DATA PROTECTION SUITE

Last updated: January 2026

Registered office: 124 City Road, London EC1V 2NX
Company No: 15322962

Data Retention Schedule

Parents/Customers: accounts until deletion or 6y inactivity; bookings 6y; messages 3y; reviews permanent; marketing consent 6y.

Children: name/age until event +12m; special requirements deleted after event; Kidonomy records 24m; safeguarding 6y to age 25.

Vendors: account until deletion or 6y inactivity; insurance/ID/DBS 12–36m; comms 3y; invoices 6y; suspended vendor records 6y.

Candidates: account 12m; CV/applications 12m; screening notes 6–12m; RTW docs 12m; deletion on request.

Employers: account until deletion or 6y inactivity; job listings 3y; candidate feedback 12m; invoices 6y.

Payments: transactions/tax/refunds/commission 6y; chargebacks 6y.

Safeguarding Logs: concerns min 6y; serious until age 25; vendor behaviour min 6y.

Complaints: customer 3y; vendor 6y; recruitment 12m; misuse 3y.

Technical: IP/device/session 12m; analytics 24m; cookies per Cookie Policy.

Marketing/CRM: until unsubscribe +24m.

Staff/Contractors: HR 6y after end; payroll/tax 6y; DBS record only (no cert copies); contracts 6y.

Deletion/Anonymisation: upon expiry with backup removal 30–90d and audit log. Review annually.

Data Subject Access Request (DSAR) Procedure

Scope: all users incl. parents, children (via parents), vendors, candidates, employers.

What is a DSAR: access/rectify/erase/restrict/object/portability; request copies of data.

How to Submit: support@mumly.co.uk. (if child-related). Include name, registered email, request scope; ID may be required.

Who May Submit: adults; parents/guardians for children (proof required); vendors; jobseekers; employers.

Timeframe: respond within 1 month; extend by 2 months for complex/multiple requests (notify within 30 days).

Verification: photo ID, proof of address, email confirmation; proof of parental responsibility for children.

What We Provide: account data, bookings, transactions, vendor messages, reviews, applications, employer feedback, support logs, technical data where relevant, marketing prefs, third-party sharing. Exclusions: third-party data, legal privilege, some safeguarding/fraud notes.

Refusals: manifestly unfounded/excessive/repetitive/abusive; risks to others; safeguarding exceptions. Provide reason and ICO info.

Rectification: 30 days.

Erasure: unless legal retention (HMRC, safeguarding, investigations, disputes). Backups 30–90d.

Restrict/Object: marketing, analytics, profiling, LI basis within 7–14d.

Portability: structured machine-readable exports (e.g., CV, profile, bookings).

Process: log, verify, gather, review/redact, securely deliver, close & log.

Fees: free unless excessive/repetitive (reasonable admin fee). 

Data Processing Agreement (DPA)

Purpose: fulfil bookings, deliver services, recruitment activities, tech services, payments, admin.

Subjects: parents, children, vendors, candidates, employers.

Data: name, email, phone, child’s first name/age, booking data, address, employment data, CV, billing, special category (only with explicit consent).

Processor Obligations: process only on instructions; security; confidentiality; training; breach notice within 24h; deletion/return; no marketing without consent; assist with rights; logs; UK GDPR compliance.

Sub-processors: require written permission and flow-down of obligations.

Transfers: UK safeguards (SCCs/adequacy) with approval.

Breaches: notify within 24h with details and mitigation.

Security: encryption, access control, audits, transmission security, physical controls, training, incident response.

Rights: assist with access/rectify/erase/restrict/port/objection within 48h.

Deletion: delete/return data at end; confirm within 7 days; retain only if law requires.

Audit: 7 days’ notice; provide records and proof.

Liability/Indemnity: processor liable and indemnifies Mumly for non-compliance.

Duration: runs with principal agreement; obligations survive termination.

Law: England & Wales.

Acceptable Use Policy & Community Guidelines

  1. Introduction

This Acceptable Use Policy (“AUP”) sets standards for how all users, including Candidates, Employers, Vendors, and

Visitors—must conduct themselves when using the Mumly Platform. This AUP works alongside the Mumly Terms of Use,

Privacy Policy, Cookie Policy, and all other Mumly policies.

 

By accessing or using the Mumly Platform, you agree to follow this AUP.

 

  1. General Principles

All users must:

– Act lawfully and ethically.

– Treat others respectfully.

– Protect the safety and wellbeing of families and children.

– Use the Platform only for legitimate purposes.

– Follow UK laws including safeguarding, employment law, consumer rights, and data protection (UK GDPR).

 

  1. Prohibited Activities

Users must not engage in any of the following:

 

3.1 Illegal or Harmful Behaviour

– Breaking any UK law.

