GDPR Compliance

Last updated: September 1, 2026

1. Introduction

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements and respect your rights as a data subject.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You provide explicit consent when submitting booking forms or contacting us
• Contractual necessity: Processing is necessary to fulfill our service obligations to you
• Legitimate interests: Improving our services and responding to inquiries

3. Data We Collect

We collect and process the following categories of personal data:

• Name
• Email address
• Service preferences
• Communication history

4. Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your data.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You can object to processing based on legitimate interests.

Right to Withdraw Consent

You can withdraw consent at any time where processing is based on consent.

5. How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.

6. Data Protection Officer

For questions regarding data protection, you may contact our designated representative at [email protected].

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

8. International Data Transfers

Your data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area.

9. Automated Decision-Making

We do not use automated decision-making or profiling in our processing of personal data.

10. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

11. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.