EVER STUDIO

1. Introduction

EVER STUDIO ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you book workshops or events through our website.

2. Data Controller

Business Name: EVER STUDIO
Address: 33 Huntly Street, Aberdeen, AB10 1TJ, United Kingdom
Contact Email: [email protected]

3. Information We Collect

When you book a workshop or event, we collect:

Personal Information: Name, email address, phone number
Booking Information: Workshop title, selected date, payment amount
Payment Information: Processed securely by Stripe (we do not store your card details)
Technical Information: IP address, browser type, device information (for security and analytics)

4. How We Use Your Information

We use your personal data to:

Process and confirm your workshop bookings
Send booking confirmations and event reminders
Communicate important updates about your booked events
Process refunds if requested in accordance with our Refund Policy
Improve our services and customer experience
Comply with legal obligations

5. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance: To fulfill our booking agreement with you
Consent: You provide explicit consent when submitting the booking form
Legitimate Interests: To improve our services and prevent fraud

6. Data Processors and Third Parties

We share your data with the following trusted service providers:

Stripe: Payment processing (PCI-DSS compliant)
GoHighLevel: Customer relationship management and booking management
Manus: Website hosting and infrastructure

All third-party processors are GDPR-compliant and process data only on our instructions.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy. Booking information is retained for 7 years for accounting and legal compliance purposes. You may request deletion of your data at any time (subject to legal retention requirements).

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All payment information is encrypted and processed securely by Stripe.

10. International Data Transfers

Your data may be processed by service providers located outside the UK/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. Cookies

Our website uses essential cookies to ensure proper functionality. We do not use tracking or advertising cookies without your explicit consent.

12. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: [email protected]
Address: 33 Huntly Street, Aberdeen, AB10 1TJ, United Kingdom

15. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.