Privacy Policy

1. Who We Are

The Buggy Spa ("we", "us", "our") provides professional buggy, car-seat and pushchair cleaning services. Our registered business operates in the United Kingdom.

For any privacy-related queries, contact us at: david@thebuggyspa.co.uk

2. What Information We Collect

We collect the following personal information when you use our website or book our services:

• Contact details – name, email address, phone number.
• Booking information – service type, preferred date/time, delivery address.
• Account information – username and password (stored as a secure hash) if you register on our portal.
• Communications – messages you send us via the contact form.
• Technical data – IP address, browser type, pages visited (collected automatically via server logs).

3. How We Use Your Information

We use your personal data to:

• Process and manage your bookings and payments.
• Respond to enquiries and provide customer support.
• Send booking confirmations and service reminders.
• Improve our website and services.
• Comply with our legal and regulatory obligations.

We will only send you marketing communications if you have explicitly opted in, and you can withdraw consent at any time.

4. Legal Basis for Processing

Under UK GDPR we process your personal data on the following bases:

• Contract – processing is necessary to fulfil your booking.
• Legitimate interests – to operate and improve our services.
• Legal obligation – where required by law.
• Consent – for optional marketing communications.

5. Sharing Your Information

We do not sell or rent your personal data to third parties. We may share data with:

• Payment processors – to securely handle transactions.
• IT service providers – hosting and website maintenance under strict data-processing agreements.
• Authorities – if required by law or to protect against fraud or illegal activity.

6. Data Retention

We retain your personal data only as long as necessary:

• Customer and booking records: 6 years (HMRC compliance).
• Marketing consent records: until you withdraw consent.
• Server logs: 90 days.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your data (the "right to be forgotten"), subject to legal obligations.
• Restrict or object to processing.
• Data portability – receive your data in a structured, machine-readable format.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email us at david@thebuggyspa.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

Our website uses only strictly necessary session cookies to maintain your login state and improve security. We do not use tracking or advertising cookies. No cookie consent banner is required for strictly necessary cookies under UK law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data including HTTPS encryption, hashed passwords, and restricted database access. No method of transmission over the internet is 100% secure; we encourage you to contact us promptly if you suspect any misuse.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of our website following any changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or how we handle your data, please contact:

The Buggy Spa
Email: david@thebuggyspa.co.uk