YOUR OBLIGATIONS
As a business working with children, you must follow both your Franchise Agreement and all UK legal requirements. It's your responsibility to monitor and stay on top of local laws too.

DATA HANDLING (GDPR)
Customer emails are collected at registration and must be kept in line with GDPR. As you store and use customer data, you're recognised as a Controller and Processor, and have a legal obligation to register with the ICO. Six key GDPR principles apply: lawfulness/fairness/transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity/confidentiality. Customers have the right to know how their data is used, and to correction or deletion, forward any such requests to Head Office (must be actioned within one month). Report any suspected data breach to Head Office immediately, breaches must be reported to the ICO within 72 hours.

MUSIC LICENSING
You must arrange your own PRS/PPL music licences for use in classes. You'll also need a Spotify subscription to access Baby Band playlists (current pricing: £11.99/month individual, £16.99 duo, £19.99 family, £5.99 student).

FIRST AID TRAINING
Not a legal requirement, but strongly recommended given you work with children, complete via Daisy First Aid.

COMPLIANCE ISSUES
If a franchisee appears to be operating contrary to the rules, there's a two-step process: a detailed investigation, followed by a meeting to discuss findings and agree a way forward if appropriate. Baby Band reserves the right to take further action depending on frequency/severity. Meetings are arranged at a convenient time where possible; if repeatedly missed, they proceed in your absence with decisions communicated afterwards.