This Privacy and Cookie Policy explains how Adorable Adventures Kids Amusement Arcade LLC, trading as Hartbeeps UAE (“we”, “us”, “our”), an onshore company licensed by the Dubai Department of Economy and Tourism (“DET”) in the United Arab Emirates (“UAE”), collects, uses, stores, shares and protects your personal data.
This Privacy and Cookie Policy applies when you visit hartbeeps.ae, contact us, create an account, register for classes, attend our sessions, parties or events, or otherwise interact with or book our services.
This Privacy and Cookie Policy applies to parents, legal guardians, prospective customers and visitors to our website.
We act as the Data Controller for the personal data we collect in accordance with UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (“PDPL”).
OUR BRAND RELATIONSHIP
We operate our business under licence from Soundplay International Limited, based in the United Kingdom (“Licensor”).
As part of operating the brand network, the Licensor provides administrative support, software oversight, auditing, compliance monitoring and operational assistance. In doing so, the Licensor may process certain personal data contained within our booking and customer management systems.
The Licensor only accesses and processes personal data where necessary for these business purposes and is required to maintain appropriate technical and organisational measures to protect personal data.
If our licence to operate the brand expires, is terminated, or if the business is sold or transferred, customer information may be transferred to the Licensor or another approved party where necessary to ensure continuity of customer services, administration and operation of the business.
If the Licensor or the wider brand business is sold, acquired, reorganised or transferred, personal data to which the Licensor has access may also be transferred to, or made accessible by, the successor owner or operator of the brand where necessary to continue the provision and management of the licensed services. Any such transfer will be subject to applicable data protection laws and appropriate contractual, technical and organisational safeguards.
PERSONAL DATA WE COLLECT
We collect only the personal data reasonably required to provide our services.
This may include:
Parent or Guardian Information
- Name
- Email address
- Telephone number
- Postal address, where required
- Billing and payment information
Child Information
- Name
- Date of birth
- Class attendance records
- Emergency contact information
- Medical, allergy or additional support information voluntarily provided for the safe delivery of classes, parties and events
Technical Information
- IP address
- Device and browser information
- Website usage information
- Cookie information, where applicable
Photographs or videos may occasionally be taken during classes or events for training or promotional purposes, or where you voluntarily submit images or videos to us, including in connection with competitions. We will not use an identifiable image of your child for marketing or promotional purposes without appropriate prior consent from a parent or legal guardian.
HOW WE COLLECT YOUR DATA
We collect personal data through:
- registrations and booking forms;
- enquiries submitted through our website;
- direct correspondence by email, telephone or WhatsApp;
- attendance at classes, parties and events;
- our class booking platform, Zooza;
- website hosting infrastructure;
- cookies and website analytics technologies, where applicable.
Website Content and Online Interactions
We may operate website features such as blogs, articles, enquiry forms or other content resources. If you choose to interact with these features, we may collect information you voluntarily provide, such as your name, email address or comments.
We may also use third-party platforms and social media channels to communicate with you and to promote our services and share information about our classes and activities. Where you interact with us through these platforms, the relevant platform provider may also process your personal data in accordance with its own privacy policy.
HOW WE USE YOUR DATA
We use personal data to:
- manage class bookings and attendance;
- communicate with you regarding classes, parties and events;
- provide customer support;
- support child safety and wellbeing;
- process payments;
- comply with legal and regulatory obligations;
- improve our services and website;
- maintain the integrity and operation of our licensed brand network.
Where you have provided appropriate consent, we may also send information and communications about:
- new classes;
- special events;
- parties;
- holiday sessions;
- promotions;
- other services which may be of interest.
You may withdraw your marketing consent at any time.
LEGAL BASIS FOR PROCESSING
- We process personal data in accordance with the UAE PDPL, including where:
- you have provided your consent;
- processing is necessary to provide the services you have requested;
- processing is necessary to comply with legal or regulatory obligations;
- processing is otherwise permitted under applicable UAE law.
Where we process health, allergy or other sensitive information relating to a child, we do so only where permitted by applicable law and with appropriate safeguards.
DATA STORAGE AND INTERNATIONAL TRANSFERS
We use a combination of UAE and international service providers.
Website Hosting
Our website infrastructure and related services are hosted within the UAE by AEserver.
Booking Platform
Customer booking information is processed through Zooza, whose infrastructure is located within the European Union.
UK Licensor
Certain customer information may be accessible to our UK Licensor for operational support, compliance monitoring, software administration, auditing and brand management.
