Drift & Embers - GDPR & Privacy policy.

15.1 Data Collection

Drift & Embers collects and processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect the following information:

  • Name

  • Contact details (email address, phone number)

  • Booking and payment information

  • Health declarations provided voluntarily for safety purposes

  • Communication records relating to enquiries or bookings

15.2 Use of Personal Data

Personal data is collected and used solely for the purposes of:

  • Managing bookings and payments

  • Communicating with guests regarding appointments or services

  • Ensuring health, safety, and operational compliance

  • Improving our services and customer experience

  • Legal, accounting, and regulatory obligations

We will not sell, rent, or share personal data with third parties for marketing purposes.

15.3 Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Performance of a contract (to deliver booked services)

  • Legal obligation

  • Legitimate business interests

  • Explicit consent, where required

15.4 Data Storage & Security

  • Personal data is stored securely using appropriate technical and organisational measures.

  • Access to personal data is restricted to authorised personnel only.

  • Data is retained only for as long as necessary to fulfil its purpose or comply with legal requirements.

15.5 Sharing of Data

Personal data may be shared only where necessary with:

  • Booking and payment service providers

  • Legal or regulatory authorities where required by law

All third parties are required to process data in accordance with UK GDPR standards.

15.6 Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of data (where applicable)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time where consent is the lawful basis

Requests can be made by contacting Drift & Embers directly.

15.7 Marketing Communications

  • Guests will only receive marketing communications where consent has been provided.

  • You may opt out of marketing communications at any time using the unsubscribe option or by contacting us directly.

15.8 Data Breaches

In the unlikely event of a data breach, Drift & Ember will take immediate steps to minimise impact and will report the breach to the Information Commissioner’s Office (ICO) where legally required.

15.9 Privacy Policy Updates

Drift & Embers reserves the right to update this Privacy Policy at any time.
The most current version will always apply and be available upon request or via our website.

Homepage
Homepage