YOUR INFORMATION
Privacy & cookies.
How Magic and Law Limited handles your information when you visit this website or contact us about a workshop, book, game or other enquiry.
Last updated: 9 October 2026.
Who is responsible for your information?
Tricky Maths, Neo Magic and Mind Burp Games are trading names of Magic and Law Limited, company number 10760759. Magic and Law Limited is the data controller responsible for the personal information covered by this policy.
Registered office: Sterling House, 71 Francis Road, Edgbaston, Birmingham, United Kingdom, B16 8SP.Contact: info@neomagic.co.uk or 07434 744 536. You can also write to the registered office, marking your letter “Privacy”.
This policy covers this Vinny Sagoo / Tricky Maths website and the enquiries and resulting bookings handled through its contact details. Online shops and other linked services may have additional privacy information for their checkout, accounts and cookies.
The legislation that applies
The relevant UK framework is the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended, including by the Data (Use and Access) Act 2025.
What information we receive
When you submit the enquiry form, your details are sent over HTTPS to FormSubmit, which processes the submission and forwards it to info@neomagic.co.uk. FormSubmit also keeps a temporary submission archive. This website does not maintain a separate enquiry database.
We receive your name, email address, contact number if you choose to provide one, and the enquiry details you provide, such as your school or organisation and message. Your message may include an event location, audience or preferred dates. We also receive information you provide by direct email, telephone or in follow-up correspondence. Please do not include pupils’ names or other sensitive personal information in the form.
Hosting and security services process technical information such as IP addresses, browser and device details, requested pages and connection times to deliver and protect the website.
Please provide an age range or year group for a school audience rather than pupils’ names or personal details.
Why we use it and our lawful bases
- Responding to enquiries and preparing quotes: our legitimate interests in answering requests and communicating with potential customers. If you ask us to take steps towards a contract with you personally, the basis is taking those pre-contract steps at your request.
- Arranging and delivering an agreed booking: performing a contract where you are the contracting party. For contacts acting for a school, company or other organisation, our legitimate interests in managing that organisation’s booking apply.
- Required records and disclosures: compliance with applicable legal obligations, including accounting and tax requirements where relevant.
- Protecting the website and resolving disputes: our legitimate interests in maintaining a secure service, preventing abuse and establishing, exercising or defending legal claims.
Under the UK GDPR, these bases are contract (Article 6(1)(b)), legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)), as appropriate to the purpose. Legitimate interests must be balanced against your rights and interests.
Providing enquiry details is voluntary, but we need enough information to answer or arrange a booking. Using the enquiry form does not subscribe you to a mailing list. Where we separately rely on your consent, you can withdraw it at any time. We do not use this website to make automated decisions with legal or similarly significant effects on you.
Who may receive your information
Information may be handled by people authorised to respond to your enquiry, FormSubmit (Devro LABS) for form processing and email forwarding, our email service providers, OpenAI Sites for website hosting, and Cloudflare for website security. Relevant information may also be shared with professional advisers or authorities where necessary for legal obligations or legal claims. Sharing between our three trading names is within the same company. Read FormSubmit’s privacy information for its processing practices.
Some providers operate internationally and may process information outside the UK, including in the United States. Restricted transfers require a lawful transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your information. Cloudflare’s privacy information explains its international processing.
How long information is kept
Enquiry information is kept for the time needed to respond and carry out relevant follow-up. Where an enquiry leads to a booking, relevant correspondence is kept while needed to arrange and deliver the service, deal with questions or complaints, meet applicable record-keeping duties and resolve legal claims.
The retention period depends on the enquiry, whether a booking results, the legal requirements that apply and whether a dispute remains outstanding. We will securely delete or anonymise personal information when it is no longer needed for those purposes. You can ask us about the retention of a particular record.
FormSubmit states that it retains form submissions in its archive for 30 days. Copies forwarded to our email account are handled under the retention criteria above. See FormSubmit’s submission archive information.
Website security and cookies
Cloudflare provides protection against automated and malicious traffic. Security cookies are used for that purpose.
No optional analytics or advertising cookies have been added to this website. Cloudflare can set the following security cookie:
The enquiry form sends information to FormSubmit when you choose to submit it. No FormSubmit or Google reCAPTCHA script is embedded on this website. If you submit using FormSubmit’s hosted page, its own security checks and cookies may apply.
See Cloudflare’s cookie information for details about security cookies. You can manage cookies in your browser settings; blocking security cookies may affect access to the site.
Under PECR, consent is not required for cookies that meet the strictly necessary exception. If optional tracking is added in future, this policy and the website’s controls will be updated so that the applicable consent or other exemption requirements are met before it is used.
Links to other websites
Book purchase buttons open the Neo Magic online shop, where the purchase is completed. Links to LinkedIn and other external services also open separate websites. Read the privacy information and cookie choices shown by those services when using them. The ownership of our trading names remains Magic and Law Limited.
Your data protection rights
Depending on the circumstances and lawful basis, you can ask to access or correct your personal information, have it erased, restrict its use, receive or transfer it in a portable format, or object to processing based on legitimate interests. You can always object to use for direct marketing. If processing relies on consent, withdrawing it does not affect processing that was lawful before withdrawal.
You can make a request by email, telephone or post using the contact details above. Requests are normally free of charge and answered without undue delay, normally within one month. The law permits extensions, pauses and limited exceptions in certain circumstances; we will explain if these apply. If we extend the response period, we will tell you why within the initial month. We may need proportionate information to verify your identity.
If you have a privacy concern about an event photograph of you or a child for whom you are responsible, please contact us using the same details.
Questions and complaints
You can raise a data protection complaint by emailing info@neomagic.co.uk, calling 07434 744 536, or writing to our registered office. Please explain your concern and how you would like us to contact you.
We will acknowledge a data protection complaint within 30 days, investigate it without undue delay, keep you informed and communicate the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Its helpline is 0303 123 1113.
Changes to this policy
This policy will be updated when our website or relevant information-handling practices change. The date at the top shows when it was last revised.
