DATA PROTECTION SUITE
Last updated: January 2026
Registered office: 124 City Road, London EC1V 2NX
Company No: 15322962
Data Retention Schedule
Parents/Customers: accounts until deletion or 6y inactivity; bookings 6y; messages 3y; reviews permanent; marketing consent 6y.
Children: name/age until event +12m; special requirements deleted after event; Kidonomy records 24m; safeguarding 6y to age 25.
Vendors: account until deletion or 6y inactivity; insurance/ID/DBS 12–36m; comms 3y; invoices 6y; suspended vendor records 6y.
Candidates: account 12m; CV/applications 12m; screening notes 6–12m; RTW docs 12m; deletion on request.
Employers: account until deletion or 6y inactivity; job listings 3y; candidate feedback 12m; invoices 6y.
Payments: transactions/tax/refunds/commission 6y; chargebacks 6y.
Safeguarding Logs: concerns min 6y; serious until age 25; vendor behaviour min 6y.
Complaints: customer 3y; vendor 6y; recruitment 12m; misuse 3y.
Technical: IP/device/session 12m; analytics 24m; cookies per Cookie Policy.
Marketing/CRM: until unsubscribe +24m.
Staff/Contractors: HR 6y after end; payroll/tax 6y; DBS record only (no cert copies); contracts 6y.
Deletion/Anonymisation: upon expiry with backup removal 30–90d and audit log. Review annually.
Data Subject Access Request (DSAR) Procedure
Scope: all users incl. parents, children (via parents), vendors, candidates, employers.
What is a DSAR: access/rectify/erase/restrict/object/portability; request copies of data.
How to Submit: support@mumly.co.uk. (if child-related). Include name, registered email, request scope; ID may be required.
Who May Submit: adults; parents/guardians for children (proof required); vendors; jobseekers; employers.
Timeframe: respond within 1 month; extend by 2 months for complex/multiple requests (notify within 30 days).
Verification: photo ID, proof of address, email confirmation; proof of parental responsibility for children.
What We Provide: account data, bookings, transactions, vendor messages, reviews, applications, employer feedback, support logs, technical data where relevant, marketing prefs, third-party sharing. Exclusions: third-party data, legal privilege, some safeguarding/fraud notes.
Refusals: manifestly unfounded/excessive/repetitive/abusive; risks to others; safeguarding exceptions. Provide reason and ICO info.
Rectification: 30 days.
Erasure: unless legal retention (HMRC, safeguarding, investigations, disputes). Backups 30–90d.
Restrict/Object: marketing, analytics, profiling, LI basis within 7–14d.
Portability: structured machine-readable exports (e.g., CV, profile, bookings).
Process: log, verify, gather, review/redact, securely deliver, close & log.
Fees: free unless excessive/repetitive (reasonable admin fee).
Data Processing Agreement (DPA)
Purpose: fulfil bookings, deliver services, recruitment activities, tech services, payments, admin.
Subjects: parents, children, vendors, candidates, employers.
Data: name, email, phone, child’s first name/age, booking data, address, employment data, CV, billing, special category (only with explicit consent).
Processor Obligations: process only on instructions; security; confidentiality; training; breach notice within 24h; deletion/return; no marketing without consent; assist with rights; logs; UK GDPR compliance.
Sub-processors: require written permission and flow-down of obligations.
Transfers: UK safeguards (SCCs/adequacy) with approval.
Breaches: notify within 24h with details and mitigation.
Security: encryption, access control, audits, transmission security, physical controls, training, incident response.
Rights: assist with access/rectify/erase/restrict/port/objection within 48h.
Deletion: delete/return data at end; confirm within 7 days; retain only if law requires.
Audit: 7 days’ notice; provide records and proof.
Liability/Indemnity: processor liable and indemnifies Mumly for non-compliance.
Duration: runs with principal agreement; obligations survive termination.
Law: England & Wales.
Acceptable Use Policy & Community Guidelines
- Introduction
This Acceptable Use Policy (“AUP”) sets standards for how all users, including Candidates, Employers, Vendors, and
Visitors—must conduct themselves when using the Mumly Platform. This AUP works alongside the Mumly Terms of Use,
Privacy Policy, Cookie Policy, and all other Mumly policies.
By accessing or using the Mumly Platform, you agree to follow this AUP.
- General Principles
All users must:
– Act lawfully and ethically.
– Treat others respectfully.
– Protect the safety and wellbeing of families and children.
– Use the Platform only for legitimate purposes.
