PRIVACY POLICY

1. WHO WE ARE

Teddy's Place is operated by Teddys Place LTD, trading as Teddy's Place.

Our studio is based at Unit 2, Beresford Road Lane, Cardiff, UK.

For data protection purposes, Teddys Place LTD is the controller of the personal information described in this policy where we decide how and why that information is used.

You can contact us about privacy at hello@teddys.place.

2. WHAT WE COLLECT

The information we collect depends on how you interact with Teddy's Place. It may include:

• your name;
• email address;
• telephone number;
• billing or business details where relevant;
• booking date, time, duration, package, extras and booking history;
• discount or promotional codes used;
• information you include in an enquiry, booking note or message to us;
• communications between you and Teddy's Place;
• technical information such as device, browser, IP address and website activity;
• advertising click identifiers where you have permitted advertising storage;
• analytics information where you have permitted analytics storage;
• payment and transaction references supplied by our payment provider;
• information necessary to arrange photographers, assistants, crew or other production support you ask us to provide.

3. WHY WE USE IT

4. BOOKINGS & PAYMENTS

Our website uses WordPress, BookingPress and custom Teddy's Place booking software to provide availability, bookings and booking administration.

When you make a booking, the information you provide is used to create and manage that booking and may be stored within our WordPress and BookingPress systems.

Payments are processed by Stripe. Stripe receives the information required to process the transaction and operates under its own privacy and security obligations.

We may receive information from Stripe such as whether payment succeeded, the amount paid, payment or transaction identifiers, refund information and limited payment-method information. We do not store your full card details.

5. EMAILS, SMS & COMMUNICATIONS

If you book with us, we may contact you by email or SMS about that booking. This can include confirmations, payment information, reminders, rescheduling, cancellation information, access instructions and follow-up messages connected to the service.

These are service communications, not advertising messages, and are necessary for us to manage your booking properly.

Our communications may be delivered using third-party email, hosting and communications providers, including Google services and transactional SMS providers such as Twilio where enabled.

Marketing

We will not automatically treat a studio booking as permission to spam you. If we send electronic promotional marketing, we will only do so where the law allows it, including where you have consented or where another lawful electronic marketing exemption applies. You can opt out at any time.

6. GOOGLE ANALYTICS & GOOGLE ADS

Teddy's Place uses Google services including Google Analytics and Google Ads. These help us understand website performance and, where permitted, measure whether advertising results in useful visits or bookings.

Our website uses Google's Consent Mode. For a new visitor, analytics and advertising storage are denied unless you make a choice that allows them.

If you allow Analytics, Google Analytics may store or access analytics identifiers and process information about how you use the site.

If you allow Advertising, Google may store or access advertising identifiers, including information used to associate an advertising click with a later booking.

If advertising consent is not granted, Google may receive limited cookieless measurement signals where supported by Google's Consent Mode. Advertising cookies are not deliberately enabled by Teddy's Place in that state.

7. META, FACEBOOK & INSTAGRAM

Where you allow Advertising cookies, Teddy's Place may use Meta measurement technologies, including the Meta Pixel and server-side conversion measurement, to understand whether advertising on Facebook or Instagram resulted in activity such as a completed booking.

These signals may include technical information, advertising identifiers, transaction information and limited customer information used for matching. Where customer information is used for advertising matching, it should be protected using the technical safeguards provided by the relevant platform.

Teddy's Place does not receive access to your Facebook or Instagram password, private messages or unrelated account information through these tools.

8. COOKIES & SIMILAR TECHNOLOGIES

Cookies are small pieces of information stored on your device. We also use similar browser technologies where required to provide the website and measure its performance.

Our consent system divides these into three main categories:

Essential

Required for the website, security, booking functionality and remembering your privacy choices. These cannot be disabled through our consent tool because the site needs them to provide services you request.

Analytics

Optional. Used to understand website traffic and usage. These are disabled by default until you choose to allow Analytics.

Advertising

Optional. Used by services such as Google Ads and Meta for advertising measurement and attribution. These are disabled by default until you choose to allow Advertising.

This list gives common examples and may change as our website or third-party services are updated.

You can change or withdraw your consent at any time using the button above or the Cookie Settings control displayed on the website.

9. WHO WE SHARE INFORMATION WITH

We only share personal information where it is reasonably necessary to provide the service, operate the business, meet legal obligations or use services you have permitted.

This may include:

• Stripe, for payment processing;
• Google, for services such as Analytics, Ads, Maps, email or other Google services we use;
• Meta, where advertising measurement has been permitted;
• Twilio or other communications providers, where used for transactional messages;
• our website and hosting providers, including services necessary to host, secure and maintain the website;
• BookingPress and associated WordPress systems used to administer bookings;
• accountants, insurers, professional advisers or authorities where reasonably required;
• Teddy's Place team members, hosts, photographers, assistants or production suppliers where they need relevant information to deliver a service you've requested.

We do not sell your personal information to third parties.

10. INTERNATIONAL DATA TRANSFERS

Some of the technology providers we use are international organisations and may process information outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer, we expect the relevant provider or transfer arrangement to use an appropriate mechanism, such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful safeguard.

11. HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as we reasonably need it for the purpose it was collected, including providing services, handling queries, maintaining business records and dealing with legal or accounting requirements.

As a general guide:

• booking and transaction records may be retained for up to six years where needed for accounting, tax or legal records;
• customer communications may be kept while relevant to our relationship, booking history or a potential dispute;
• technical security records may be retained for shorter periods appropriate to security and troubleshooting;
• analytics and advertising information is retained according to our settings and the relevant provider's retention controls;
• your Teddy's cookie-consent choice is currently stored for 180 days unless you change it sooner.

We may retain information for longer where reasonably necessary for an active dispute, legal claim, investigation or statutory obligation.

12. SECURITY

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, misuse, loss or disclosure.

These include access controls, HTTPS encryption, payment processing through specialist providers, security controls around our website and restricting access to information to people who reasonably need it.

No internet-connected system can guarantee absolute security, but we take appropriate steps to reduce risk and respond to issues where they arise.

13. YOUR RIGHTS

Depending on the circumstances, UK data protection law may give you rights including:

• the right to be informed about how we use your information;
• the right to request access to personal information we hold about you;
• the right to ask us to correct inaccurate information;
• the right to ask us to erase information in certain circumstances;
• the right to ask us to restrict certain processing;
• the right to object to processing based on legitimate interests;
• an absolute right to object to direct marketing;
• the right to data portability where the legal requirements apply;
• the right to withdraw consent at any time where processing relies on consent.

Withdrawing consent does not make processing that took place before withdrawal unlawful.

To exercise a privacy right, email hello@teddys.place. We may need to verify your identity before disclosing or changing personal information.

14. COMPLAINTS

If you have a concern about how we use your personal information, we'd prefer you contact us first so we have the opportunity to sort it out.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Visit ico.org.uk for information about making a complaint.

15. THIRD-PARTY LINKS & SERVICES

Our website may link to third-party websites, maps, social platforms or other external services. Once you leave Teddy's Place, those organisations may process information under their own privacy policies and we do not control their websites.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services, technology or legal obligations change.

The date at the top of this page shows when this version was last updated. Where a change materially affects how we use personal information or requires fresh consent, we will take appropriate steps to tell you or ask again.