1. Introduction

Canvas & Co is committed to protecting your personal data and respecting your privacy. This GDPR & Data Protection Policy explains how we collect, use, and store personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant privacy laws.

By using our website fCanvas & Co and our services, you agree to the terms of this policy.

2. Who We Are

Canvas & Co
Email: lou@festivalweddings.co.uk
Phone: 07875 403085

We are the data controller, which means we decide how your personal data is collected, used, and stored.

3. Information We Collect

We may collect and process the following personal information:

Name and contact details (email address, phone number, postal address)

Booking details (dates, number of guests, special requests)

Payment information (processed securely through third-party payment providers)

Communication records (emails, contact form messages, social media messages)

Website usage data (through cookies and analytics)

4. How We Use Your Data

We use your personal data to:

Manage bookings and provide services you’ve requested

Respond to enquiries and provide customer support

Send important information about your booking

Improve our website and services

Comply with legal obligations

We will never sell your personal data to third parties.

5. Legal Basis for Processing

We process personal data under the following lawful bases:

Contract: to fulfil a booking or service request

Consent: where you have opted in (e.g., marketing emails)

Legal obligation: to comply with legal requirements

Legitimate interest: to improve our services and protect our business

6. Data Sharing and Third Parties

We may share your data with trusted third parties who help us deliver our services, including:

Payment processors (e.g., Stripe, PayPal)

Email and booking software providers

Website analytics services (e.g., Google Analytics)

These third parties only use your data for the purpose we specify and are required to keep it secure.

7. Data Retention

We only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting requirements.
Once your data is no longer needed, it will be securely deleted or anonymised.

8. Your Rights Under GDPR

You have the right to:

Access the personal data we hold about you

Request correction of inaccurate information

Request deletion of your personal data (in certain circumstances)

Object to or restrict processing of your data

Withdraw consent at any time (if applicable)

Request data portability

To exercise any of these rights, please contact us at lou@festival-weddings.co.uk.

9. Data Security

We take data security seriously and use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

10. International Transfers

If we transfer your personal data outside the UK or EEA, we will ensure appropriate safeguards are in place to protect your data in line with GDPR requirements.

11. Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience and analyse website traffic. For more information, please refer to our Cookie Policy
.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in the law or our practices. Any updates will be posted on this page with a revised “Last updated” date.

13. Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk
.

14. Contact Us

If you have questions about this GDPR & Data Protection Policy, please contact:
Canvas&Co
Email: lou@festivalweddings.co.uk
Phone: 07875 403085