Data Use Note (Privacy Policy)

1. Overview

This notice explains how Quarterbound Bookshops collects, uses, and protects personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or booking a route, you acknowledge this policy.

2. Data Controller

3. Data We Collect

• Name and contact details (email, phone) to confirm bookings and respond to enquiries
• Optional accessibility or dietary information when relevant to an event
• Aggregated, anonymised analytics (see Cookies & Preferences)

4. Purposes & Legal Bases

• Booking administration and customer support (contract performance)
• Legal and accounting records (legal obligation)
• Improving routes and site usability (legitimate interests)

Consent is requested for non-essential cookies and any optional updates.

5. Retention

Booking data are retained for no longer than 12 months after the event unless a longer period is legally required. We review retention schedules annually.

6. Sharing

We do not sell or rent personal data. Limited sharing occurs with payment processors and insurers strictly for operational needs. Each partner adheres to equivalent data-protection standards and contracts.

7. International Transfers

We do not transfer personal data outside the United Kingdom. If a future transfer becomes necessary, we will implement appropriate safeguards and update this notice.

8. Security

• HTTPS across the site
• Encrypted storage and role-based access
• Regular software updates and vulnerability monitoring

9. Your Rights

Under UK GDPR you may request access, rectification, erasure, restriction, or data portability, and object to processing where applicable. To exercise rights, contact [email protected]. You may also contact the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Children

Our services are for adults and older teens attending with guardians where required. We do not knowingly collect children’s data online.

11. Updates

Policy revisions will appear on this page with an updated effective date.

Effective date: October 2025