Privacy policy

Last updated: 9 August 2026

RocketClass is a booking platform for children’s classes and holiday camps. Families use it to find and book classes; clubs use it to run them. Because bookings are about children, we handle a small amount of sensitive information, and this page explains exactly what we hold, why, who sees it, and how long it stays.

Questions or requests: [email protected].

What we collect

• Your account. Your name, email address and, if you add it, your mobile number. There are no passwords; sign-in is by emailed link.
• Your children. Name, date of birth, any medical notes or allergies you choose to add, and your photo-consent choice. You add these once and reuse them at any club on the platform.
• Emergency contacts. Up to two people a club should call if they can’t reach you.
• Bookings and payments. Which classes you book, attendance marks, and payment records. Card details go directly to our payment provider, Stripe; we never see or store card numbers.
• Club staff accounts. For people running a club: name, email and role.
• Technical basics. Session cookies to keep you signed in, and short-lived logs (including IP addresses) for security and abuse prevention. We do not run advertising or cross-site tracking.

Why we can use it

• Running your bookings (contract): account, children’s names and dates of birth, bookings, payments.
• Medical notes and allergies (explicit consent): these are special-category data. You are asked for clear, separate consent the first time you book with each club, and you can withdraw it at any time in Account → Data sharing.
• Keeping the platform safe (legitimate interests): security logs, rate limiting, fraud and abuse prevention.
• Emails about your bookings (contract): confirmations, reminders, cancellations and schedule changes. Reminders can be switched off in your account. We do not send marketing email.

Who sees your information

When you book with a club, that club receives what it needs to run its sessions: your child’s name, date of birth, medical notes, photo-consent choice, your contact details and your emergency contacts. The club is a separate organisation with its own legal responsibilities for that information. You approve this sharing per club before your first booking, you can see every share in Account → Data sharing, and you can withdraw one at any time.

We also use a small number of service providers to run the platform: Stripe (payments), our email delivery provider (booking emails and sign-in links), and our hosting provider. They process data only on our instructions.

We do not sell personal information, ever.

How long we keep it

• Your account and children’s profiles: for as long as you keep your account.
• After you withdraw sharing or delete your account: the clubs your children attended keep their attendance and enrolment records, including your child’s name, because a register of who was in their care is a safeguarding record. Medical notes, emergency contacts and photo-consent choices are removed from those records 90 days after your last booking ends.
• Payment records: kept as required for tax and accounting.
• Security logs: short-lived and rotated automatically.

Your rights

You can correct your details and your children’s details in your account at any time. You can delete your account from your account page, which removes your sign-in, contact details and children’s profiles (subject to the safeguarding retention above). You can also ask us for a copy of the information we hold about you, object to processing, or complain to the Information Commissioner’s Office (ico.org.uk). For any of these, email [email protected] and we will respond within one month.

Children

Accounts are held by parents and guardians; children do not use RocketClass directly. Information about children is added by their parent or guardian and shared only as described above.

Cookies

We use only the cookies needed to keep you signed in and to protect forms. No analytics or advertising cookies.

Changes

If this policy changes in a way that matters, we will tell account holders by email and update the date at the top.