Privacy Policy

Last updated: April 2026

1. Who I Am

Allergy Classroom is a trading name of Mirabel Lavelle, a sole trader based in the North East of England. I (referred to as “I”, “me”, and “my”) am committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Mirabel Lavelle (trading as Allergy Classroom)
Email: mirabel@allergyclassroom.co.uk
Address: North East England

2. What Data I Collect

I may collect and process the following personal data:

  • Contact information: name, email address, phone number, school/organisation name, job role — when you submit my contact form or book a workshop.
  • Workshop-related data: pupil allergy information shared by schools ahead of workshops, strictly for safeguarding purposes.
  • Website usage data: anonymised analytics data (pages visited, time on site) collected via cookies with your consent.

3. Legal Basis for Processing

I process personal data on the following lawful bases under UK GDPR Article 6:

  • Consent (Art. 6(1)(a)): For marketing communications and website cookies. You can withdraw consent at any time.
  • Contract (Art. 6(1)(b)): To deliver workshop services you have booked and process payments.
  • Legitimate interest (Art. 6(1)(f)): To respond to enquiries and improve my services.
  • Legal obligation (Art. 6(1)(c)): To comply with safeguarding requirements when handling pupil allergy data in school settings.

4. How I Use Your Data

  • To respond to your enquiries and process bookings
  • To deliver workshops and CPD training sessions
  • To send you information about my services (only with consent)
  • To comply with safeguarding obligations during school visits
  • To improve my website and services through anonymised analytics

5. Data Sharing

I do not sell, trade, or rent your personal data to third parties. I may share data with:

  • My accountant, for invoicing and financial record-keeping
  • Schools, where necessary to deliver workshops (e.g., confirming DBS clearance)
  • Law enforcement or regulatory bodies, if required by law

6. Data Retention

  • Contact form enquiries: retained for 2 years, then deleted
  • Workshop booking records and invoices: retained for 6 years (legal requirement)
  • Pupil allergy information: deleted within 30 days of the workshop
  • Website analytics data: anonymised and retained for 12 months

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate or incomplete data
  • Eraseyour data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to processing based on legitimate interest
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time for marketing communications

To exercise any of these rights, contact me at mirabel@allergyclassroom.co.uk. I will respond within 30 days.

8. Cookies

My website uses cookies to improve your experience. See my Cookie Policy for full details. You can manage your cookie preferences at any time via the cookie banner.

9. Children’s Data

I take extra care with children’s data. Any pupil allergy information shared with me by schools is processed solely for safeguarding purposes during workshop delivery. This data is never stored beyond 30 days, is never shared with third parties, and is handled in compliance with the Children’s Code (Age Appropriate Design Code) under UK GDPR.

10. Complaints

If you are unhappy with how I handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO: ico.org.uk | Helpline: 0303 123 1113

11. Changes to This Policy

I may update this policy from time to time. The latest version will always be available on this page with the date of the last update.