Privacy Policy

1. Introduction

thebodytaylor(“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Personal Information

When you contact us or request a quote, we may collect:

• Name and company name
• Email address
• Phone number
• Postcode and project location
• Project details and requirements

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide quotes
• Deliver our services and coordinate with specialists
• Communicate with you about your projects
• Improve our website and services
• Comply with legal obligations

2.3 Event Registration Data

When you register for an event, we collect:

• Full name and email address
• Phone number (optional)
• Payment status and amount for paid events
• IP address (for fraud and rate-limit purposes, retained for 90 days)

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Consent: When you submit an enquiry form
• Contract Performance: To provide services you have requested
• Legitimate Interests: To improve our services and communicate with clients
• Legal Obligation: To comply with UK and EU laws

5. Data Sharing and Third-Party Processors

We may share your information with:

• Email Service Provider: We use a third-party SMTP provider to send transactional emails (booking confirmations, enquiry responses). Your email address is transmitted to this service for delivery purposes only.
• Google Analytics (with consent only): If you accept analytics cookies, anonymised usage data is shared with Google LLC. Google may process this data outside the UK/EEA. See Google's Privacy Policy for details.
• Legal Compliance: When required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition

We do not sell or rent your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Enquiry data is typically retained for 3 years.

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please use our contact form or email us at [email protected]. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS)
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments

9. Cookies

Our website uses the following types of cookies:

• Essential / Functional: Your dark/light mode preference is stored in your browser's local storage. No server-side cookie is set for this.
• Session: An HTTP-only session cookie is set when you are logged in to the admin area. This cookie contains no personal information.
• Analytics (optional, consent required): If you accept analytics cookies via our cookie banner, we use Google Analytics (via Google Tag Manager) to collect anonymised data about how visitors use our site (pages viewed, time on site, etc.). No personally identifiable information is sent to Google Analytics. You may decline or withdraw consent at any time by adjusting your cookie preferences.

We do not use advertising or marketing cookies.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of our services constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

13. Supervisory Authority

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: