Privacy Policy

1. Who We Are

Ducella Labs ("we", "us", "our") is a STEM education business based in London, United Kingdom, providing hands-on engineering workshops and weekly programs for children, and curriculum-aligned services for schools and institutions.

Data Controller: Begard Mohammed, trading as Ducella Labs (sole trader)
Contact: hello@ducellalabs.co.uk
Company registration: Not applicable — Ducella Labs operates as a sole trader.

2. What Information We Collect

From Parents/Guardians: Name, email address, phone number.

About Children (entered by a parent — children do not create their own accounts): First name, last name, date of birth, and medical or allergy information if disclosed.

Consent Records: Whether photo/video consent was given (optional), liability waiver acceptance, emergency medical consent, and the date, time, and IP address at which consent was recorded.

From Schools & Institutions: Organization name and type, contact name, email, phone, region, estimated pupil numbers, and any inquiry message.

Payment Information: We do not directly store your card details. Payments are processed by Stripe, a third-party payment processor.

3. Why We Collect This Information

• Processing your booking and providing the workshop/program — performance of a contract
• Recording consent — legal obligation / vital interests / consent (photo)
• Responding to school/institutional inquiries — legitimate interest
• Processing payment — performance of a contract

4. Children's Data Specifically

We take the protection of children's data seriously, in line with the UK Information Commissioner's Office (ICO) Children's Code. Children do not have their own accounts or log in independently — all bookings and data are managed entirely by a parent or guardian. Photo/video consent is entirely optional and never a condition of booking.

5. Who We Share Information With

Stripe (payment processing). We do not sell or rent personal information to third parties for marketing purposes.

6. How Long We Keep Your Information

Booking, attendance, and consent records are retained for 7 years following a child's last session with us, in line with common safeguarding and financial record-keeping practice.

7. Your Rights

Under UK GDPR, you have the right to access, correct, delete, restrict, or object to the processing of your data, and to request a copy of it in a portable format. You may also lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, contact us at hello@ducellalabs.co.uk.