– Follow UK laws including safeguarding, employment law, consumer rights, and data protection (UK GDPR).
- Prohibited Activities
Users must not engage in any of the following:
3.1 Illegal or Harmful Behaviour
– Breaking any UK law.
– Posting or sharing illegal content.
– Encouraging or promoting harmful behaviour.
– Attempting fraud or financial misconduct.
3.2 Abuse, Harassment & Misconduct
– Threatening, harassing, or bullying any person.
– Discriminatory behaviour (race, gender, disability, religion, age, etc.).
– Posting defamatory, hateful, or abusive messages.
– Stalking or inappropriate contact.
3.3 Misrepresentation
Users must not:
– Create fake accounts.
– Impersonate any individual or business.
– Post misleading, false, or manipulated information.
– Apply for jobs or submit listings dishonestly.
3.4 Data Misuse
Users must not:
– Harvest, scrape, copy or mine data from the Platform.
– Use bots, crawlers, scripts, or automated tools.
– Share personal data of others without permission.
– Store or process data unlawfully.
3.5 Unauthorised Commercial Activity
Users must not:
– Promote unrelated products or services.
– Post ads without permission.
– Engage in pyramid schemes, MLMs, or recruitment scams.
3.6 Technical Misuse
Users must not:
– Introduce viruses or harmful code.
– Attempt to bypass Platform security.
– Attempt to disrupt or overload systems.
– Reverse engineer or copy Platform components.
- Content Standards
Users must only upload content that is:
– lawful,
– accurate,
– child-safe,
– respectful,
– free from harmful or explicit material.
Prohibited content includes:
– explicit or adult content,
– violence or abuse,
– promoting unsafe behaviour,
– misinformation,
– copyrighted materials without permission.
- Safeguarding & Child Protection
Because Mumly serves families and parents:
– Any safeguarding concerns may be escalated to authorities.
– Users must not post unsafe advice about children.
– Users working with children must hold proper DBS checks.
– Any risk to a child or vulnerable adult will result in immediate action.
- Communications Between Users
When messaging through Mumly:
– Communications must remain professional and respectful.
– Users must not send spam, threats, or harassment.
– Candidate–Employer or Vendor–Customer conversations must stay relevant to the service offered.
- Enforcement Actions
Mumly may take one or more of the following actions when this AUP is breached:
– Content removal.
– Temporary restrictions.
– Account suspension.
– Permanent account termination.
– Reporting behaviour to Employers, Vendors, or authorities.
– Legal action where appropriate.
Mumly reserves full discretion to act where misuse or risk is identified.
- Reporting Violations
To report a breach of this AUP:
Email: support@mumly.co.uk
Provide as much detail as possible, including timestamps, screenshots, and links if available.
- Liability
Users are responsible for their own behaviour on the Platform. Mumly accepts no liability for losses arising from:
– user misconduct,
– third-party actions,
– inaccurate listings or communications.
- Updates to This Policy
Mumly may update this AUP at any time to align with new features, legal requirements, or safety standards.
Continued use of the Platform indicates acceptance of updated policies.
- Contact Information
For questions or concerns:
support@mumly.co.uk
Mumly Careers Ltd
124 City Road
London EC1V 2NX
Purpose: keep Mumly safe, family-friendly, and lawful.
General Expectations: respect, truthful info, lawful use, secure accounts, children’s safety.
Prohibited: illegal acts, misrepresentation, harassment, child safety violations, inappropriate content, tech abuse, spam.
Reviews: must be honest and based on real experience.
Vendors: accuracy, insurance, safeguarding, confidentiality, no fee-bypass.
Employers: fair, lawful, non-discriminatory, GDPR-compliant.
Candidates: accurate CVs, professional conduct.
Community spaces: be kind; no spam or self-promo without approval.
Actions: warnings, removal, suspension, reporting.
Report: support@mumly.co.uk
Community Guidelines
- Introduction
The Mumly Community Guidelines outline the standards of behaviour expected from all users participating in community
features, including forums, groups, reviews, comments, discussions, messaging, and interactions within the Mumly Platform.
Mumly exists to create a supportive, empowering, and safe digital village for mums and families. By using any
community features, you agree to follow these Guidelines, the Acceptable Use Policy, and the Mumly Terms of Use.
- Our Values
The Mumly community is built on the following values:
– Respect
– Kindness
– Inclusivity
– Safety
– Support
– Integrity
Every user is responsible for helping uphold these values.
