Privacy Policy

This Privacy Policy explains how Merrow & Vale Ltd ("we", "us", "our") collects, uses, stores and protects your personal data when you visit merrowandvale.org, enquire about embroidery workshops, or attend sessions at our Bath studio.

We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Merrow & Vale Ltd is the data controller for personal data collected through this website and related workshop administration.

Company Name: Merrow & Vale Ltd
Company Number: 15184729
VAT Number: GB918472635
Registered Office: 18 Quiet Street, Bath, BA1 2JX, United Kingdom
Director: Harriet Merrow
Email: [email protected]
Phone: +44 1225 481903
Share Capital: £50,000

2. What Personal Data We Collect

• Identity data: name and preferred name when you enquire or book
• Contact data: email address, telephone number and message content
• Booking data: workshop choice, preferred dates, skill notes and accessibility requests you choose to share
• Payment records: invoice references and payment status (card details are processed by payment providers, not stored on this website)
• Technical data: IP address, browser type, device type and general location derived from IP
• Usage data: pages viewed and referral source where available from server logs

We do not intentionally collect special category data. If you volunteer health or accessibility information to support safe studio participation, we process it only to accommodate your needs.

3. How We Collect Personal Data

• Direct interactions: contact forms, email, phone and in-studio booking conversations
• Automated technologies: server logs and strictly necessary cookies (see our Cookie Policy)
• Third-party delivery: font and icon CDNs may process limited technical connection data

4. How We Use Your Personal Data

• Respond to workshop and tuition enquiries
• Administer bookings, waitlists, materials kits and gift vouchers
• Communicate schedule changes, safety notes and joining instructions
• Maintain business, accounting and tax records
• Improve website content, navigation and security
• Send optional updates only where you have asked us to stay in touch

We do not sell personal data and we do not run Google Analytics, Google Tag Manager or social advertising pixels on this website.

5. Legal Bases for Processing

• Contract: to take steps toward or perform a workshop booking
• Consent: where you submit a general enquiry or opt in to updates
• Legitimate interests: to operate, secure and improve our website and studio administration
• Legal obligation: accounting, tax and regulatory record-keeping

6. Data Sharing

We may share data with trusted providers who host the website, process email, take payments or support IT infrastructure. They may only process data on our instructions and must apply appropriate security.

We may disclose data where required by law, court order or a competent regulator such as the Information Commissioner's Office (ICO).

7. International Transfers

Some technology providers (for example font or CDN services) may process technical data outside the UK. Where this occurs, we rely on UK adequacy regulations or appropriate contractual safeguards.

8. Data Retention

• General enquiries: typically reviewed within 30 days and deleted or archived when no longer needed
• Booking and payment records: retained for up to 6 years to meet accounting and consumer law needs
• Marketing preferences: retained until you withdraw consent
• Server logs: retained for a short security period, usually no longer than 12 months

9. Your Rights

Under UK GDPR you may request access, correction, erasure, restriction, objection and data portability where applicable, and you may withdraw consent at any time where processing is consent-based.

To exercise these rights, email [email protected]. You also have the right to complain to the ICO at ico.org.uk.

10. Security

We use reasonable technical and organisational measures including secure hosting, access controls, limited staff access to booking records and careful handling of paper studio notes.

11. Children's Privacy

Our workshops and website are aimed at adults. We do not knowingly collect personal data from children under 16 without appropriate parental or guardian involvement. Contact us if you believe a child has provided data so we can delete it.

12. Cookies and Similar Technologies

Details of cookies, management options and legal basis are set out in our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will appear on this page with a revised "Last updated" date.

14. Contact Us

For privacy questions or data requests:
Email: [email protected]
Phone: +44 1225 481903
Post: Merrow & Vale Ltd, 18 Quiet Street, Bath, BA1 2JX, United Kingdom