ICO Registration

Last updated: 6 May 2026  ·  BAMJOY LTD, Registered in England & Wales  ·  ICO Registration: ZB924199

1. Our Registration

BAMJOY LTD is registered with the Information Commissioner's Office (ICO), the UK's independent authority for data protection and information rights.

You can verify our registration on the ICO's public register at: ico.org.uk/ESDWebPages/Search

2. What ICO Registration Means

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, organisations that process personal data are required to register with the ICO and pay a data protection fee. Registration is a legal requirement, not a voluntary accreditation.

Being registered means:

• BAMJOY LTD is a recognised Data Controller under UK law
• We are legally accountable for how we collect, store, and use personal data
• We are subject to ICO enforcement, audit, and investigation powers
• We are required to maintain our registration and keep our details current

3. Why We Are Registered at Tier 1

BAMJOY LTD pays the Tier 1 data protection fee, which is the tier for micro organisations. The ICO sets the tier by company size and turnover, not by the type of data a company processes.

4. The Age Appropriate Design Code (Children's Code)

The ICO's Age Appropriate Design Code (commonly known as the Children's Code) is a statutory code of practice that applies to online services likely to be accessed by children under 18. BAMJOY is fully within scope of the Children's Code and has been designed from the ground up to comply with its 15 standards, including:

• Best interests of the child: the child's wellbeing is our primary consideration in all product decisions
• Data minimisation: we collect only what is strictly necessary
• Default settings: the most privacy-protective settings are applied by default
• No profiling: we do not profile children for commercial purposes
• No nudge techniques: we do not use manipulative design to encourage children or parents to weaken privacy settings
• Parental controls: parents have full oversight and control of their child's profile and data
• Geolocation off by default: we do not collect location data
• No data sharing for commercial purposes: children's data is never sold or shared with advertisers

For full details of how each standard applies to BAMJOY, see our Privacy Policy and Trust & Safety pages.

5. Your Rights Under UK GDPR

As a Data Controller, BAMJOY LTD is legally obligated to uphold your rights under UK GDPR. These include:

• The right to access your personal data
• The right to correct inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

To exercise any of these rights, email: privacy@bamjoy.com

We will respond within 30 days. For complex requests we may extend this by a further two months, in which case we will notify you within the initial 30-day period.

6. How to Contact the ICO

If you have a concern about how BAMJOY handles your data and are not satisfied with our response, you have the right to complain directly to the ICO:

The ICO also provides a range of guidance for individuals about their data protection rights at ico.org.uk/for-the-public.

7. Keeping Our Registration Current

BAMJOY LTD reviews and renews its ICO registration annually. If our data processing activities change materially (for example, if we begin processing new categories of personal data or expand into new territories), we will update our registration accordingly.

If you believe our registration details are out of date or inaccurate, please contact us at privacy@bamjoy.com.

8. Contact Us