- Where These Guidelines Apply
These rules apply to:
– forums and discussion boards
– Mumly interest groups
– comments on listings, jobs, courses, or posts
– messaging between users
– reviews and ratings
– any user-generated content or interactions
- Expected Behaviour
All users must:
– Treat others with kindness and respect
– Offer constructive, helpful contributions
– Share accurate, honest information
– Communicate professionally with Employers, Vendors, and other users
– Protect confidentiality and privacy
- Prohibited Behaviour
Users must NOT:
– Harass, threaten, or abuse others
– Engage in discrimination (race, disability, religion, gender, etc.)
– Spread misinformation or harmful advice
– Post sexually explicit, graphic, or violent content
– Promote unsafe behaviours, especially relating to children
– Shame or bully other mums, families, or children
– Disrupt discussions or engage in trolling
– Share private information (theirs or others’)
– Pretend to be someone else
– Solicit or promote illegal activity
– Encourage fraud, scams, or unsafe services
- Safeguarding & Child Protection
Because Mumly supports families and children:
– Any content posing risk to a child or vulnerable adult will be removed immediately.
– Serious concerns may be escalated to safeguarding authorities.
– Users must NOT share identifying information about children.
– Users providing childcare or child-related services must comply with UK safeguarding law.
- Posting Rules
When posting in forums, groups, reviews, comments, or discussions:
– Stay on topic
– Do not use excessive profanity
– Do not promote harmful home remedies or medical advice
– Be cautious when offering parenting advice
– Disclose conflicts of interest if relevant
– Do not spam or repeatedly post the same content
- Reviews & Ratings
Reviews must be:
– honest
– fair
– based on actual experience
You must not:
– post fake reviews
– retaliate against users with negative reviews
– extort, pressure, or bribe users for positive reviews
- Advertising & Self-Promotion
Users must NOT:
– promote products, services, courses, or events without approval
– post affiliate links
– solicit clients in community spaces
– send unsolicited business messages
Vendors must use approved listing locations and follow Vendor Terms.
- Medical, Legal & Financial Advice
Users must NOT offer:
– medical diagnosis
– legal advice
– financial or tax advice
Such content may be removed for safety reasons.
- Privacy & Confidentiality
Users must not:
– share screenshots of private messages without consent
– post someone else’s information (names, addresses, workplaces)
– request inappropriate information from others
- Reporting & Moderation
Users may report harmful or rule-breaking behaviour by contacting:
support@mumly.co.uk
Mumly may:
– remove content
– issue warnings
– restrict or suspend accounts
– permanently remove users from the Platform
- Moderation Decisions
– Moderation decisions are final.
– Users may request clarification but must remain respectful.
– Repeated challenges to moderation may result in restrictions.
- Enforcement
Violations may result in:
– Content removal
– Temporary suspension
– Permanent account closure
– Escalation to authorities for serious risks
- Community Safety
Mumly prioritises the wellbeing of mothers, families, and children.
We may take immediate action if content presents a safety concern.
- Updates to Guidelines
These Guidelines may be updated as community features expand. Updates will be announced, and continued use constitutes acceptance.
- Contact Information
For questions, feedback, or reports:
support@mumly.co.uk
Mumly Careers Ltd
124 City Road
London EC1V 2NX
Impact CIC Social Impact & Transparency Statement
Mission: support mums into flexible work; Kidonomy for children; reduce isolation; access to family services; equality of opportunity.
Beneficiaries: mums returning to work, single parents, disadvantaged families, children 8–14, family-run businesses, underrepresented groups.
Activities: subsidised Kidonomy, return-to-work training, subsidised family services, community initiatives.
CIC Operation: reinvest profits; asset lock; directors act in community interest; transparent funds & outcomes.
Income: grants, sponsorships, donations, subsidised programme delivery, training fees, Kidonomy licences portion, vendor commissions allocated to CIC.
Reinvestment: fund programmes, support mums, subsidise services, outreach, tools/resources, marginalised families.
Inclusion: low/free costs, priority areas, barrier reduction, diversity, online access, equality compliance.
Impact Measurement: jobs for mums, programme completions, confidence outcomes; Kidonomy skills & participation; community engagement metrics. Publish annual report.
Transparency: annual CIC report, benefit statements, spending transparency, community engagement.
Safeguarding: per Mumly policy and law.
Feedback: support@mumly.co.uk (7 working day response).
Contact: support@mumly.co.uk | www.mumly.co.uk
© 2025 Mumly Group Ltd | Registered office: 124 City Road, London EC1V 2NX | support@mumly.co.uk