Privacy policy

1. Who we are

This website is run by [Company legal name] ([Company name]), registered at [Registered address], company / tax number [Registration number]. We are the data controller for the personal data described here.

Questions about this policy: [Privacy contact email] or by post to the address above.

2. Data we collect

We only collect what we need for the purposes below:

• Contact details you give us in a form, by email, phone or messaging: name, email address, phone number and your message.
• Booking or order details: the service or product, date and time, delivery address and payment status (card details are handled by [Payment provider], never stored by us).
• Technical data when you visit the site: IP address, browser, pages viewed and referring site, collected through [Analytics tool] only if you accept analytics cookies.

3. Why we use it and on what basis

• To answer your message or request and to provide what you booked or ordered (contract, or steps before a contract).
• To keep accounting and tax records for the period the law requires (legal obligation).
• To understand how the site is used and improve it (your consent, which you can withdraw in Cookie settings).
• To send news or offers, only if you opted in (consent; every message has an unsubscribe link).

4. Who we share it with

We do not sell personal data. We share it only with service providers that process it for us under contract: [Hosting provider] (hosting), [Email provider] (email), [Payment provider] (payments), [Analytics tool] (analytics, with consent). Some of them may store data outside [Country]; where they do, we rely on [Transfer safeguard, e.g. standard contractual clauses].

We disclose data to public authorities only when the law requires it.

5. How long we keep it

Enquiries: [12 months] after the last contact. Customer and invoice records: [10 years], as tax law requires. Newsletter: until you unsubscribe. Analytics data: [14 months].

6. Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

Write to [Privacy contact email]. We answer within [30 days]. You can also complain to the data protection authority: [Supervisory authority name and website].

7. Security

Data is sent over an encrypted connection (HTTPS) and access is limited to the staff who need it. [Describe any other measures, e.g. two-factor sign-in, backups.]

8. Changes to this policy

When this policy changes we update the date at the top of the page. Material changes are announced on the site [and by email to customers].