– Posting or sharing illegal content.

– Encouraging or promoting harmful behaviour.

– Attempting fraud or financial misconduct.

 

3.2 Abuse, Harassment & Misconduct

– Threatening, harassing, or bullying any person.

– Discriminatory behaviour (race, gender, disability, religion, age, etc.).

– Posting defamatory, hateful, or abusive messages.

– Stalking or inappropriate contact.

 

3.3 Misrepresentation

Users must not:

– Create fake accounts.

– Impersonate any individual or business.

– Post misleading, false, or manipulated information.

– Apply for jobs or submit listings dishonestly.

 

3.4 Data Misuse

Users must not:

– Harvest, scrape, copy or mine data from the Platform.

– Use bots, crawlers, scripts, or automated tools.

– Share personal data of others without permission.

– Store or process data unlawfully.

 

3.5 Unauthorised Commercial Activity

Users must not:

– Promote unrelated products or services.

– Post ads without permission.

– Engage in pyramid schemes, MLMs, or recruitment scams.

 

3.6 Technical Misuse

Users must not:

– Introduce viruses or harmful code.

– Attempt to bypass Platform security.

– Attempt to disrupt or overload systems.

– Reverse engineer or copy Platform components.

 

  1. Content Standards

Users must only upload content that is:

– lawful,

– accurate,

– child-safe,

– respectful,

– free from harmful or explicit material.

 

Prohibited content includes:

– explicit or adult content,

– violence or abuse,

– promoting unsafe behaviour,

– misinformation,

– copyrighted materials without permission.

 

  1. Safeguarding & Child Protection

Because Mumly serves families and parents:

– Any safeguarding concerns may be escalated to authorities.

– Users must not post unsafe advice about children.

– Users working with children must hold proper DBS checks.

– Any risk to a child or vulnerable adult will result in immediate action.

 

  1. Communications Between Users

When messaging through Mumly:

– Communications must remain professional and respectful.

– Users must not send spam, threats, or harassment.

– Candidate–Employer or Vendor–Customer conversations must stay relevant to the service offered.

 

  1. Enforcement Actions

Mumly may take one or more of the following actions when this AUP is breached:

– Content removal.

– Temporary restrictions.

– Account suspension.

– Permanent account termination.

– Reporting behaviour to Employers, Vendors, or authorities.

– Legal action where appropriate.

 

Mumly reserves full discretion to act where misuse or risk is identified.

 

  1. Reporting Violations

To report a breach of this AUP:

Email: support@mumly.co.uk 

Provide as much detail as possible, including timestamps, screenshots, and links if available.

 

  1. Liability

Users are responsible for their own behaviour on the Platform. Mumly accepts no liability for losses arising from:

– user misconduct,

– third-party actions,

– inaccurate listings or communications.

 

  1. Updates to This Policy

Mumly may update this AUP at any time to align with new features, legal requirements, or safety standards. 

Continued use of the Platform indicates acceptance of updated policies.

 

  1. Contact Information

For questions or concerns: 

support@mumly.co.uk 

Mumly Careers Ltd 

124 City Road 

London EC1V 2NX

 

Purpose: keep Mumly safe, family-friendly, and lawful.

General Expectations: respect, truthful info, lawful use, secure accounts, children’s safety.

Prohibited: illegal acts, misrepresentation, harassment, child safety violations, inappropriate content, tech abuse, spam.

Reviews: must be honest and based on real experience.

Vendors: accuracy, insurance, safeguarding, confidentiality, no fee-bypass.

Employers: fair, lawful, non-discriminatory, GDPR-compliant.

Candidates: accurate CVs, professional conduct.

Community spaces: be kind; no spam or self-promo without approval.

Actions: warnings, removal, suspension, reporting.

Report: support@mumly.co.uk

Community Guidelines

  1. Introduction

The Mumly Community Guidelines outline the standards of behaviour expected from all users participating in community

features, including forums, groups, reviews, comments, discussions, messaging, and interactions within the Mumly Platform.

 

Mumly exists to create a supportive, empowering, and safe digital village for mums and families. By using any

community features, you agree to follow these Guidelines, the Acceptable Use Policy, and the Mumly Terms of Use.

 

  1. Our Values

The Mumly community is built on the following values:

– Respect 

– Kindness 

– Inclusivity 

– Safety 

– Support 

– Integrity 

 

Every user is responsible for helping uphold these values.

