Liverpool Hen Parties is committed to respecting and protecting your privacy. This policy sets out how we collect, process, store, and protect your personal information in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand how we handle your personal data.
01 DATA CONTROLLER & LEGAL IDENTITY
- Liverpool Hen Parties is a trading name operated by Joan Liggett, Sole Trader, Liverpool, United Kingdom.
- For the purposes of the UK GDPR and Data Protection Act 2018, Joan Liggett is the designated Data Controller responsible for your personal data.
- If you have any questions or wish to exercise your rights, you can contact our Data Controller directly at info@liverpoolhenparty.co.uk or by calling 0151 272 0001.
02 INFORMATION WE COLLECT
- Lead Booker Information: Full name, email address, telephone number, and postal address.
- Party & Booking Details: Event dates, group numbers, preferred accommodation types, activity selections, and special requests.
- Group Member Information: Names and specific dietary, accessibility, or medical requirements provided by the Lead Booker to facilitate safe event delivery.
- Financial Information: Payment records and transaction reference numbers. Payments are processed through secure, PCI-DSS compliant third-party payment processors; we do not store full credit or debit card numbers on our servers.
- Technical Data: IP address, device type, browser information, and site interaction data captured via essential and analytical cookies.
03 LEAD BOOKER RESPONSIBILITY & GROUP CONSENT
- When the Lead Booker provides personal information relating to other guests within their party (including names, contact details, dietary restrictions, or mobility needs), the Lead Booker warrants that they have obtained the explicit prior consent of those individuals to share their information with Liverpool Hen Parties.
- The Lead Booker agrees to direct their group members to this Privacy Policy so that they are aware of how their data will be processed.
04 LAWFUL BASES FOR PROCESSING UNDER UK GDPR
- We process personal data only where a valid legal basis exists under Article 6 of the UK GDPR:
- Contractual Necessity (Article 6(1)(b)): To prepare custom quotes, confirm provisional bookings, coordinate with accommodation and activity suppliers, administer your event, and issue payment invoices.
- Legitimate Interests (Article 6(1)(f)): To respond to pre-booking enquiries, manage our on-call customer support, maintain website security, prevent fraud, and improve our services.
- Legal Obligation (Article 6(1)(c)): To maintain financial and transactional records in compliance with UK HMRC taxation and statutory accounting laws.
- Consent (Article 6(1)(a)): For non-essential cookies and marketing communications. You may withdraw consent at any time.
05 HOW WE SHARE YOUR INFORMATION
- We only disclose your personal information to third parties strictly necessary to deliver your confirmed booking:
- Accommodation Partners & Keyholders: Guest manifests, names, arrival times, and check-in security details.
- Activity Providers & Venues: Group size, attendee names, scheduled time slots, and dietary/accessibility requests.
- Secure Payment Processors: Regulated payment gateways for processing card transactions and PayPal orders.
- Professional Advisers & Regulators: Accountants, legal counsel, or law enforcement bodies where strictly required by UK law.
- We never sell, trade, or rent your personal data to third parties for marketing purposes.
06 DATA RETENTION SCHEDULE
- We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:
- General Enquiries: Personal details from enquiries that do not result in a confirmed booking are securely removed after 12 months.
- Confirmed Bookings & Invoices: Booking documentation, contracts, and financial transaction records are retained for 6 years following the end of the relevant financial year, in accordance with UK HMRC statutory accounting requirements.
- Marketing Subscriptions: Retained until you unsubscribe or withdraw your consent.
07 YOUR STATUTORY RIGHTS
- Under UK data protection legislation, you possess the following rights:
- Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure ('Right to be Forgotten'): Request deletion of your data where no overriding legal or statutory retention grounds apply.
- Right to Restriction: Request restriction of data processing in certain circumstances.
- Right to Data Portability: Request transmission of your data in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
08 HOW TO EXERCISE RIGHTS & ICO COMPLAINTS
- To exercise any of your data rights, please contact our Data Controller at info@liverpoolhenparty.co.uk. We respond to all validated requests within one calendar month free of charge.
- You have the statutory right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk/make-a-complaint/
- Helpline: 0303 123 1113
- We would, however, appreciate the opportunity to resolve any concerns directly with you first before you approach the ICO.
09 COOKIES & CONSENT
- Our website utilizes necessary functional cookies to provide essential site features, plus optional analytics cookies to measure and enhance performance.
- You can manage or adjust your cookie preferences at any time via our interactive Cookie Banner or through your web browser settings.
10 CONTACT OUR DATA CONTROLLER
