Privacy notice

Your privacy matters to us. This notice explains how we use personal information when you visit our website, contact us or book a workshop.

Thomas Sidney Jeffery, a sole trader trading as Glitz Happens, is responsible for your personal information.

You can contact us at glitz.happens4@gmail.com or write to 59 Leazes Court, Barrack Road, Newcastle Upon Tyne, NE4 5BA.

When you book, we collect your name, email address, the workshop you choose, the number of places you select, your booking reference and your agreement to the booking terms. We receive transaction and refund information from Stripe. We do not ask for a phone number, and we do not require a customer account or your date of birth for ordinary bookings.

When you enquire about a private group, we collect the details you provide: your name, email address, approximate group size, preferred date and message. Please avoid putting sensitive medical information into the enquiry form.

Our own website does not use analytics or advertising cookies, and we do not run tracking pixels. Like most websites, our hosting provider automatically records standard technical and security information about visits — such as IP address, browser type, device type and the pages requested — which is used only to keep the site running and to prevent misuse.

We normally receive information directly from you and payment information from Stripe. If another person contacts us to transfer a booking into your name, we may receive your name and the contact details needed to arrange your attendance from them. We will make this notice available to you when we contact you.

We use booking details to arrange and provide your workshop, process payment, send essential updates and manage cancellations or refunds. Our legal basis is performing our contract with you, or taking steps you request before entering it.

We use general correspondence to answer questions and resolve complaints, and relevant technical information to prevent misuse and protect the service. Our legal basis is our legitimate interest in providing customer service, protecting the business and handling legal claims, balanced against your rights.

We keep the records needed to meet tax and accounting requirements because we have legal obligations to do so. Booking confirmations and workshop updates are service messages. Booking or enquiring does not subscribe you to marketing emails.

Payment details are entered directly with Stripe through its hosted checkout. Our website does not store your full card number or card security code. We receive the transaction details needed to confirm payment, manage refunds and maintain records. Stripe also uses information for its own payment-service and legal purposes, as explained in its Privacy Policy: https://stripe.com/gb/privacy.

Only people authorised to run Glitz Happens and the service providers needed to operate the website, bookings and communications can access the information required for those purposes.

Our providers are:

• Stripe — payment processing and related payment services.
• Lovable — website hosting and the platform this site is built and run on.
• Lovable Cloud (Supabase) — the database that holds booking records, enquiries and administration.
• Lovable Emails — booking confirmations and enquiry communications.

We may also share relevant records with professional advisers or authorities when needed for legal obligations or legal claims. We do not sell personal information. A link to our Facebook page takes you to Meta's service, where Meta's own privacy practices apply.

Our database is hosted in Amazon Web Services' eu-west-1 region in Ireland, which is covered by UK adequacy regulations for the European Economic Area.

Our website hosting runs on a global content-delivery network, so technical information about visits to the site may be processed in other countries. Stripe processes payment information under its own privacy practices, linked above.

We keep records only as long as needed for the purposes above:

• Enquiries that do not become bookings: up to 12 months after our last substantive contact.
• Abandoned, unpaid bookings: up to 30 days after the checkout reservation expires, unless needed to investigate a specific payment or security issue. This is separate from the much shorter reservation of workshop places during checkout.
• Core booking records needed for contractual claims: up to six years after the workshop, limited to the information needed to evidence the booking, the agreed terms, payment and any dispute, rather than all incidental messages or optional contact details.
• Tax and accounting records: at least five years after the 31 January Self Assessment submission deadline for the relevant tax year, and longer where a legal requirement or ongoing enquiry requires it.
• Technical and security logs recorded by our hosting provider: held under that provider's own retention settings, and never used for marketing.

We delete or anonymise information when it is no longer needed. A complaint, legal claim or tax enquiry may require relevant records to be retained longer; we keep only the information needed for that purpose.

Our own website does not set advertising, analytics or social-media tracking cookies. If you sign in to the administration area, your browser stores the small amount of technical data needed to keep you signed in.

When you pay, Stripe's secure checkout page sets the cookies it needs to process the payment. Those are set by Stripe, not by us, and are governed by Stripe's privacy practices.

You can request access to your personal information and correction of inaccurate information. Depending on the circumstances, you can also ask us to delete information, restrict its use or provide a portable copy.

You have the right to object to processing based on our legitimate interests on grounds relating to your circumstances. If we rely on consent for a separate optional use, you can withdraw that consent at any time without affecting the lawfulness of earlier use.

Email glitz.happens4@gmail.com to exercise your rights or raise a privacy concern. We may need to verify your identity before disclosing information. You also have the right to complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

We will update this notice when our practices change and show the latest revision date above. We will draw material changes affecting you to your attention where appropriate.