Privacy Policy for Tumble House Entertainment LLP

Effective Date: 19 September 2025
Last Updated: 20 September 2026

Tumble House Entertainment LLP, operating under the brand name “Tumble House”, including its outlets, websites, digital platforms and related services (“Tumble House”, “we”, “us” or “our”), respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, protect and otherwise process personal data when you visit our website, make a booking, purchase a membership, attend an event, visit one of our centres, communicate with us, use our Wi-Fi facilities, apply for employment, or otherwise interact with Tumble House.

This Privacy Policy should be read together with our applicable Terms & Conditions, Centre Rules, Child Safety Rules and Booking Terms.

By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. INFORMATION WE COLLECT

Depending on how you interact with Tumble House, we may collect the following categories of personal data.

1.1 Parent / Guardian / Customer Information

This may include:

• Full name
• Mobile number
• Email address
• Date of birth or age information where required for verification
• Booking information
• Membership information
• Payment and transaction information
• Communications and enquiries made to us
• Information provided when making a birthday-party or event booking
• Relationship to the child or children attending Tumble House

1.2 Child Information

Where necessary to provide our services, we may collect limited information relating to children, including:

• Child's name
• Age or date of birth/DOB (Date of Birth)
• Booking/session information
• Membership information
• Birthday-party or event information
• Information necessary to administer the child's visit or participation
• Parent/guardian information

Where applicable under Indian law, information relating to a child is collected from or with the involvement and verifiable consent of the child's parent or lawful guardian, obtained through mechanisms such as OTP verification during online booking, digital check-in waivers, or physical entry forms at the centre.

We do not seek to collect more information about a child than is reasonably necessary for providing our services, maintaining safety or fulfilling legal obligations.

2. HEALTH, MEDICAL, ALLERGY AND SAFETY INFORMATION

For the safety and well-being of children and other visitors, Tumble House may collect limited health or safety-related information where voluntarily provided by a parent, guardian or customer or where reasonably necessary in connection with an incident.

This may include:

• Food allergies or dietary allergies
• Relevant medical conditions disclosed for safety purposes
• Asthma or other conditions that may be relevant during physical activity
• Emergency contact information
• Medication or emergency-care information voluntarily provided by a parent/guardian where necessary
• Injury or accident information
• First-aid records
• Incident reports
• Information relating to emergency assistance
• Information required for an insurance claim or legal matter

Purpose

We use such information only where reasonably necessary for purposes including:

• Protecting the health and safety of children and visitors
• Providing appropriate first-aid or emergency assistance
• Managing activities safely
• Responding to accidents or incidents
• Communicating with parents/guardians or emergency contacts
• Processing insurance claims
• Investigating complaints or incidents
• Complying with legal or regulatory requirements
• Protecting Tumble House's legal rights

We will restrict access to such information to personnel who reasonably need it for these purposes.

Health, allergy and medical information will not ordinarily be used for marketing or promotional purposes.

Where the information is no longer reasonably required for the relevant purpose, it will be deleted, anonymised or securely disposed of, subject to any legal, insurance, accounting or dispute-related retention requirement.

In emergency situations requiring immediate medical assistance or first aid for a child, health and contact information may be processed under vital interest/emergency safety exceptions if prior written consent cannot be immediately gathered.

3. BOOKING AND PAYMENT INFORMATION

When you make a booking or purchase a service, we may collect:

• Booking date and time
• Number of children/adults
• Child/session information
• Package or service selected
• Birthday-party details
• Transaction amount
• Payment status
• Billing information
• Refund information
• Coupon, membership or promotional information

Payments may be processed through third-party payment service providers. Tumble House generally does not directly store complete debit-card, credit-card or banking credentials.

4. PHOTOGRAPHS, VIDEOS AND CCTV

4.1 Marketing Photography and Video

Because Tumble House is a children's entertainment venue, we take particular care regarding photographs and videos of children.

Tumble House will not knowingly use an identifiable photograph or video of a child for advertising, social media, website content or other promotional purposes unless the child's parent or lawful guardian has provided specific, separate and written opt-in consent for such marketing use.

Marketing consent may be withdrawn at any time.

Where a parent or lawful guardian requests removal of an identifiable photograph or video used for marketing purposes, Tumble House will take reasonable steps to remove or disable the relevant content from Tumble House-controlled digital platforms within 7 working days, subject to technical limitations and third-party platform controls.

