Privacy Policy

Last updated: [ADMIN: add date]

This policy explains how [ADMIN: legal/trading name] (Kev Koo Castles, we, us) collects and uses your personal data. We follow UK GDPR and the Data Protection Act 2018.

Who we are

Data controller: [ADMIN: legal/trading name], [ADMIN: business address]. Contact: [ADMIN: business email] or 07926 888901. [ADMIN: ICO registration number, if registered]

What we collect

We only collect what we need to deliver your hire:

Your name, phone number and/or email address
Your event date, time and venue address
The item you book and any notes you give us
Payment status and payment references from our payment provider. We never see or store your card details.
Messages you send using our contact form

Why we use it (lawful basis)

To perform our contract with you: taking and managing your booking, delivering, setting up and collecting equipment, and contacting you about your hire.
Legitimate interests: answering enquiries, preventing fraud and spam, and keeping our website secure.
Legal obligation: keeping financial records as required by HMRC.

We never sell your data, and we never use it for marketing without your consent.

Payments

Deposits are processed securely by Stripe. Stripe handles your card details under its own privacy policy (stripe.com/gb/privacy). We only receive confirmation of payment and a payment reference.

Who we share it with

Only trusted service providers who help us run the business, such as website hosting, database, payments and email. They act under contract and only on our instructions. We may also share data where the law requires it.

How long we keep it

Booking records: 6 years after your event, for tax and accounting purposes
Enquiries that do not lead to a booking: up to 12 months
Unpaid or expired booking attempts: deleted within 90 days

[ADMIN: confirm retention periods]

Cookies

We only use strictly necessary cookies and local storage. These keep the site working and let the owner stay signed in to the admin area. We do not use analytics or advertising cookies, so no cookie banner is needed. If this changes, we will ask for your consent first.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its use, and to data portability. Contact us using the details above. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Security

Your data is stored on secure, encrypted servers with strict access controls. Only authorised staff can see booking and enquiry details.