Privacy policy

Last updated: 9 November 2026

This policy explains what personal information Petite Route collects, how we collect it, what we use it for and how long we keep it. Petite Route Ltd, registered in England and Wales (company number 17557454), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, is the data controller. Contact us at hello@petiteroute.com.

What we collect

• Account: your email address and, if you add one, a display name.
• Family preferences: age ranges (for example "toddler"), what makes a good day out for you, nap times, budget, memberships and how you get about. If you add your children, we ask only for each child's month and year of birth, never a name or a full date of birth. These stay on your phone unless you choose to save them to your account. We never ask for photos of children.
• Your area: when you're signed in, roughly where you are (rounded to about 1 km, never your exact address), so we can show what's near you, work out when to leave for a planned day and tell you about things nearby.
• What you do in the app: saved places, plans, bookings, reviews, "Been here?" answers, events you share, Circle messages and plans, reports and support messages.
• Location from your phone: only if you allow it, to show places near you. You can choose an area on the map instead.
• How the app is used: which listings are shown and opened, how long you spend on them, and taps such as "website" or "directions". This is recorded against a random app ID, not your name, email or account. Venues only ever see totals.
• Notifications: if you turn them on, your phone's notification address and a record of what we sent you.
• Technical information: the kind of device, app version and basic logs needed to keep the service secure and working.
• Childminders: if you ask for the childminder view, the name you're registered under, your Ofsted number (or your childminder agency and reference) and your town. We use these only to check your registration. We never ask about the children you look after.
• Businesses: business name, website, team members' names and emails, the evidence you give when claiming a venue (for example a bill or letter, or a Companies House number), and a record of who on your team changed what in your listing.

How we collect it

• From you, when you sign up, set up your family, save, plan, book, review, share or contact us.
• From your phone, when you use the app: your area, the app-use records above and technical information. Location from your phone only with your permission.
• From businesses, about their own venues, sessions and team.
• From public sources, for listings only (councils, OpenStreetMap, the venues' own websites and Wikimedia Commons). These are about places, not people.

We don't buy data about you and we don't use advertising or tracking tools from other companies.

Why we use it (and our lawful basis under UK GDPR)

• To run your account, plans and bookings (contract).
• To pass booking details to the venue you book with (contract).
• To check a childminder's registration before opening the childminder view (legitimate interests).
• To keep Petite Route safe, check what people share before it's shown, and prevent misuse (legitimate interests).
• To improve the service using combined, non-identifying statistics (legitimate interests).
• To use your phone's location and send notifications (consent; you can turn these off in your phone's settings or in the app).
• To keep records the law requires, such as payment records (legal obligation).

What other people see

• Reviews are signed "A local parent" with your child's age stage, never your name.
• "Been here?" answers only ever show as combined counts, never one parent's answers.
• Circle messages and plans are seen only by that Circle's members, shown with your first name and last initial.
• Venues see totals (views, saves, plans), never which families.

Who we share it with

• Venues and organisers you book with: your first name, your email, the number of children and adults, and any notes you add. At the venue, owners and managers see your email so they can contact you about your booking; other staff see your first name and numbers only.
• Service providers who host or process data for us under contract: Supabase (our database and file storage, in London); Resend (sign-in and booking emails); Expo, Apple and Google (delivering notifications to your phone); Apple Maps, Google Maps and OpenStreetMap (showing maps, so they receive the area you're looking at); Open-Meteo (weather) and postcodes.io (your council's school holiday dates), using an approximate location only; Wikimedia Commons (some place photos load from their servers); and, when payments go live, our payment provider. Some of these are outside the UK; where they are, we rely on the UK's approved safeguards for international transfers.
• Other websites: if you follow a link to a venue's own website or a booking site such as Booking.com, their privacy policy applies to anything you do there. Some links may tell the site you came from Petite Route; they never include your name or email.
• The police or other authorities, where the law requires it or a child may be at risk.

We never sell your data, we don't use advertising trackers, and we don't use what you look at to target adverts at you.

How long we keep it

• Your account, family details, saves, plans and notification history: while you have an account.
• After you delete your account (Profile → Delete my account): your personal information is removed within 30 days, usually the same night. Reviews, photos and Circle messages you've already shared stay under a random name instead of yours.
• App-use records (random app ID): 13 months, then deleted.
• Childminder details: while you have an account. If we can't confirm your registration, or it stops being valid, deleted 30 days after that decision. You can apply again at any time.
• Photos and videos that aren't approved: deleted 7 days after our decision. Uploads that never reach us for checking are deleted after 24 hours.
• Evidence for venue claims (documents and notes): deleted 30 days after we've made a decision.
• Support messages: 2 years after the conversation's last message.
• Safety reports: as long as needed to keep Petite Route safe; after your account is deleted they no longer show who you are.
• Booking and payment records: 6 years, as the law requires; after your account is deleted they no longer show your name or email.

These deletions happen automatically every night.

Your rights

You can ask to see, correct, download or delete your information, or object to how we use it. You can delete your account yourself in the app. Otherwise email hello@petiteroute.com and we'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Children

Petite Route is for adults. We don't knowingly collect information from children, and photos or videos of children are not allowed anywhere on Petite Route.

Security

Data is encrypted in transit and stored in the UK. On phones, your sign-in is kept in the phone's secure keychain. Access is limited to the people who need it, and staff access is logged.

Changes

If we make important changes, we'll ask you to read and agree again in the app.