Privacy
Privacy policy
We collect what we need to run your bookings and keep your children safe, and nothing about children ever goes to advertisers. Here's the detail.
Last updated 5 October 2026
Who we are
Tinker Labs runs hands-on science classes, camps and birthday parties for children aged 3 to 14. We're at Reem Mall, Al Reem Island, Abu Dhabi, United Arab Emirates. In this policy, "we" and "us" mean Tinker Labs at Reem Mall.
This policy explains what we collect when you use tinkerlabs.ae, book with us, visit the lab or reply to one of our ads, and what we do with it.
Questions about your data go to info@tinkerlabs.ae or WhatsApp 055 155 7796.
What we collect
- About you: your name, email address and mobile number, and what you book and pay for.
- About your child: first name, age or age group, and anything you tell us so we can keep them safe, such as allergies or medical notes. We also record whether you've signed the waiver and whether you agree to photos.
- Payments: card payments are handled by Stripe. We see the amount and whether it went through, never your full card number.
- Enquiries: what you send us through our forms, WhatsApp, phone or email, and the answers you give in a Facebook or Instagram lead form.
- Offer codes: any creator or offer code you use is saved with your booking.
- On the website: the pages you visit, your device and browser, an approximate location worked out from your IP address, and how you arrived, such as the link you clicked. See Cookies.
We collect children's details from their parents or guardians, not from children. Children can't create accounts.
How we use it
- To take and run your bookings, memberships, camps and parties, and to send confirmations, reminders and receipts.
- To keep children safe. Allergies and medical notes are shown to the lab team running the session, and are never used for anything else.
- To answer your questions and follow up on enquiries.
- To send news and offers by email when you've agreed to it. Every email has an unsubscribe link.
- To measure and improve the website and our advertising, with Google Analytics, PostHog and Meta (Facebook and Instagram). For ads, we send Meta a parent's contact details scrambled (hashed) before they leave our systems, plus what was booked and its value, so Meta can tell which ads led to bookings. We never send children's details to advertising platforms.
- To keep the records UAE law requires, such as VAT invoices, and to resolve any disputes.
We use your data to provide what you've booked, to meet our legal obligations, and with your consent where the law asks for it, as Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data allows. We don't sell your data.
Data stored outside the UAE
Some of these services store or process data outside the UAE, including in India, the European Union and the United States. We use services that commit to keeping data secure and confidential, and transfer it only as UAE data protection law allows.
How long we keep it
- Bookings, payments and invoices: at least five years, as UAE VAT law requires.
- Your family's account, including your children's details: while you're with us, or until you ask us to delete it.
- Enquiries that didn't become a booking: up to two years from our last contact.
- Website statistics: up to 14 months in Google Analytics and up to a year in PostHog.
- Marketing emails: until you unsubscribe.
Your rights
You can ask us to:
- send you a copy of the data we hold about you or your child;
- correct anything that's wrong;
- delete your data (see Delete your data);
- stop or limit how we use it, including for marketing;
- give you your data in a format you can take elsewhere.
Write to info@tinkerlabs.ae or WhatsApp 055 155 7796. We'll check it's you and reply within 30 days. If you're not happy with our answer, you can complain to the UAE Data Office.
Photos and videos
We sometimes take photos and videos at the lab. We only post pictures of children on our website or social media when a parent has agreed, and we never add a child's full name. You can withdraw your agreement at any time, and we'll stop using the pictures from then on.
Keeping it safe
Only the lab team who need it can see your details, and each person signs in to the lab desk with their own account. The website, desk and parent account only work over encrypted (HTTPS) connections, and card details stay with Stripe.
Changes to this policy
We'll update this page when anything changes, and change the date at the top. This version is from 5 October 2026.