Book
Contact
Book Now
Effective Date: 02/05/2025 
 

Tyfu Play Cafe (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

1. Who We Are
Tyfu Play Cafe 
42a Merthyr Road 
Whitchurch  
Cardiff 

CF14 1DJ

Email: hello@tyfu.co.uk 
Phone: 07444778089
Data Controller: Carys Daniels, Owner 

 
2. What Personal Data We Collect 
We may collect and process the following types of personal data: 
A. Information You Provide to Us: 
  • Full name 
  • Email address 
  • Phone number 
  • Child’s name and date of birth (for age-appropriate bookings) 
  • Payment information (processed securely via third-party providers) 
  • Any other information submitted when contacting us or making a booking 
B. Information We Collect Automatically: 
  • IP address 
  • Browser type and device information 
  • Pages viewed and interactions with our website 
  • Cookies and similar tracking technologies 
 
3. Lawful Bases for Processing 
We process your data under the following lawful bases: 
  • Contractual necessity – to fulfil bookings or purchases made by you 
  • Consent – for marketing emails and optional communications (you can withdraw at any time) 
  • Legal obligation – to comply with UK tax, health and safety, or other legal requirements 
  • Legitimate interests – to improve our services, respond to enquiries, and manage operations (provided your rights don’t override these interests) 
 
4. How We Use Your Personal Data 
We use your data to: 
  • Manage bookings and admissions 
  • Communicate with you about your visit 
  • Send service updates or marketing (with your consent) 
  • Improve our website and customer experience 
  • Maintain the safety and integrity of our play spaces 
  • Comply with legal and regulatory obligations 
 
5. Sharing Your Personal Data 
We may share your data with: 
  • Service providers, such as booking systems, payment processors, and email platforms 
  • Regulatory bodies, if legally required 
  • Professional advisors, such as accountants or legal counsel 
    We do not sell or rent your personal information. 
 
6. Data Retention 
We retain your personal data only as long as necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements. Typically: 
  • Booking and payment data: up to 6 years for financial compliance 
  • Marketing data: until you unsubscribe or withdraw consent 
 
7. Your Data Protection Rights 
Under UK GDPR, you have the right to: 
  • Access your personal data 
  • Rectify inaccuracies 
  • Erase your data (“right to be forgotten”) 
  • Restrict or object to processing 
  • Data portability (where applicable) 
  • Withdraw consent at any time 
  • Lodge a complaint with the Information Commissioner’s Office (ICO) 
You can exercise these rights by contacting us at: hello@tyfu.co.uk 
 
8. Cookies and Tracking 
We use cookies to ensure the proper function of our website, enhance user experience, and collect usage statistics. You can manage cookie settings through your browser or our cookie banner. 
 
9. Children’s Privacy 
We do not knowingly collect data from children under 13 without parental consent. Any child-related data (e.g. age for booking) is processed strictly for operational and safety purposes. 
 
10. Changes to This Policy 
We may update this Privacy Policy from time to time. Changes will be posted on our website and, where appropriate, notified to you via email. 
 
11. Contact Us 
If you have any questions about this Privacy Policy or your personal data, please contact: 
Data Protection Contact – Tyfu Play Cafe 
42a Merthyr Road 
Whitchurch  
Cardiff 
CF14 1DJ 
Email: hello@tyfu.co.uk 
Phone: 07444778089 
You also have the right to contact the Information Commissioner’s Office (ICO): 
Website: https://ico.org.uk