• Langley Tracks (“[Add Your Trading Name/Company Name]”, “We”, “Us”, “Our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website ([Your Website URL – e.g., langleytracks.co.uk]) (“Website”) and our services (pottery classes, sauna sessions, event hire etc.) (“Services”). It also explains your rights regarding your personal data and how we use cookies.  
• For the purpose of UK data protection law (including the UK General Data Protection Regulation – UK GDPR), the data controller is [Your Trading Name/Company Name] of [Your Registered Address, if applicable].
• If you have any questions about this policy or our privacy practices, please contact us at: [Your Privacy Contact Email – e.g., [email address removed]].

• We may collect and process the following types of personal data:
  • Identity Data: Name, title.
  • Contact Data: Email address, phone number, address (for bookings/billing).
  • Booking Data: Details about the Services you have booked, dates, times, group size, specific requirements.
  • Transaction Data: Details about payments to and from you (processed securely via our payment processors; we typically do not store full card details).
  • Technical Data: Internet protocol (IP) address, browser type/version, time zone setting, browser plug-in types/versions, operating system, platform, and other technology on the devices you use to access this Website.  
  • Usage Data: Information about how you use our Website and Services (e.g., pages visited, collected via cookies – see Section 9).  
  • Communications Data: Your preferences in receiving marketing (if applicable) and your communication preferences, records of correspondence.
  • Health Data (Potentially – Special Category): Only if voluntarily provided by you and necessary for ensuring your safety during certain Services (e.g., sauna contraindications, allergy information for events). [Note: Processing health data requires a specific lawful basis and explicit consent may be needed – Legal review essential here].

• We collect data through various methods, including:
  • Direct Interactions: When you fill in forms on our Website (e.g., booking forms, contact forms), correspond with us by phone, email, or otherwise, or make a booking.
  • Automated Technologies: As you interact with our Website, we may automatically collect Technical Data and Usage Data using cookies and similar technologies (see Section 9).
  • Third Parties: We may receive data from third-party booking platforms or payment processors when you make a booking or payment.

• We will only use your personal data when the law allows us to. Most commonly, we rely on the following lawful bases:   
  • Contract: Processing is necessary to fulfil a contract with you (e.g., processing your booking for a pottery class or sauna session).
  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services, website security, responding to inquiries), provided your interests and fundamental rights do not override those interests.
  • Consent: Where you have given us explicit consent to process your data for a specific purpose (e.g., subscribing to a marketing newsletter). You can withdraw consent at any time.
  • Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation.

• We use your personal data for purposes including:
  • Processing and managing your bookings and payments for our Services.
  • Communicating with you about your bookings, inquiries, or requests.
  • Providing customer support.
  • Improving our Website, Services, and customer experiences (e.g., analysing usage data).
  • Ensuring the health and safety of participants in our Services (where applicable).
  • Sending marketing communications (only where you have consented).
  • Complying with legal and regulatory requirements.
  • Managing our business operations (e.g., record keeping, accounting).

• We may need to share your personal data with trusted third parties for specific purposes, such as:
  • Payment processors (e.g., Stripe, PayPal) to handle secure payments.
  • Booking system providers to manage reservations.
  • Email service providers (e.g., Mailchimp) to send newsletters (with your consent).
  • Professional advisors (e.g., lawyers, accountants).
  • Regulatory bodies (e.g., HMRC) where required by law.
• We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.  
• We do not sell your personal data to third parties.
• [If you use services outside the UK/EEA, mention international transfers and safeguards – Needs Legal Review].

• We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorised way. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know.  
• While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure.  

• We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Typically, booking information may be kept for [e.g., 6 years] after the end of the relevant tax year for compliance purposes.  

• Under UK data protection law, you have rights including:
  • Right of Access: To request copies of your personal data.
  • Right to Rectification: To request correction of inaccurate personal data.
  • Right to Erasure: To request deletion of your personal data (under certain conditions).
  • Right to Restrict Processing: To request restriction of processing (under certain conditions).
  • Right to Data Portability: To request transfer of your personal data to another organisation (under certain conditions).
  • Right to Object: To object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision making and profiling.
• To exercise any of these rights, please contact us at [Your Privacy Contact Email]. We may need to request specific information from you to help us confirm your identity.
• You also have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns first.  

• What are Cookies? Cookies are small text files placed on your device (computer, phone, tablet) when you visit websites. They are widely used to make websites work, or work more efficiently, as well as to provide information to the site owners.  
• How We Use Cookies: We use cookies to:
  • Ensure Essential Functionality (Strictly Necessary Cookies): These are required for the operation of our Website, such as enabling you to log into secure areas or use a booking system. They do not require your consent but we inform you about them.
  • Analyse Website Performance (Analytical/Performance Cookies): These allow us to recognise and count visitors and see how they move around our Website (e.g., using Google Analytics). This helps us improve how our Website works. These cookies usually collect information anonymously and require your consent.
  • Enhance Website Functionality (Functionality Cookies): These are used to recognise you when you return to our Website and remember choices you make (e.g., language preferences). These require your consent.
  • [Targeting/Advertising Cookies – Include only if used, e.g., via social media pixels]: These record your visit, pages visited, and links followed to deliver more relevant advertising. These require your explicit consent.
• Specific Cookies Used: [You should ideally list specific cookies here, often managed via a Consent Management Platform (CMP) / Cookie Banner tool. Example: _ga (Google Analytics), session cookies, booking system cookies].
• Third-Party Cookies: Please note that third parties (e.g., Google Analytics, embedded video providers like YouTube/Vimeo, social media platforms) may also set cookies over which we have no control.
• Managing Cookies: When you first visit our Website, you will be presented with a cookie banner requesting your consent for non-essential cookies. You can manage your preferences via the banner or tool provided. You can also block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you block all cookies (including essential cookies), you may not be able to access all or parts of our Website or use all its functionalities.  

• Our Services and Website are not intended for children under the age of [Specify age, e.g., 16 or 18], and we do not knowingly collect data relating to children.

• Our Website may contain links to other websites. This privacy policy only applies to this Website, so when you link to other websites, you should read their own privacy policies.  

• We keep this policy under regular review and may update it from time to time. Any changes will be posted on this page with an updated revision date.

• For any questions regarding this Privacy & Cookie Policy, please contact us at: [Your Privacy Contact Email].