Privacy Policy

FunLoading360 is a photo booth hire business based in Essex, United Kingdom. We provide premium photo booth hire services across Essex, Kent and London.

Contact: FunLoading360@gmail.com

We are the data controller for the personal information we collect about you. This policy explains how we handle that information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

ICO Registration Number: 00013961919

We collect the following categories of personal data:

• Full name
• Email address
• Phone number
• Event details (date, venue, location, event type, special requests)
• Billing information (card data is handled directly by Stripe; we never see or store your card number)
• Communications you send to us
• Analytics data collected via Google Analytics (anonymised usage data, browser type, pages visited)
• Booking activity (cart contents and progress, retained temporarily so we can recover abandoned bookings or send you a reminder)

We only collect data that is necessary for the purposes set out in this policy. We do not collect sensitive personal data (such as health information or financial details beyond what is required to process your booking).

We use your personal data for the following purposes:

• Processing bookings: To confirm your booking, issue invoices and manage payments.
• Sending confirmations: To send booking confirmations, deposit invoices and event reminders.
• Customer service: To respond to your enquiries and resolve any issues with your booking.
• Service improvement: To analyse how our website is used in order to improve it (via anonymised analytics).
• Legal compliance: To comply with our legal and financial obligations, including tax record-keeping.

Our lawful basis for processing your data is: contract performance (to fulfil your booking), legitimate interests (to improve our services), and legal obligation (for financial records).

We retain your personal data only for as long as necessary:

• Booking and financial records are retained for 6 years to meet our tax and accounting obligations (HMRC requirement for self-assessment records).
• Pending booking data held temporarily in our session store (Upstash Redis) is automatically deleted after 30 days.
• Enquiries that did not result in a booking are deleted after 12 months.
• Google Analytics data is retained for 14 months, after which it is automatically deleted by Google.

After these periods, your data will be securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate data we hold about you.
• Right to erasure: You can ask us to delete your data, subject to legal retention requirements ("right to be forgotten").
• Right to restrict processing: You can ask us to pause processing your data in certain circumstances.
• Right to data portability: You can request your data in a portable, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at FunLoading360@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use the following types of cookies on our website:

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies (Google Analytics): We use Google Analytics with IP anonymisation enabled. This data is anonymised and does not identify individual users. You can opt out at any time using the Cookie Settings link in the footer of our website.
• Local storage (no cookie): We use your browser's local storage (not a cookie) to remember your cookie consent choice and to keep you in a consistent A/B test variant during your visit. No personal data is sent off-device for these. You can clear local storage at any time via your browser settings.

We use a small number of trusted third-party services to run our business. Each acts as a data processor on our behalf, operates under its own privacy policy, and complies with applicable data protection law:

• Stripe (Stripe Payments UK Ltd): Secure card payment processing for booking deposits. Stripe receives your name, email, and billing details. We never see or store your full card number.
• Resend: Transactional email delivery (booking confirmations, deposit invoices, event reminders). Receives your name and email.
• Google Calendar: Internal scheduling — receives the event date and venue so we can manage availability and prevent double-booking.
• Google Sheets: Operational record of confirmed bookings (name, email, phone, event date, venue, package). Used by our team to plan logistics.
• Google Analytics: Website analytics with IP anonymisation enabled. Anonymised usage data only — no personal identifiers tied to bookings.
• Upstash Redis: Temporary session store for in-progress bookings (30-day auto-delete). Holds the cart and booking form data so checkout can be completed reliably.
• n8n (self-hosted automation): Connects our booking form to email, Google Sheets and Calendar. Routes the same data already listed above; does not store data long-term.

We do not sell your personal data to any third party, and we do not share your data with third parties for their own marketing purposes.

When you hire one of our photo booths, we capture photos and video of you and your guests as part of the service. These images are personal data under UK GDPR.

How they are used:

• Delivered to you (the booking holder) via secure download link after the event.
• Optionally published on our website, Instagram, TikTok or Facebook for marketing purposes — but only if you have not opted out (see Terms & Conditions).
• Never sold, shared with advertisers, or used for facial-recognition training.

Marketing opt-out: If you do not want photos from your event used in our marketing, write to us at FunLoading360@gmail.com before or within 30 days after the event. We will remove any published content and exclude future use.

Guest requests: Individual guests can also request removal of photos in which they appear by emailing us. We will action removal within 14 days.

Retention: Original event photos are stored on our secure cloud storage for 12 months after delivery, then deleted. Photos published on our website or social media remain online until removed via opt-out request.

Some of the processors listed above (notably Stripe, Google Analytics, Google Calendar, Google Sheets and Resend) may store or process your data on servers located outside the United Kingdom, including in the United States and the European Economic Area.

Where data leaves the UK, we rely on the following safeguards approved under UK GDPR:

• UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), incorporated into our contracts with each processor.
• Adequacy decisions where applicable (e.g. EEA countries are covered by a UK adequacy regulation).
• Technical safeguards including encryption in transit (TLS) and at rest.

You can request a copy of the safeguards in place by contacting us at FunLoading360@gmail.com.

If you have any questions about this privacy policy or how we handle your personal data, please contact us: