special category information

Where we process health information or other special category information, we will also rely on an appropriate condition under Article 9 UK GDPR.

Depending on the circumstances, this may include:

explicit consent;
processing necessary for the provision of health-related support where legally applicable;
substantial public interest where a specific legal condition applies;
protection of vital interests in appropriate circumstances; or
another lawful Article 9 condition that applies to the particular processing.

We will document the appropriate basis where required.

We will only collect and use special category information where it is necessary and proportionate for the service being provided.

13. Information provided by schools, nurseries and other organisations

Where a school, nursery, pre-school, community centre or other organisation arranges a service, we may receive participant information from that organisation.

We will use the information only for the purposes agreed with the organisation and in accordance with applicable data protection law.

Where Little Gannets is acting on behalf of an organisation as a data processor, we will process personal information in accordance with the organisation's instructions and any applicable data processing agreement.

14. Who do we share information with?

We do not sell personal information.

We may share information with third parties where necessary to provide our services, meet legal obligations or operate our business.

These may include:

Schools, nurseries, pre-schools and community organisations

Where necessary to coordinate and safely deliver a session or activity.

Microsoft

We use Microsoft Teams and related Microsoft services for online sessions and recordings.

Payment providers

We may use banks or third-party payment providers to process payments.

Professional advisers

Where necessary, we may share information with accountants, insurers, solicitors or other professional advisers.

Healthcare or emergency professionals

Where necessary to protect someone's health or safety, or where required or permitted by law.

Legal or regulatory authorities

Where we are legally required to provide information or where necessary to establish, exercise or defend legal rights.

We will only share information where there is a lawful basis for doing so.

15. Food allergies and safety

Because Little Gannets provides food and cooking activities, accurate dietary and allergy information is particularly important.

Parents, carers and adult participants are responsible for providing accurate and up-to-date information about allergies, intolerances and relevant medical conditions.

Where food is being provided to children, parents/carers remain responsible for informing us of relevant allergies and dietary requirements.

We will take reasonable steps to use the information provided to help manage foreseeable food-related risks.

However, Little Gannets cannot guarantee an allergen-free environment.

Participants and parents/carers should always check whether food is suitable before consuming it.

16. How we protect your information

We take reasonable technical and organisational measures to protect personal information against:

unauthorised access;
accidental loss;
destruction;
alteration; and
inappropriate disclosure.

Paper forms containing personal or health information will be stored securely with access limited to those who need the information for legitimate business purposes.

Electronic information will be stored using appropriate password protection and security measures.

Health and allergy information will be treated with particular care.

17. How long do we keep information?

We will not keep personal information for longer than is reasonably necessary for the purpose for which it was collected, unless we are legally required or otherwise permitted to retain it for longer.

Different types of information may therefore be kept for different periods.

For example:

booking and payment records may be retained for accounting and tax purposes;
client records may be retained for as long as reasonably necessary to provide services and manage appropriate professional records;
health and dietary information will be reviewed periodically and retained only for as long as reasonably necessary;
Kitchen Club recordings will normally be deleted after one month;
photographs and promotional materials will be retained for as long as they remain relevant and permission remains valid where consent is the lawful basis; and
correspondence may be retained for as long as reasonably necessary to deal with the enquiry or any resulting issue.

We will periodically review the information we hold and securely delete or destroy information that is no longer required.

18. Marketing

We may occasionally contact adults about Little Gannets services, events, workshops and other relevant offerings.

Where consent is required for marketing, we will ask for it separately.

You can opt out of marketing communications at any time.

We will not use children's personal information for direct marketing.

19. International transfers

Some of the technology and service providers we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place as required by UK data protection law.

20. Your rights

Depending on the circumstances, you may have the right to:

be informed about how your information is used;
request access to the personal information we hold about you;
request correction of inaccurate information;
request deletion of your information;
request restriction of processing;
object to certain processing;
request data portability where applicable; and
withdraw consent where we rely on consent.

These rights are subject to certain legal conditions and exemptions.

If you wish to exercise a right, please contact:

hello@littlegannets.co.uk

We may need to verify your identity before responding to your request.

21. Children's rights

Children have their own data protection rights.

Where we hold information about a child, requests relating to that information will be considered carefully based on the child's age, understanding and the nature of the request.

A parent or person with parental responsibility may make a request on behalf of a child where appropriate, but this does not automatically mean that they can exercise all of the child's rights in every circumstance.

Where appropriate, we will consider the child's own wishes and understanding.