Privacy policy
Last updated: [date][Draft: have this reviewed before the site goes live.]
Who is responsible
The controller of your personal data is [full legal name / business name], [business address], Dublin, Ireland. Contact: jskital@gmail.com.
What I collect and why
When you book or send an enquiry, I collect what you enter in the form: your name, email, phone number (optional), Instagram handle (optional), the session, date, time and place, and your message. I use it to reply, arrange and carry out the session, and to keep records required by law. The legal basis is taking steps at your request before entering into a contract, and performing that contract (GDPR Article 6(1)(b)), and legal obligations such as tax records (Article 6(1)(c)).
Gift voucher orders
When you buy a gift voucher, Stripe collects your payment and email address, and, for posted vouchers, the delivery address. I keep your name, email, the recipient’s name, your message for the card and the delivery address to prepare and send the voucher, and the voucher code to honour it later. The legal basis is performing the contract (GDPR Article 6(1)(b)) and tax records (Article 6(1)(c)). The basket itself stays in your browser only.
Where it is stored
This website and its booking system run on Cloudflare, which stores booking details on my behalf as a data processor. Booking notifications are sent to my email through Cloudflare Email Routing. Deposits are paid through Stripe, which processes your payment details under its own privacy policy; I never see or store card numbers. Some of these providers may process data outside the EU under the European Commission’s standard contractual clauses.
How long I keep it
Enquiries that do not lead to a booking are deleted within [12 months]. Booking records are kept for [6 years] to meet Irish tax and accounting rules.
Cookies and analytics
This website sets no cookies and uses no analytics or tracking. Fonts are served from this website, not from third parties. The gift voucher basket is kept in your browser’s local storage, which only you can see and which is never sent anywhere until you pay. The private admin page uses your browser’s built-in password prompt, not a cookie.
Your rights
You have the right to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to jskital@gmail.com and I will reply within one month. You can also complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the supervisory authority in your own EU country, such as UODO in Poland.