Privacy Policy

1. Who We Are

This Privacy Policy explains how The Bridal Room Atherstone (operated by Vicky (Sole Trader), "we", "us", or "our"), processes and protects personal information collected through our website (thebridalroomatherstone.co.uk), native booking engine, and flagship showroom.

Business Structure: Sole Trader (United Kingdom)
Showroom & Trading Address: 65 Station Street, Atherstone, Warwickshire, England, CV9 1DB
Contact: info@thebridalroomatherstone.com | 01827 946 098

2. Information We Collect

We collect only the personal information required to arrange private styling consultations, fulfill bridal gown orders, and maintain a secure environment:

• Contact & Booking Details: Name, email address, telephone number, wedding date, guest numbers, dietary notes, and styling preferences submitted via our booking engine.
• In-Store Orders & Measurements: Body measurements (bust, waist, hip), sizing sign-offs, and signed sales agreements when purchasing a made-to-order or sample gown.
• Lookbook Shortlist: Saved gowns are stored locally on your device via browser localStorage and are only transmitted to us if you choose to attach them to an appointment.
• Payment Information: VIB appointment deposits (£50) are processed directly by PayPal. We never collect or store your payment card numbers or bank credentials on our servers.
• CCTV Footage: Closed-circuit television images captured in the communal areas of the boutique for safety, security, and crime prevention. CCTV is never operated in private fitting or dressing areas.

3. How We Use Your Data & Lawful Bases

Under the UK GDPR, we process your personal data on the following grounds:

• Contractual Necessity: To host your consultation, process booking deposits, order made-to-order gowns with designers, and handle alterations.
• Legitimate Interests: To manage appointment scheduling, temporarily hold slots for 10 minutes to prevent double-booking, operate boutique security CCTV in communal areas, and answer customer enquiries.
• Legal & Tax Obligations: To maintain statutory accounting and sales records required by HMRC.
• Consent: For non-essential analytics cookies and telemetry, which only activate after your confirmation.

4. Service Providers & Tracking

We do not sell or share personal data with external marketers. We work with trusted processors to operate our digital platform:

• PayPal (Europe) S.à r.l. et Cie, S.C.A.: Secure, PCI-compliant processing of booking deposits.
• Google Workspace & Calendar: Slot scheduling and appointment management.
• Resend: Delivery of automated booking confirmations, reminders, and inquiry receipts.
• Cloudflare: Website hosting, edge security, and temporary hold locking.
• Google Analytics 4 & Microsoft Clarity: Subject to your cookie preferences, we use anonymized analytics and user interaction tracking to improve site navigation. Microsoft Clarity is configured to mask all sensitive form inputs automatically.

5. Data Retention

We retain your information only as long as necessary:

• Appointment Records: Held until your wedding date has passed, or deleted earlier upon request.
• Temporary Hold Locks: Automatically wiped after 10 minutes.
• CCTV Recordings: Overwritten automatically every 30 days unless required for an ongoing inquiry.
• Purchase & Financial Records: Retained for 6 years in accordance with UK statutory tax and accounting regulations.

6. Your Rights

Under the UK GDPR, you have the right to request access to the personal data we hold about you, request corrections, or ask for your details to be deleted (subject to our legal record-keeping obligations).

To exercise any of these rights, please contact us at info@thebridalroomatherstone.com. If you have unresolved concerns, you also have the statutory right to raise the matter with the UK Information Commissioner's Office (ico.org.uk).