Astryq
Back to home

Privacy Policy

Last updated: 20 May 2026

1. About This Policy

This Privacy Policy explains how Astryq collects, uses, and protects your personal data when you use this booking website. We are committed to handling your information responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Astryq is the data controller for the personal data collected through this website. If you have any questions about how we handle your data, please contact us using the details in Section 9.

2. What Data We Collect

When you make a booking, we collect the following personal data:

  • Full name
  • Email address
  • Phone number
  • Any optional notes you provide at the time of booking
  • The date and time of your booked session
  • A reference to your PayPal transaction (order ID)

We do not collect or store your payment card details. All payment processing is handled by PayPal, which operates under its own privacy policy.

3. How We Use Your Data

Your personal data is used for the following purposes:

  • To confirm and manage your booking
  • To send you a booking confirmation email and, where applicable, a cancellation email
  • To contact you about your session if necessary
  • To maintain records of transactions for accounting purposes

We do not use your data for marketing, profiling, or automated decision-making. You will not receive unsolicited communications from us as a result of making a booking.

4. Legal Basis for Processing

We process your personal data on the basis of contractual necessity — that is, the processing is required to fulfil the booking you have made with us. Where we retain records for accounting purposes, we do so on the basis of a legal obligation.

5. Data Sharing

We do not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

  • PayPal — to process your payment securely. PayPal's use of your data is governed by their own privacy policy.
  • Legal obligations — if we are required to disclose your data by law or court order.

6. Data Retention

We retain booking records for a period of up to 7 years from the date of the session, in accordance with standard UK accounting and tax record-keeping requirements. After this period, records are securely deleted.

If you request deletion of your data and there is no legal obligation to retain it, we will delete it promptly.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — you may request a copy of the data we hold about you.
  • Right to rectification — you may request that inaccurate data be corrected.
  • Right to erasure — you may request deletion of your data where there is no lawful reason to retain it.
  • Right to restriction — you may request that we limit how we use your data in certain circumstances.
  • Right to object — you may object to processing based on legitimate interests.
  • Right to data portability — you may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details in Section 9. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

This website uses a single session cookie to maintain the admin login state. This cookie is strictly necessary for the operation of the admin dashboard and is not used for tracking, analytics, or advertising purposes. No third-party cookies are set by this website.

Your theme preference (light or dark mode) is stored in your browser's local storage and is not transmitted to our servers.

9. Contact

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please contact us using the Get in Touch link in the footer.