Where personal data is transferred outside the UAE, we take reasonable steps to ensure appropriate contractual, technical and organisational safeguards are in place.
THIRD-PARTY PLATFORMS AND SERVICE PROVIDERS
We use selected third-party platforms and service providers to help us operate our business, deliver our classes, parties and events, manage bookings, communicate with customers and promote our services.
These may include:
- our class booking and management platform;
- website hosting and technical service providers;
- email communication and marketing providers, such as Mailchimp;
- social media and messaging platforms, including WhatsApp, Facebook and Instagram;
- payment and other operational service providers.
Where you communicate with us through WhatsApp, your telephone number, profile information and any messages, images or other content you choose to share may be processed by WhatsApp and its related companies, including Meta Platforms Ireland Limited, in accordance with their own privacy terms.
Where you subscribe to marketing communications, we may use third-party email providers to send newsletters, class updates, information about events and other relevant communications. You can unsubscribe from marketing communications at any time.
Some third-party providers may process personal data outside the UAE. Where we use such providers, we take reasonable steps to ensure appropriate contractual, technical and organisational safeguards are in place.
Third-party platforms may also process personal data independently under their own privacy policies. We do not control how those platforms process personal data and recommend that you review their privacy notices before interacting with them.
Our website may also contain links to third-party websites, resources or social media pages. We are not responsible for the privacy practices or security of those third-party websites.
COOKIES
Our website uses cookies and similar technologies to operate effectively, improve website performance and understand how visitors use our website.
Where required by law, you will be given the opportunity to accept or manage non-essential cookies.
CHILDREN’S PRIVACY
Protecting children’s privacy is extremely important to us.
We collect information about children through their parent or legal guardian and take appropriate measures to protect children’s personal data.
- All accounts must be created by a parent or legal guardian.
- We do not knowingly collect personal information directly from children without parental involvement.
- We collect only the minimum information reasonably necessary for the safe operation of our classes.
- Parents and guardians are responsible for ensuring that the information they provide about their child remains accurate and up to date.
Where health, allergy, medical or other sensitive information relating to a child is provided, we use that information only for appropriate purposes, including helping to ensure the child’s safety during our classes and events, and apply appropriate safeguards to that information.
SHARING PERSONAL DATA
We do not sell personal data.
We may share personal information where reasonably necessary with:
- our UK Licensor;
- Zooza;
- AEserver;
- payment providers;
- employees, instructors and subcontractors;
- professional advisers;
- insurers;
- regulatory authorities where legally required;
- carefully selected service providers assisting in the delivery of our services.
If we sell, transfer or reorganise our licensed business, or explore, negotiate or complete a sale or transfer of the business, we may disclose relevant customer information to prospective purchasers, their professional advisers and any eventual purchaser. Where appropriate, confidentiality obligations and other safeguards will be applied to such disclosures, and information will be shared only to the extent reasonably necessary for evaluating, completing or implementing the transaction.
DATA RETENTION
We retain personal data only for as long as reasonably necessary.
Generally:
- active customer records are retained while you continue attending classes;
- enquiry records are retained for an appropriate period;
- financial records are retained to comply with applicable accounting and tax legislation;
- information that is no longer required is securely deleted or anonymised.
Where our brand licence ends, customer records may transfer to the UK Licensor or another approved party where necessary to ensure continuity of customer services.
YOUR RIGHTS
Subject to the UAE PDPL, you may request:
- access to your personal data;
- correction of inaccurate information;
- deletion of personal data where appropriate;
- restriction of processing;
- objection to processing where applicable;
- withdrawal of consent where processing relies upon consent;
- information regarding how your personal data is processed.
We may need to verify your identity before responding to any request.
SECURITY
We implement appropriate technical and organisational security measures designed to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.
These measures include appropriate access controls, secure systems, encryption where appropriate and role-based permissions.
Should a personal data breach occur which is likely to affect your rights or interests, we will comply with our legal obligations under applicable UAE law.
CONTACTING US
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Company: Adorable Adventures Kids Amusement Arcade LLC trading as Hartbeeps UAE
Licensed by: Dubai Department of Economy and Tourism (DET)
Postal Address: Al Zahraa Techno Centre Plot 487, 94 Khalid Bin Al Waleed Road, Al Raffa, Bur Dubai, Dubai.
If you remain dissatisfied after contacting us, you may also have the right to raise your concerns with the competent UAE regulatory authority where applicable.
