Privacy Policy | TinyMinds

1. Who We Are

TinyMinds ("we", "us", "our") is a UK childcare directory operated as a sole trader business. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

For parents and users: Name, email address, and any information you provide when contacting a provider.

For childcare providers: Business name, contact details, location, Ofsted registration details, and profile information you submit.

Automatically: IP address, browser type, pages visited, and usage data via analytics.

3. How We Use Your Data

To provide and improve our directory service
To process subscription payments (via Stripe)
To send transactional emails (account creation, enquiry notifications)
To display your listing to parents searching for childcare
To comply with legal obligations

4. Legal Basis

We process your data on the basis of:

Contract: To provide our services to you
Legitimate interests: To improve our service and prevent fraud
Consent: For marketing communications (where applicable)

5. Data Sharing

We share data only with:

Stripe — payment processing
Vercel — hosting infrastructure
Neon — database storage
Resend — transactional email delivery

We never sell your personal data to third parties.

6. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing
Data portability

To exercise these rights, email hello@tinyminds.co.uk.

7. Cookies

We use essential cookies for authentication and session management. See our Cookie Policy for details.

8. Data Retention

We retain your data for as long as your account is active. Provider listings are kept for 12 months after account closure. You may request deletion at any time.

9. Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.