 

  1. Where These Guidelines Apply

These rules apply to:

– forums and discussion boards 

– Mumly interest groups 

– comments on listings, jobs, courses, or posts 

– messaging between users 

– reviews and ratings 

– any user-generated content or interactions 

 

  1. Expected Behaviour

All users must:

– Treat others with kindness and respect 

– Offer constructive, helpful contributions 

– Share accurate, honest information 

– Communicate professionally with Employers, Vendors, and other users 

– Protect confidentiality and privacy 

 

  1. Prohibited Behaviour

Users must NOT:

– Harass, threaten, or abuse others 

– Engage in discrimination (race, disability, religion, gender, etc.) 

– Spread misinformation or harmful advice 

– Post sexually explicit, graphic, or violent content 

– Promote unsafe behaviours, especially relating to children 

– Shame or bully other mums, families, or children 

– Disrupt discussions or engage in trolling 

– Share private information (theirs or others’) 

– Pretend to be someone else 

– Solicit or promote illegal activity 

– Encourage fraud, scams, or unsafe services 

 

  1. Safeguarding & Child Protection

Because Mumly supports families and children:

– Any content posing risk to a child or vulnerable adult will be removed immediately. 

– Serious concerns may be escalated to safeguarding authorities. 

– Users must NOT share identifying information about children. 

– Users providing childcare or child-related services must comply with UK safeguarding law. 

 

  1. Posting Rules

When posting in forums, groups, reviews, comments, or discussions:

– Stay on topic 

– Do not use excessive profanity 

– Do not promote harmful home remedies or medical advice 

– Be cautious when offering parenting advice 

– Disclose conflicts of interest if relevant 

– Do not spam or repeatedly post the same content 

 

  1. Reviews & Ratings

Reviews must be:

– honest 

– fair 

– based on actual experience 

 

You must not:

– post fake reviews 

– retaliate against users with negative reviews 

– extort, pressure, or bribe users for positive reviews 

 

  1. Advertising & Self-Promotion

Users must NOT:

– promote products, services, courses, or events without approval 

– post affiliate links 

– solicit clients in community spaces 

– send unsolicited business messages 

 

Vendors must use approved listing locations and follow Vendor Terms.

 

  1. Medical, Legal & Financial Advice

Users must NOT offer:

– medical diagnosis 

– legal advice 

– financial or tax advice 

 

Such content may be removed for safety reasons.

 

  1. Privacy & Confidentiality

 

Users must not:

– share screenshots of private messages without consent 

– post someone else’s information (names, addresses, workplaces) 

– request inappropriate information from others 

 

  1. Reporting & Moderation

Users may report harmful or rule-breaking behaviour by contacting:

support@mumly.co.uk 

 

Mumly may:

– remove content 

– issue warnings 

– restrict or suspend accounts 

– permanently remove users from the Platform 

 

  1. Moderation Decisions

– Moderation decisions are final. 

– Users may request clarification but must remain respectful. 

– Repeated challenges to moderation may result in restrictions.

 

  1. Enforcement

Violations may result in:

– Content removal 

– Temporary suspension 

– Permanent account closure 

– Escalation to authorities for serious risks 

 

  1. Community Safety

Mumly prioritises the wellbeing of mothers, families, and children. 

We may take immediate action if content presents a safety concern.

 

  1. Updates to Guidelines

These Guidelines may be updated as community features expand. Updates will be announced, and continued use constitutes acceptance.

 

 

  1. Contact Information

For questions, feedback, or reports:

support@mumly.co.uk 

Mumly Careers Ltd 

124 City Road 

London EC1V 2NX

Impact CIC Social Impact & Transparency Statement

Mission: support mums into flexible work; Kidonomy for children; reduce isolation; access to family services; equality of opportunity.

Beneficiaries: mums returning to work, single parents, disadvantaged families, children 8–14, family-run businesses, underrepresented groups.

Activities: subsidised Kidonomy, return-to-work training, subsidised family services, community initiatives.

CIC Operation: reinvest profits; asset lock; directors act in community interest; transparent funds & outcomes.

Income: grants, sponsorships, donations, subsidised programme delivery, training fees, Kidonomy licences portion, vendor commissions allocated to CIC.

Reinvestment: fund programmes, support mums, subsidise services, outreach, tools/resources, marginalised families.

Inclusion: low/free costs, priority areas, barrier reduction, diversity, online access, equality compliance.

Impact Measurement: jobs for mums, programme completions, confidence outcomes; Kidonomy skills & participation; community engagement metrics. Publish annual report.

Transparency: annual CIC report, benefit statements, spending transparency, community engagement.

Safeguarding: per Mumly policy and law.

Feedback: support@mumly.co.uk (7 working day response).

Contact: support@mumly.co.uk | www.mumly.co.uk



© 2025 Mumly Group Ltd | Registered office: 124 City Road, London EC1V 2NX | support@mumly.co.uk