Privacy policy

Little Day Out is operated by Christina Murphy, a UK sole trader trading as Little Day Out. Christina Murphy is the controller responsible for the personal information described in this policy.

You can contact us at hello@littledayout.co.uk. Our website is littledayout.co.uk.

Depending on how you use Little Day Out, we may collect:

• Account and profile information: your email address, secure authentication information, display name, home location entered as UK town or postcode text, and the child age bands you usually plan days out for. Passwords are handled by our authentication provider and are not visible to Little Day Out.
• Recommendations: the listing details you submit, your submitter name and email address, your account link when signed in, and moderation information.
• Reviews: rating, review text, parent tips, worth-knowing information, child age bands, visit month, optional display name and account link.
• Account activity: saved days out, points balance and points transaction history.
• Photos: photographs you upload, together with the consent wording you confirmed and the date and time of that confirmation.
• Business claims: the information you provide when asking to claim a listing, including your account details, contact details and claim message.
• Messages: your name, email address, enquiry type and message when you use the contact form; and any details, optional contact email and page context you provide when reporting content. These messages are emailed to us and are not also saved in the Little Day Out database.
• Technical information: information normally sent in website requests, such as an IP address, browser or device information, requested page, and request date and time. Our hosting and map providers may process this to deliver and protect the website.

UK data-protection law requires us to have a lawful basis for each use:

• Providing your account and requested features — contract: we use account, profile, saved-day, points and claim information to create and operate the account and features you ask us to provide.
• Publishing and moderating community content — contract and legitimate interests: we process recommendations, reviews and photos to review, publish, maintain and moderate a useful family days-out directory. Our legitimate interest is running a trustworthy community service while protecting contributors, families and venues.
• Responding to messages and reports — legitimate interests, or steps towards a contract where relevant: we use the information supplied to answer enquiries, investigate reports and deal with listing claims.
• Security and service operation — legitimate interests: technical information may be used to serve the website, prevent misuse, investigate problems and keep Little Day Out secure and reliable.
• Understanding how the site is used — consent: if you accept analytics cookies, we use Google Analytics to understand which pages and days out parents visit and how they move around the site, so we can improve Little Day Out. Analytics runs only after you accept, and you can withdraw consent at any time on our Cookies page.
• Legal and privacy requests — legal obligation and legitimate interests:we may use relevant information to comply with the law and establish, exercise or defend legal rights.

Where we rely on legitimate interests, we consider the need for the processing and its effect on you. You can contact us if you would like more information about that balance.

Approved recommendations can make the place details, description, facilities, tips and submitted photos public. Approved reviews can make the rating, review text, parent tip, worth-knowing information, age bands, visit month and chosen display name public.

Your account email, authentication information, profile home location, saved days out, points information, business-claim details, submitter contact details, account links, moderation notes and photo-consent record are not shown publicly. A photo itself may be public once its listing is approved, so please check what it reveals before uploading.

When uploading a photo, you must confirm that you took it or have permission to share it and that Little Day Out may use it on the listing, including as its main image. We keep the confirmation wording and timestamp with the submission.

Please avoid photographs containing identifiable children unless you have appropriate permission to share them. If a photo raises a privacy or ownership concern, use the report option on the listing or email us.

We currently use the following services:

• Lovable Cloud / Supabase provides the database, account authentication and photo storage.
• Lovable hosting delivers the website and processes normal server requests needed to operate it.
• Resend delivers contact-form and content-report emails. The submitted message and contact details needed to deliver it pass through this service.
• Fasthosts hosts the mailbox that receives messages sent to hello@littledayout.co.uk.
• postcodes.io receives location or postcode search text needed to resolve locations used in Explore.
• OpenStreetMap supplies map tiles. Your browser requests map content directly, so OpenStreetMap and its delivery network may receive technical information such as your IP address and the map area requested.
• Google Analytics (Google Ireland Limited / Google LLC) measures how the site is used — but only if you accept analytics cookies. It receives technical information such as device and browser details, an approximate location derived from an anonymised IP address, and the pages and features you use. Advertising features are turned off, and we never send it personal information such as names, email addresses, postcodes or the text you type into forms.

We do not sell personal information. Little Day Out uses no advertising pixels or marketing cookies, and analytics runs only with your consent.

Some providers may process information outside the UK. Resend states that its email account data, including message content and delivery records, is stored in the United States and that its data-processing terms include Standard Contractual Clauses for relevant transfers. Lovable operates regional infrastructure, and its published data-processing terms include safeguards for international transfers where required.

OpenStreetMap uses infrastructure in the UK and Europe and a global content-delivery network, so a map request may be handled outside the UK. Where Google Analytics is used, Google may process analytics data outside the UK; Google's data-processing terms include the UK addendum to Standard Contractual Clauses for such transfers. You can contact us for more information about the safeguards relevant to your information.

Little Day Out uses the sign-in/session and functional browser storage needed to run the website, such as keeping you signed in and preserving certain unfinished actions. If you accept analytics cookies, Google Analytics sets a small number of cookies to measure how the site is used. You can accept, decline or change that choice at any time on our Cookies and browser storage page.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, operating accounts, handling requests or disputes, protecting the service and meeting applicable legal obligations. The appropriate period depends on the type of information and why it is needed; we have not set arbitrary fixed periods where there is no established requirement.

Contact-form and report messages are retained in the receiving mailbox and relevant delivery systems only as long as reasonably needed to respond, investigate and maintain necessary records. Where analytics consent has been given, Google Analytics event data is retained for 14 months and then deleted automatically. You may delete your account or contact us about particular personal information or community content.

You can delete your account from My Account. This permanently deletes your login, profile, saved days out, points balance and history, and business claims linked to the account.

Approved community content may remain so the directory continues to help families. Published listings remain, but the submitter name, email and account link are removed. Reviews may remain attached to the listing, but the account link and stored reviewer display name are removed and the review is shown as “Little Day Out parent”. Photos that form part of a retained listing may remain without personal account information attached.

If you want particular content considered for removal as well, contact us and identify it clearly.

Little Day Out helps adults discover and share family days out. Accounts and community contribution features are intended for people aged 18 or over, and registration requires users to confirm they are 18 or over. We do not use identity documents or other technology to verify age, and we do not knowingly provide accounts to children.

Depending on the circumstances and lawful basis, you may have the right to:

• ask for a copy of your personal information;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete personal information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests; and
• receive certain information in a portable format.

These rights are not absolute and may depend on the circumstances. To make a request or raise a privacy concern, email hello@littledayout.co.uk. We may need to confirm your identity before acting on a request.

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office. Information about how to complain is available at ico.org.uk/make-a-complaint.