Privacy Policy
Draft: please review this policy (ideally with a legal adviser) before launch.
This policy explains how Backstairs Ltd, trading as Backstairs Studio ("we", "us"), handles personal information collected through backstairsstudio.com.
What we collect
- Enquiry and contact forms. When you send an enquiry or message we receive the details you enter: your name, email address, and the information you choose to include.
- Bookings. Portrait sessions are booked through Acuity Scheduling, embedded on our Book a Session page. Acuity collects the booking details you provide (such as your name, contact details, and appointment choice) and processes payment where required, on our behalf.
- Newsletter. If you subscribe, your email address and consent are collected through a form provided by Fillout and used to send occasional updates. You can unsubscribe at any time.
- Server logs. Like most websites, our hosting server briefly records technical information such as IP addresses to keep the site secure and working.
We do not use analytics, advertising trackers, or social media tracking pixels.
How we use it
Enquiries are used only to reply to you and, where relevant, to prepare a proposal or arrange a commission. Booking details are used to provide your session. Newsletter details are used to send the updates you asked for.
The lawful bases are our legitimate interest in responding to enquiries, taking steps at your request before entering into a contract, performing a contract (bookings), and your consent (newsletter).
Where it is stored
Enquiries are stored securely in this website's database and may be forwarded to our business email account. Booking and newsletter information is held by Acuity Scheduling and Fillout as our processors. We do not sell personal information or share it for third-party marketing.
How long we keep it
Enquiries are kept only as long as needed to respond and for related business records. Booking and commission information is kept for as long as needed for business, accounting, and legal records.
Cookies
This site itself uses only strictly necessary cookies: one that protects forms against misuse, and one that keeps the site administrator signed in. The embedded booking and newsletter tools may set their own cookies when you use them, to provide those services.
Your rights
Under UK data protection law you can ask to see, correct, or delete the personal information we hold about you, object to how it is used, or withdraw consent. Contact us using the details on the Contact page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).