Privacy Policy

Updated October 2024

Little Supernovas Limited is PCI DSS Compliant. This means that our third party providers (Squarespace and Stripe) handle all sensitive data including card and payment data safely and securely and our website payment pages are secure.

Little Supernovas do not store, process or transmit sensitive data at any time.

This website is hosted by Squarespace. This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

Squarespace needs data to run this website and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalised form.

This website uses font files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where the font files are stored may receive personal information about you, including:

  • Information about your browser, network, or device

  • Your IP address

If you contact us by email, letter, telephone, through our website or by submitting a comment on our site, or by any other means, we may keep a record of that correspondence;

We may ask you to complete surveys for research purposes although you do not have to respond to them;

We or our third-party providers will collect information relating to the transactions you undertake through our website and for the purposes of fulfilling your orders;

We may collect details of your visits to our website including, but not limited to, traffic data, location data, blogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

Cookies Information:

The types of cookies we and our business partners use on our website are broadly grouped into the following categories:

Essential – Some of the cookies on our website are necessary to be able to provide you with a service you have requested. An example of this could be a cookie used to enable you to log into your account on our website. You may not be able to use our site without these cookies.

Analytics – We use analytics cookies to provide statistics on how our website is used and to understand how visitors engage with it. An example is counting the number of different people coming to our site. We would find it difficult to analyse how well our website was performing and improve it without using these cookies.

User – We use these cookies to remember you the next time you visit our website, enabling us to personalise your experience so that it matches your interests.

Social sharing – We use third-party cookies to allow you to share our content on social network sites like Facebook. More information about this can be found in our “Third Party Cookies” section below.

Interest-based advertising – To try and ensure that the adverts you see on a website are relevant to you, third-party cookies may be used to collect information about your interests. Having these cookies does not increase the number of adverts you will see, but does make the adverts more relevant to you.

How we Use Cookies:

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

You can opt out of or change the settings for cookies and analytics using the cookie banner on the bottom of the website.

Customer Data:

When you buy something on this website, we collect personal information from you to fulfil the order. We may collect information like your:

  • Billing and shipping address

  • Details relating to your purchase (for example, names and ages of children attending our events)

  • Email address

  • Name

  • Phone number

We share this information with Squarespace, our online store hosting provider so that they can provide website services to us. We hold information provided via the checkout forms for products such as holiday schools for 12 months.

Our payment processor(s) Stripe will also collect payment information from you. You can read their privacy policy at:

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

Your contact details such as your name, email address and telephone number so that we can contact you in response to an enquiry you make through our website, by submitting a comment on our site, or in relation to the products and services that we have agreed to provide to you.

Customer Accounts:

If you create a customer account on this website, we collect personal information to improve our checkout experience and customer service.

This information may include your:

  • Billing and shipping address(es)

  • Details about your orders

  • Email address

  • Name

  • Phone number

We share this information with Squarespace, our website hosting provider, so they can provide website services to us.

squarespace/Stripe Payment

When you make a purchase from us on this website, we use Stripe as our payment solution. We make use of the following third party service providers which will also receive your personal information and process it in accordance with their privacy policies:

Stripe - payment processing services. You can read Stripe’s privacy policy at https://stripe.com/privacy.

Sift - fraud monitoring and detection services. You can read Sift’s privacy policy at https://sift.com/service-privacy.

Forms:

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with Squarespace and Mailchimp for storage and with Zapier for data porting.

Emails:

You’ll receive an automated email within 24 hours after you abandon your shopping cart if all of the following occur:

  1. You enter your email address at checkout or are logged into your customer account.

  2. You add a product which is in stock to your shopping cart.

  3. You close your browser or leave this website without completing your purchase.

You can unsubscribe from these messages at the bottom of the email.

The email will link back to this website, where you can pick up where you left off and complete your purchase.

We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.

We may email you with messages about your order or account activity. For example, we may email you to tell you that:

  • You’ve created a customer account

  • Your customer account password has been reset or updated

  • You’ve made a purchase

  • Your order has shipped

It’s not possible to unsubscribe from these messages.

We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf.

Share Buttons

This website includes share buttons which enable you to share pages or other content from this site to the following third party services: Facebook. If you click a share button, these third parties may receive your personal data, including:

  • Information about your browser, network and device

  • Details about the web page or content you shared or proposed to share

  • Your IP address

Others We May Share Your Information With:

The information that you provide to us, whether mandatory or voluntary, will be regarded as confidential. We do not share information about you with anyone without consent unless the law and our policies allow us to do so. This may be necessary, for example, in order to comply with any legal obligation or in order to protect the rights, property or safety of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.

We can and may share information without consent with:

  • our local authority for safeguarding purposes.

  • the Department for Education (DfE) as part of statutory data collection.

We are obliged to share confidential information without authorisation from the person who provided it, or to whom it relates, when:

  • there is evidence that a child is suffering, or is at risk of suffering significant harm;

  •  There is reasonable cause to believe that a child may be suffering, or is at risk of suffering, significant harm;

  • It is to prevent significant harm arising to children, young people or adults, including the prevention, detection and prosecution of serious crime.

We may also provide your personal data to our suppliers and service providers, including other companies in our group, who provide certain business services for us and act as “processors” of your personal data on our behalf.

How Long We Store Data:

We keep your personal data no longer than is necessary for the purpose(s) for which it was provided. When determining the retention periods relevant to different types of data, we take into account factors including:

  •  legal obligation(s) under applicable law to retain data for a certain period of time;

  •  the statute of limitations under applicable law;

  •  potential or actual disputes; and

  • guidelines issued by relevant data protection authorities.

Otherwise, we are obliged to securely erase your personal data from our systems when it is no longer needed.

Your Rights:

Under data protection legislation, you have the right to request access to information that we hold about you. You also have the right to:

  • object to the processing of personal data that is likely to cause, or is causing,
    damage or distress;

  • withdraw consent where given;

  • prevent data processing for the purpose of direct marketing;

  • object to decisions being taken by automated means;

  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or
    destroyed; and

  • claim compensation for damages caused by a breach of data protection regulations.

  • If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you have a concern about the way we are collecting or using your personal data, pleasefeel free to contact us by using the details set out on our website.

If you are not satisfied with our response to any enquiries or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) in the following ways: 

  • In writing to the Information Commissioner’s Office, Wycliffe House, Water Lane,
    Wilmslow, Cheshire, SK9 5AF;

  • By calling 0303 123 1113;

  • By visiting the ICO website at https://ico.org.uk/concerns/