How we look after your information.

Who we are

Hava Workshops is the data controller for the information described on this page. Our address is 140 Broughton Road, Banbury, OX16 9QQ, and you can reach us at havaworkshops@gmail.com.

What we collect

When you book a session we collect your name, your email address, which session you have chosen, an emergency contact if you choose to give one, and anything you tell us in the accessibility or material needs field. We also record whether you asked to hear about future sessions.

When you use the contact form we collect your name, email address, the reason you selected and your message.

We never see or store your card details. Payments are taken on Stripe’s own checkout page, and Stripe passes back only a confirmation that the payment succeeded.

Why we need it, and our lawful basis

We use your name, email and session choice to hold your place, confirm your booking and tell you anything you need to know before you arrive. The lawful basis is performance of a contract — we cannot run the session you have paid for without them.

We send you news about future sessions only if you ticked the box asking us to. The lawful basis is your consent, and you can withdraw it at any time using the unsubscribe link in any email, or by emailing us.

We keep a record of payments to meet our accounting and tax obligations. The lawful basis is our legal obligation.

Accessibility and material needs

The accessibility or material needs field is optional, and anything you write there is used for one purpose only: making your visit comfortable. It is seen by the person running your session and no one else.

Some people use this field to tell us about a health condition or disability. Information of that kind is treated as a special category under UK data protection law, and we handle it accordingly: we collect it only because you chose to give it, we do not use it for anything else, and we delete it once your session has taken place. If you would rather not write it down, you are very welcome to tell us in person on the day instead.

Emergency contact

The emergency contact field is optional. If you give one, we use it for a single purpose: so that someone can be reached if something happened to you during a session. It is never used for anything else, and never for marketing.

Please give a name and number for someone who would expect to hear from us — and do tell them you have. Like the accessibility field, it is deleted once your session has taken place.

Feedback after a session

The morning after a session we email you a short feedback form. The link in that email identifies which session you attended — not you. Your answers are stored against the session alone, with nothing joining them back to your booking, so we cannot tell who wrote what and neither can anyone else.

You can tick a box allowing us to quote your answers anonymously on the site or social media. It is off unless you tick it, and it never covers your name or a photograph — we would ask you separately, and specifically, for either.

After sending feedback you are offered a separate, optional form for exactly that: permission to use your name alongside a quote, or to share a photograph of your work. It is stored in its own table with your name and email and no link to your answers, so agreeing to be named never attaches your name to anything you wrote anonymously. Both permissions are off unless you choose them, we check with you before using anything, and you can withdraw either at any time by emailing us.

Because the responses are anonymous we have no way to find yours in order to delete it. That is the trade for anonymity, and it is why the form asks for nothing that could identify you.

Who else handles your information

We use a small number of services to run the site and take bookings. Each of them processes your information on our instructions:

• Stripe — takes your payment and holds the payment record.
• Resend — sends your booking confirmation email.
• Neon — stores the booking record.
• Netlify — hosts this website.

This site also loads its typefaces from Google Fonts and Adobe Fonts. Loading a font means your browser contacts those services directly, which tells them your IP address. Nothing else about your visit is shared with them.

We do not sell your information, and we do not share it with anyone for marketing.

How long we keep it

We keep booking and payment records for six years, because we are required to keep financial records. Anything you told us about accessibility or materials, and any emergency contact you gave, is deleted once your session has taken place.

If you asked to hear about future sessions, we keep your email address until you unsubscribe. Contact form enquiries are kept for as long as we need to answer them, and then deleted.

Cookies

This website does not set any cookies, and we do not use analytics or tracking of any kind. Nothing about your visit is recorded on your device.

When you go through to pay, Stripe’s checkout page is their own and sets its own cookies, which are covered by Stripe’s privacy policy.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. You can object to how we are using it, ask us to restrict what we do with it, and ask for it in a portable form. Where we rely on your consent, you can withdraw that consent at any time.

Email havaworkshops@gmail.com and we will respond within one month. If you are not happy with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If we change how we handle your information we will update this page and change the date at the top. If the change is significant and affects people who have already booked, we will email them.