Privacy Policy

Your data, simply.

Draft — pending legal review

Placeholder GDPR-aware text. Final wording must be reviewed by a qualified data protection lawyer.

What we collect

Through the booking form: your name, contact details, emergency contact details, dietary requirements, and any medical information you choose to share.

How we store it

Booking data is stored in our backend database (managed by Lovable Cloud, hosted on Supabase in the EU). Access is restricted to James and authorised assistants.

Payments

Payments are processed by Stripe. We do not see or store full card numbers. Stripe's privacy policy applies to that processing.

Your rights (GDPR)

You can request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days.

Retention

Booking records are kept for the period required by applicable tax and liability law, then deleted or anonymised.