Withdrawal of consent will not affect lawful processing or publication that occurred before withdrawal.

4.2 Operational Photography and Video

Photography or video may also occur for legitimate operational purposes, including:

• Safety
• Security
• Incident investigation
• Event administration
• Training
• Documentation of activities

Such recordings will be handled in accordance with applicable law and our internal access and retention controls.

4.3 CCTV

Tumble House may operate CCTV cameras at its premises for safety, security, loss prevention, incident investigation and protection of customers, employees and property. Physical CCTV surveillance notices are prominently displayed at all venue entry points to complement this online notice.

CCTV cameras are not installed in washrooms, toilets, changing rooms or other areas where individuals have a reasonable expectation of privacy.

CCTV footage is ordinarily retained for 30 days, after which it is overwritten or securely deleted, unless it is required to investigate an incident, address a complaint, comply with law, support an insurance claim or establish, exercise or defend a legal claim.

Access to CCTV footage is restricted to authorised personnel and may be provided to law-enforcement authorities, insurers, legal advisers or other authorised parties where legally permitted or required.

5. MARKETING COMMUNICATIONS

Subject to applicable law, Tumble House may send promotional communications through:

• WhatsApp
• SMS
• Email
• Telephone
• Other permitted digital communication channels

These may include information about:

• Offers and promotions
• Birthday packages
• Events
• Memberships
• New activities
• New outlets
• Seasonal campaigns
• Special programmes

5.1 Consent

For promotional communications where consent is required, Tumble House will obtain and maintain an appropriate record of the customer's consent or other lawful basis for communication.

For WhatsApp, SMS and other telecom-based commercial communications, Tumble House will comply with applicable telecom and commercial-communication requirements, including applicable consent, preference, template, sender-identification and opt-out requirements.

5.2 Opt-Out

You may withdraw consent or opt out of promotional communications at any time.

We will process a valid marketing opt-out request within 7 working days, or sooner where required by applicable law or the relevant communication platform.

Opting out of marketing communications will not prevent us from sending essential service-related communications, including:

• Booking confirmations
• Payment information
• Cancellation or rescheduling information
• Safety notices
• Important membership information
• Responses to enquiries

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to:

• Enable essential website functionality
• Remember preferences
• Understand website traffic and usage
• Improve website performance
• Maintain website security
• Measure marketing effectiveness

Third-party services integrated into our website may also use cookies or similar technologies subject to their own policies.

Where required by applicable law, we will provide appropriate choices regarding non-essential cookies.

You may also control cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. GUEST WI-FI

Where Tumble House provides guest Wi-Fi at its centres, we may collect limited technical and usage information necessary to operate, secure and troubleshoot the network.

Depending on the configuration of the Wi-Fi service, this may include:

• Device information
• Device identifier or MAC address
• IP address
• Connection time
• Session duration
• Data usage
• Authentication information
• Network security logs

Guest Wi-Fi information may be used for:

• Network security
• Troubleshooting
• Preventing misuse
• Investigating security incidents
• Maintaining network performance
• Complying with applicable legal requirements

Wi-Fi logs will be retained only for as long as reasonably necessary for these purposes and applicable legal requirements.

8. HOW WE USE PERSONAL DATA

We may use personal data for purposes including:

1. Processing and managing bookings.
2. Providing play sessions, birthday parties, events and memberships.
3. Communicating with customers regarding bookings and services.
4. Processing payments and refunds.
5. Managing memberships and customer accounts.
6. Providing customer support.
7. Maintaining safety and security at our premises.
8. Operating and monitoring CCTV.
9. Managing events and activities.
10. Managing health, allergy, emergency and incident information where necessary for safety.
11. Sending service-related communications.
12. Sending promotional communications where permitted.
13. Improving our facilities and customer experience.
14. Preventing fraud, misuse and unauthorised access.
15. Maintaining accounting, tax and business records.
16. Responding to complaints and legal claims.
17. Complying with applicable laws and regulatory requirements.
18. Protecting the rights, property and safety of Tumble House, our customers, employees and visitors.

We seek to process personal data only for specified, legitimate and reasonably necessary purposes.

9. CHILDREN'S PERSONAL DATA

Tumble House is a children's entertainment and indoor-play business and therefore processes personal data relating to children.

