Privacy policy

Last updated: 20 September 2026 · Applies to: tmkkids.co.uk · Data controller: Kokal Operations Ltd, a company registered in England and Wales, part of the ZAHA Lab network

In one paragraph: TMK Kids is a static website. We do not run accounts, we do not ask you to hand over personal details, and we never sell data. Our tools run in your browser — anything you type into them stays on your device. We hold contact emails only for as long as we need to answer you, and we follow UK GDPR when we do.

1. Who we are

TMK Kids is operated by Kokal Operations Ltd, a company registered in England and Wales, part of the ZAHA Lab network. We are the data controller for personal information collected through this website. You can reach us at [email protected], and for anything to do with data protection at [email protected].

2. What we do not collect

3. What we do collect

3.1 Information you send us

If you email us or use a contact form, we receive your name, email address and whatever you write. We keep it to answer you and for our records, and delete it within 12 months of our last exchange unless we have to keep it longer for a legal reason.

3.2 Technical data

Like nearly every website, our hosting and CDN providers keep standard server logs — IP address, user agent, requested URL, timestamp — for security, abuse prevention and capacity planning. Those logs are controller-operated by our providers (GitHub Pages, Cloudflare) and are not used by us to build profiles of individuals.

3.3 Cookies and local storage

We store your cookie choice in your browser's local storage. Analytics cookies are only set if you accept them. Full detail is in our Cookie policy.

4. Why we process it, and on what legal basis (UK GDPR Article 6)

PurposeDataLegal basis
Answering your emailsName, email, message Legitimate interests (Art. 6(1)(f)) — or consent if you ask to be added to a list
Keeping the site up and safeServer logs Legitimate interests (Art. 6(1)(f)) — security and availability
Optional analyticsAggregated usageConsent (Art. 6(1)(a))
Complying with the lawAs requiredLegal obligation (Art. 6(1)(c))

5. Who else is involved

RecipientWhat they seeWhy
GitHub PagesServer logsHosting the site
CloudflareServer logs, security signalsCDN, DNS and bot protection
Site analyticsNone — this site does not load third-party analytics scriptsn/a

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.

6. International transfers

Our providers are global infrastructure companies, so data may be processed outside the UK/EEA. Where that happens, transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with the provider's supplementary measures.

7. How long we keep things

DataRetention
Contact emails12 months from last contact
Server logs (provider-controlled)Typically 30 days
Cookie consent choiceUntil you clear it in your browser
Analytics (only with consent)Up to 26 months

8. Your rights

Under UK GDPR you have the right to: be informed; access your data; have it corrected; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (this does not affect processing that already happened). Email [email protected] and we will respond within one month.

If you are unhappy with our response you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or to your local supervisory authority in the EU.

9. Children

This site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

10. Security

The site is served over HTTPS and we keep the amount of personal data we hold to a minimum — the most effective protection available. No online service can promise perfect security, but we will tell you if a breach affects your rights.

11. Changes to this policy

When we change anything material we will update the date at the top of this page. Continued use of tmkkids.co.uk after a change means you accept the updated policy.

12. Contact

[email protected] (general) · [email protected] (data protection)