Privacy Policy
Your data, simply.
Placeholder GDPR-aware text. Final wording must be reviewed by a qualified data protection lawyer.
What we collect
Through the booking form: your name, contact details, emergency contact details, dietary requirements, and any medical information you choose to share.
How we store it
Booking data is stored in our backend database (managed by Lovable Cloud, hosted on Supabase in the EU). Access is restricted to James and authorised assistants.
Payments
Payments are processed by Stripe. We do not see or store full card numbers. Stripe's privacy policy applies to that processing.
Your rights (GDPR)
You can request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days.
Retention
Booking records are kept for the period required by applicable tax and liability law, then deleted or anonymised.