We recognise that children's personal data requires additional protection.

Where required under applicable law, Tumble House will obtain verifiable consent from a parent or lawful guardian before processing a child's personal data, collected through mechanisms such as OTP verification during online booking, digital check-in waivers, or physical entry forms at the centre.

We will not knowingly use children's personal data for behavioural monitoring, tracking or targeted advertising in circumstances where such processing is prohibited by applicable law.

We do not knowingly seek to establish an independent commercial relationship with children where parental or guardian involvement is legally required.

Parents and lawful guardians should ensure that information provided to Tumble House about a child is accurate and should contact us if information needs to be corrected or updated.

10. SHARING OF PERSONAL DATA

Tumble House may share personal data with trusted third parties where reasonably necessary to provide our services or fulfil legitimate business and legal purposes.

These may include:

• Payment processors and banks
• Booking and ticketing platforms
• Website hosting providers
• IT and technology providers
• Customer relationship management providers
• WhatsApp, SMS and email communication providers
• Food and catering vendors
• External entertainers and party hosts
• Photographers and videographers engaged for events
• Event/service providers
• IT and cybersecurity providers
• Professional advisers, including accountants, lawyers and consultants
• Insurance providers
• Government authorities, regulators, courts and law-enforcement agencies where legally required
• Other service providers acting on our behalf

Where third parties process personal data on our behalf, Tumble House enters into formal Data Processing Agreements (DPAs) and binding confidentiality contracts with all third-party service providers and data processors requiring appropriate confidentiality, security and data-protection safeguards.

Tumble House will remain responsible for managing its obligations in relation to personal data processed by its data processors to the extent required under applicable law.

Third-party service providers will be given access only to the information reasonably necessary for the relevant service.

Tumble House does not sell personal data of its customers.

11. INTERNATIONAL DATA TRANSFERS

Some technology, software, cloud-storage, communication or other service providers used by Tumble House may process personal data on servers located outside India.

Where personal data is transferred or processed outside India, Tumble House will take steps required under applicable Indian law and applicable contractual arrangements to protect such personal data.

12. DATA SECURITY

Tumble House takes reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Accidental loss
• Destruction
• Misuse
• Unauthorised disclosure
• Alteration
• Unlawful processing

Our measures may include:

• Access controls
• Password protection
• Role-based access
• Restricted employee access
• Secure technology systems
• Confidentiality obligations
• Vendor agreements
• Security monitoring
• Staff awareness and training
• Backup and recovery procedures

Access to customer and child information is limited to employees and service providers who reasonably require such access for their role.

No electronic transmission or storage system can be guaranteed to be completely secure. However, Tumble House will take reasonable measures to prevent, detect and respond to unauthorised access or disclosure.

13. PERSONAL DATA BREACHES

Tumble House maintains procedures for identifying, assessing, containing and responding to personal data breaches.

A personal data breach may include, for example:

• Loss or theft of a mobile phone containing customer information
• Unauthorised access to a booking system
• Accidental disclosure of a customer list
• Unauthorised sharing of a Google Sheet or other customer database
• Compromise of an employee account
• Unauthorised access to CCTV or other systems
• Loss or unauthorised disclosure of health, allergy or emergency information

If Tumble House becomes aware of a personal data breach, we will take reasonable and appropriate steps to:

1. Contain and investigate the breach.
2. Assess the nature and extent of the breach.
3. Mitigate potential harm to affected individuals.
4. Secure affected systems and information.
5. Notify the relevant authorities, including the Data Protection Board, where required by applicable law.
6. Notify affected individuals where required by applicable law.
7. Provide information regarding the nature, extent and timing of the breach, potential consequences, mitigation measures and appropriate safety steps where required.
8. Maintain appropriate records of the incident and remedial actions.

Where required under applicable law, Tumble House will notify the relevant authority without delay and provide the detailed information required within the applicable statutory period, including the 72-hour reporting requirement where applicable.

We will also cooperate with law-enforcement authorities, regulators, insurers and relevant service providers where appropriate.

14. DATA RETENTION

Tumble House will retain personal data only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.

Our indicative retention periods are:

These periods are indicative and may be extended where reasonably necessary to comply with applicable law, respond to legal claims, investigate incidents, prevent fraud, maintain financial records or protect Tumble House's legal rights.

