Saffron-breeze

Saffron-breeze ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our website and services.

Information We Collect

We collect information that you provide directly to us, including:

Name and contact details (email address)
Programme preferences and booking information
Communications you send to us
Accessibility requirements and dietary preferences relevant to programme participation

We also automatically collect certain technical information when you visit our website:

IP address and browser type
Pages visited and time spent on our site
Referring website addresses
Device information

How We Use Your Information

We use the information we collect for the following purposes:

To process and manage programme bookings
To respond to your enquiries and provide customer support
To send you information about your bookings and relevant programme updates
To improve our website and services
To comply with legal obligations

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

Contract: Processing necessary for the performance of a contract with you (e.g., programme bookings)
Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
Consent: Where you have given explicit consent for specific processing activities
Legal obligation: Processing necessary to comply with applicable laws

Data Sharing

We do not sell your personal information to third parties. We may share your information with:

Programme facilitators (limited to information necessary for your participation)
Service providers who assist with our operations (e.g., email services, payment processors)
Legal authorities when required by law

All third parties with whom we share data are required to protect your information in accordance with applicable data protection laws.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically:

Booking and transaction records: 7 years
Marketing preferences: until you withdraw consent
Website analytics data: 26 months

Your Rights

Under UK data protection law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal requirements)
Object to or restrict certain processing activities
Request data portability
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at [email protected].

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Transfers

Your information is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: 47 Heritage Lane, Jewellery Quarter, Birmingham B18 6NQ, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.