Privacy

Who I am

Qi & Tea is run by Tom, a sole trader based in Bristol. I decide how your personal information is used, so under UK data protection law (UK GDPR) I am the "controller" of it. If you have any question about your information, email me at hello@qiandtea.com.

What I collect

• When you book: your name, email address, how many places you want, and anything you write in the notes box.
• If you join a waiting list: your name and email address.
• Payment: you pay in Stripe's secure payment form. Your card details go straight to Stripe and never reach this website or me. Stripe tells me whether the payment went through and how much was paid.
• If you email me: your email address and whatever you choose to write.
• Technical logs: like any website, the server keeps short-lived logs of requests (such as IP address, browser type and the page asked for) to keep the site working and secure.

If you tell me about a health condition or access need in the notes, I use it only to look after you at the ceremony. You don't have to share it, and you can ask me to delete it at any time.

Why I use it

To run your booking: to hold your places, take payment, send your confirmation (with directions) and a reminder, and to contact you if anything about the ceremony changes. If you're on a waiting list, it's to tell you when a place or a new date comes up.

The legal basis is contract: I need these details to provide the ceremony you've booked, or to do what you've asked before booking. Technical logs are kept for my legitimate interest in keeping the site secure. I don't send marketing emails, and I don't sell or rent your information to anyone.

Who it's shared with

• Stripe processes payments. It handles your card details under its own privacy policy and may process data outside the UK with the legal safeguards UK law requires.
• Hostinger hosts this website, its booking database and my email.
• Google Fonts: the site's lettering is loaded from Google, so your browser connects to Google's servers, which see your IP address. No Google cookies are set.

I'd only share your information with anyone else if the law required it.

How long I keep it

• Bookings are kept for 2 years after the ceremony, for my accounts, then deleted.
• Waiting-list details are kept until the date has passed (they're deleted the night after) or until you remove yourself using the link in the email.
• Stripe keeps its own payment records as financial law requires.
• Database backups are kept for 30 days, so deleted information is gone from backups within a month.

Cookies

This site uses no tracking, advertising or analytics cookies, so there's nothing to accept. When you pay, Stripe's payment form may set cookies it needs to process the payment and prevent fraud. The only other cookie is a login cookie used by me when I sign in to manage the site.

Your rights

You can ask me, free of charge, to:

• give you a copy of the information I hold about you;
• correct anything that's wrong;
• delete your information (unless I have to keep it, for example for my accounts);
• stop or limit how I use it, or give it to you in a form you can take elsewhere.

Email hello@qiandtea.com. I'll reply within one month.

If you're unhappy with how I've handled your information, please tell me first and I'll try to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.