When personal data is no longer required, Tumble House will take reasonable steps to delete, anonymise or securely dispose of it.

15. YOUR RIGHTS

Subject to applicable law, individuals may have rights relating to their personal data, including the right to:

• Obtain information about the processing of their personal data;
• Request correction or updating of inaccurate or incomplete personal data;
• Request deletion of personal data where permitted by applicable law;
• Withdraw consent where processing is based on consent;
• Raise a grievance regarding the processing of personal data;
• Exercise other rights available under applicable data-protection law; and
• Nominate another individual to exercise applicable rights on their behalf in accordance with applicable law.

Requests relating to a child's personal data may need to be made by the child's parent or lawful guardian.

To exercise any of these rights, individuals or lawful guardians should submit a written request to admin@tumblehouse.in accompanied by appropriate proof of identity or verification of lawful guardianship.

Requests may be subject to reasonable verification of identity or authority to prevent unauthorised access to personal data.

16. WITHDRAWAL OF CONSENT

Where we process personal data based on your consent, you may withdraw that consent by contacting us.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Withdrawal of consent may affect our ability to provide certain services where the relevant information is necessary for providing those services.

Where processing is required or permitted on another lawful basis, Tumble House may continue processing the relevant personal data to the extent permitted by applicable law.

17. EMPLOYEE AND JOB APPLICANT INFORMATION

Tumble House may collect and process personal data relating to employees, prospective employees, consultants, contractors and job applicants.

This may include:

• Name and contact information
• CV/resume and employment history
• Educational and professional qualifications
• References
• Identification and verification information
• Salary and compensation information
• Bank/payment information where required
• Attendance and performance information
• Statutory employment information
• Information required for recruitment, employment administration and legal compliance

Such information will be used for purposes including:

• Recruitment
• Background and reference checks where appropriate
• Employment administration
• Payroll and benefits
• Performance management
• Workplace safety
• Compliance with employment, tax and other applicable laws
• Protection of Tumble House's legitimate business interests

Employee and applicant information will be retained only for as long as reasonably necessary for the relevant employment, recruitment, statutory, legal or business purpose.

18. GRIEVANCE REDRESSAL

If you have any question, concern or complaint regarding the processing of your personal data or the exercise of your rights, you may contact our designated Privacy and Grievance Officer.

Privacy & Grievance Officer: Centre Manager, Tumble House
Designation: Centre Manager
Email: admin@tumblehouse.in
Telephone: 9599070802
Address: Tumble House Entertainment LLP, E-20 Defence colony, New Delhi-110024

We will acknowledge and address privacy-related grievances within the timelines required by applicable law.

As a matter of internal service commitment, Tumble House will endeavour to resolve privacy grievances within 90 days of receipt, where reasonably possible, subject to the nature and complexity of the matter.

If additional time is reasonably required, we may communicate the reason for the delay and the expected next steps.

19. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, social-media platforms, payment gateways, booking platforms or other services.

Tumble House is not responsible for the privacy practices, security or content of third-party websites or services.

We recommend reviewing the privacy policies of third parties before providing them with personal data.

20. SOCIAL MEDIA

Tumble House may maintain accounts or pages on social-media platforms including Instagram, Facebook, WhatsApp and other platforms.

Interactions with our social-media pages are also subject to the privacy policies and terms of those platforms.

We may receive information that you voluntarily provide through such platforms, including comments, messages or interactions with our content.

21. BUSINESS TRANSFERS

If Tumble House undergoes a merger, restructuring, sale of assets, acquisition, investment, reorganisation or other corporate transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

• Our business
• Our services
• Technology
• Data-processing practices
• Applicable laws or regulations

The updated Privacy Policy will be published on our website with a revised “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

23. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Subject to applicable law, courts having jurisdiction in New Delhi, India shall have jurisdiction in relation to disputes arising from or relating to this Privacy Policy.

24. CONTACT US

For privacy-related questions, requests or concerns, please contact:

Tumble House Entertainment LLP
Brand: Tumble House
Email: admin@tumblehouse.in
Telephone: 9599070802
Registered Office: E-20 Defence colony, New Delhi-110024
Website: https://www.tumblehouse.in/
Privacy & Grievance Officer: Centre Manager, Tumble House

Please include sufficient information in your request to enable us to identify the relevant individual, booking, account or request and respond appropriately.

Last Updated: 20 September 2026