Privacy Policy

Overview

This privacy notice tells you what to expect us to do with your personal information:

• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• Sharing information outside the UK
• How to complain

Please email hello@teapotandtumble.couk if you have any questions.

What Information We Collect, Use and Why

We collect or use the following information to provide services and goods, including delivery:

• Names and contact details
• Purchase or account history
• Payment details (including card or bank information for transfers and direct debits)
• Health and safety information
• Website user information (including user journeys and cookie tracking)
• Information relating to compliments or complaints

We collect or use the following information to comply with legal requirements:

• Name
• Contact information
• Financial transaction information
• Health and safety information
• Safeguarding information

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• Purchase or service history
• Financial transaction information
• Information relating to health and safety
• Correspondence

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information.

You have the following rights:

• The right to access your personal data
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent

If you make a request, we must respond within one month.

To make a request, please contact us using the details above.

Our Lawful Bases for Processing

To provide services and goods:

• Contract
• Legal obligation
• Legitimate interests

Our legitimate interests are to operate and improve our business, manage bookings and enquiries, and ensure the efficient running of our services.

To comply with legal requirements:

• Legal obligation

To deal with queries, complaints or claims:

• Contract
• Legal obligation
• Legitimate interests

Our legitimate interests are to respond to enquiries, resolve complaints, and maintain good customer service.

Where We Will Get Personal Information From

• Directly from you
• CCTV footage or other recordings
• Suppliers and service providers

How Long We Keep Information

We only keep personal information for as long as necessary to fulfil the purposes we collected it for, including to meet any legal, accounting, or reporting requirements.

For example:

• Booking and customer records are typically kept for up to 24 months
• Financial and transaction records are kept for at least 6 years
• Accident and incident records are kept as required for health and safety and legal purposes

We regularly review and securely delete information when it is no longer needed.

Who We Share Information WIth

Data processors - we use service providers to help run our business, including:

• Online booking system providers (UK / EU)
• Payment processing providers (UK / EU)
• Website hosting and website platform providers (UK / EU)
• Email and communication service providers (UK / EU)

These providers:

• Process and store booking and contact information
• Handle online payments
• Support our website and communications

Others we share personal information with:

• Organisations we need to share information with for safeguarding reasons
• Relevant regulatory authorities
• Organisations we’re legally obliged to share personal information with
• Emergency services

Sharing information outside of the UK:

Where necessary, we transfer personal information outside the UK in accordance with UK GDPR, ensuring appropriate safeguards are in place.

We use the following providers:

Organisation: Wix
Category: Website hosting and booking platform provider
Location: Global (including EU and United States)
Safeguard: Covered by adequacy regulations or appropriate safeguards such as Standard Contractual Clauses

Organisation: SumUp
Category: Payment processing provider
Location: European Union
Safeguard: Covered by adequacy regulations or appropriate safeguards such as Standard Contractual Clauses

Our data processors may also transfer data outside the UK where necessary and comply with UK GDPR.

How to Complain

If you have concerns about how we use your personal data, please contact us using the details above.

If you remain unhappy, you can complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Teapot & Tumble