Privacy Policy

1. Who is the data controller

londonspinparlour.co.uk is the data controller for any personal information collected on this Site. You can reach our privacy team at privacy@londonspinparlour.co.uk or through the contact page.

2. What we collect

We collect only the personal data that is strictly necessary to operate the Site:

• Form submissions. If you contact us, we collect the name, email address and message you provide.
• Technical data. IP address, browser type, device type, referring URL, pages visited and approximate location, captured automatically by our analytics tooling.
• Cookie preferences. Whether you accepted or declined non-essential cookies, stored in your browser's local storage.

We do not collect financial information, government-issued identifiers or any data classed as a special category under UK GDPR.

3. How we use your data

• To respond to enquiries you send via the contact form.
• To measure aggregate site traffic and improve editorial coverage.
• To detect, prevent and address fraud, abuse and security incidents.
• To meet legal obligations, including responses to lawful regulatory requests.

4. Legal basis for processing

We rely on the following lawful bases under UK GDPR:

• Consent — for non-essential cookies and analytics tracking.
• Legitimate interest — to operate, secure and improve the Site.
• Legal obligation — where we are required to retain or disclose data by UK law.

5. Sharing your data

We do not sell personal data and we do not share contact-form data with operators. We use a limited number of carefully chosen processors:

• A hosting provider that stores the Site's files and request logs.
• A privacy-friendly analytics service that records aggregate traffic.
• An email-delivery provider used to handle correspondence.

Each processor is bound by a data-processing agreement consistent with UK GDPR.

6. International transfers

Where data is transferred outside the United Kingdom, we rely on UK-approved Standard Contractual Clauses or equivalent safeguards. We never transfer data to a country without an adequate level of protection unless an additional safeguard is in place.

7. How long we keep data

Contact-form submissions are retained for 24 months and then permanently deleted. Aggregate analytics data is retained for up to 26 months. Server access logs are retained for 90 days for security purposes.

8. Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request erasure of your data (the "right to be forgotten").
• Object to or restrict processing.
• Withdraw consent for non-essential cookies at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, email privacy@londonspinparlour.co.uk. We will respond within one calendar month.

9. Children

The Site is intended for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted personal information, contact us immediately so it can be removed.

10. Changes to this policy

We may revise this policy from time to time. Material changes will be highlighted on the homepage and the "last updated" date above will be revised accordingly.

11. Contact

Privacy enquiries: privacy@londonspinparlour.co.uk — or use the contact page. UK Information Commissioner's Office: ico.org.uk.