What we collect when you deal with us, why we hold it, and how to have it removed.
We collect what an order or a booking needs, and nothing beyond it. We do not sell your personal information, we do not rent it, and we do not share it so that somebody else can advertise to you.
[Replace this paragraph with your own entity name, trading address, and the email address a customer should write to about their data.]
Capital is at risk. Past performance is not a reliable indicator of future results. You may get back less than you put in.
What you told us
Your name, email, telephone and address, and what you ordered or booked. Held so that we can carry it out and deal with any problem afterwards, and kept as long as tax law requires us to keep the record.
Your account
Your email and a password hash, if you choose to create an account. You can ask us to close one at any time.
Payment details
We never see or store your full card number. Our payment processor returns a reference and the last four digits, and that is all we keep.
Site analytics
Aggregated page statistics so we know what people are looking for. No advertising pixels and no cross-site tracking.
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Write to us and we will answer within thirty days.
Where deleting something would break a record we are legally required to keep — an invoice, usually — we will tell you which record and when that duty ends, rather than refusing without a reason.
Marketing email
Only if you asked for it. Every message carries a one-click unsubscribe, and unsubscribing never affects something you have already arranged with us.
Who else sees your data
Our payment processor, our delivery or scheduling provider, and our email provider. Each is used for that purpose alone.
Security
Encrypted in transit and at rest, and reachable only by the people who need it to do their job.