Privacy Policy

Last updated: April 2026

Who we are

This website is operated by The School of Play Ltd (“we”, “us”, “our”). Our website address is theschoolofplay.org.

If you have any questions about this privacy policy or how we handle your personal data, please contact us at: info@theschoolofplay.org


What data we collect and why

Email sign-ups and waitlists

When you sign up to receive updates — including notifications about our books, programmes, events or courses — we collect your first name and email address. We use this information solely to send you the updates you requested. This is processed on the basis of your consent.

Blog subscriptions

If you subscribe to our blog via WordPress.com, your email address is collected and stored by WordPress.com on our behalf. You can unsubscribe at any time via the link in any blog notification email.

Contact forms

If you contact us via a form on our website, we collect your name, email address and any information you choose to include in your message. We use this to respond to your enquiry.

Event registrations and ticket purchases

When you register for or purchase tickets to one of our events, we collect your name, email address and payment information via TicketTailor.

Booking and scheduling

When you book a call or appointment with us via Calendly, we collect your name, email address and any other information you provide during the booking process.

Online sessions

When you attend an online session, workshop or coaching call with us via Zoom, your name and any information you choose to share during the session may be processed by Zoom.

Cookies and analytics

Our website may use cookies and analytics tools (including Google Analytics) to understand how visitors use our site. This helps us improve our content and user experience. You can control cookie settings via your browser preferences.

Payment information

If you purchase a product or service from us, payments are processed securely by third-party providers. We do not store your card details on our systems.


How we store your data

Mailchimp

Your email address and first name collected via our sign-up forms are stored securely in Mailchimp, our email marketing platform. Mailchimp is based in the United States and is certified under appropriate data transfer frameworks. You can read Mailchimp’s privacy policy at mailchimp.com/legal/privacy. We retain your data for as long as you remain subscribed to our communications. If you unsubscribe, your data is removed from our active mailing list promptly.

WordPress.com

This website is hosted by WordPress.com, operated by Automattic Inc. WordPress.com may collect and store certain data on our behalf, including blog subscriber email addresses, contact form submissions, and any comments left on our site. Automattic is based in the United States and processes data in accordance with its own privacy policy, which you can read at automattic.com/privacy. By using this website, you acknowledge that your data may be processed by Automattic in accordance with their terms.

Google Drive

We may store certain customer information, including names and contact details, in Google Drive, operated by Google LLC. Google is based in the United States and processes data in accordance with its own privacy policy, which you can read at policies.google.com/privacy. Google complies with applicable data protection frameworks for international data transfers. We ensure that only authorised personnel have access to this information and that it is used solely for legitimate business purposes.

TicketTailor

We use TicketTailor to manage event registrations and ticket sales. When you purchase or register for an event through our website, your name, email address and payment information are processed by TicketTailor. TicketTailor is based in the United Kingdom and processes data in accordance with its own privacy policy, which you can read at tickettailor.com/privacy-policy. Payment card details are handled securely by TicketTailor’s payment processors and are not stored by us.

Calendly

We use Calendly to manage appointment bookings and scheduling. When you book a call or session with us, your name, email address and any other details you provide are processed by Calendly. Calendly is based in the United States and processes data in accordance with its own privacy policy, which you can read at calendly.com/privacy.

Zoom

We use Zoom to host online sessions, workshops and coaching calls. When you attend a session with us, your data is processed by Zoom Video Communications Inc., based in the United States. Zoom processes data in accordance with its own privacy policy, which you can read at zoom.us/privacy.


Who we share your data with

We do not sell, trade or rent your personal data to third parties. We share your data only with the trusted service providers listed above who help us operate our website, events and communications, and only to the extent necessary to deliver our services.


Your rights

Wherever you are in the world, you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate data
  • Request deletion of your data (“the right to be forgotten”)
  • Withdraw consent at any time — every email we send includes an unsubscribe link
  • Object to or restrict how we process your data
  • Portability — request a copy of your data in a portable format

If you are based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at: info@theschoolofplay.org


Legal basis for processing (UK & EU users)

Where required by UK GDPR and EU GDPR, we process your personal data on the following legal bases:

  • Consent — for email marketing, waitlist sign-ups and blog subscriptions
  • Contractual necessity — for processing event ticket purchases, bookings and delivering services
  • Legitimate interests — for analytics, improving our website and storing customer records necessary for running our business

International data transfers

Some of our third-party service providers are based outside the UK and EU, including in the United States. Where this is the case, we ensure that appropriate safeguards are in place to protect your data, in accordance with UK GDPR and EU GDPR requirements.


Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.


Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “last updated” date at the top of this page. We encourage you to review this page periodically.


Contact us

The School of Play Ltd theschoolofplay.org info@theschoolofplay.org