Privacy Policy – Paint Riot
This Privacy Policy outlines how Paint Riot collects, uses, and protects your personal data when using our session booking system. We are committed to safeguarding your privacy and ensuring that your data is handled securely and responsibly, in accordance with UK law, including the UK GDPR.
1. Data Controller
Paint Riot, located at 262 George St, Aberdeen AB25 1HN, is the data controller of your personal information. For any queries regarding your personal data, please contact us at: simpil8990@gmail.com or info@riotsplatter.com.
2. Data We Collect
When you use our booking system, we collect the following personal data:
- Full name
- Email address
- Phone number
- Booking details (date, time, number of participants)
- Payment information (depending on your selected payment method)
3. Purpose of Data Processing
Your personal data is processed for the following purposes:
- Session Bookings: To facilitate your booking for a splatter painting session.
- Communication: To confirm your booking, send reminders, and provide essential information related to your session.
- Payment Processing: To securely process your payments if you make an online payment.
- Customer Service: To address any enquiries, issues, or complaints related to your booking.
- Marketing: With your consent, to send you promotional offers and updates about our services.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: To provide the booking service (Article 6(1)(b) of the UK GDPR).
- Consent: For marketing communications (Article 6(1)(a) of the UK GDPR).
- Legitimate interest: For administrative purposes and improving our services (Article 6(1)(f) of the UK GDPR).
5. Data Sharing
We may share your data with:
- Payment service providers to process your payments securely.
- Service providers who assist in operating our booking system and managing our IT infrastructure.
- Public authorities if required by law, such as HMRC or law enforcement bodies.
We do not transfer your personal data outside the UK or the European Economic Area (EEA) without ensuring adequate protection in line with the UK GDPR.
6. Data Retention
We store your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy:
- Booking data is retained for the duration of your contract and any applicable legal retention period.
- Marketing data is stored until you withdraw your consent or opt-out from receiving communications.
- Payment records are retained for the time required by law, such as for accounting and tax purposes.
7. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right to access: Request access to the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data, subject to legal conditions.
- Right to restrict processing: Request that we limit the processing of your personal data in certain situations.
- Right to data portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
- Right to object: Object to the processing of your data, including for direct marketing purposes.
- Right to withdraw consent: At any time, you can withdraw your consent for data processing (such as for marketing).
To exercise any of these rights, please contact us at simpil8990@gmail.com or info@riotsplatter.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been mishandled.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure.
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on our website, and where appropriate, notified to you via email. Please review this page periodically to stay informed of any updates.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us at simpil8990@gmail.com or info@riotsplatter.com.