Privacy policy

This policy explains what personal information Pia’s Place collects when you use this website, book a place on a workshop or event, or get in touch, and what we do with it. It applies to www.piasplace.co.uk and to the booking, contact and email systems behind it. It is written under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it alongside our cookie policy and terms of use.

Who we are

Pia’s Place is a café, vintage shop, gallery wall and workshop space trading from 114 High Street, King’s Lynn, Norfolk PE30 1DD. For the purposes of data protection law we are the data controller: we decide what information is collected and how it is used. You can reach us about anything in this policy at piaplum@yahoo.com.

What we collect

When you book a workshop or event

1. Your first and last name, email address and phone number.
2. Which workshop or event you booked, the date and time, and how many places.
3. What you paid, when, and the refund status if a booking is cancelled.

Card details are entered on our payment provider's secure checkout page. We never see or store your full card number.

When you send us a message

1. Your name, email address and, if you give it, your phone number.
2. Whatever you write in the message.

When you sign in

A small number of people (Pia and the people who look after the website) have a sign-in for the booking desk. For them we hold an email address and sign-in record. Customers do not need an account to book.

Automatically, when you use the website

1. Your IP address, browser type and the pages you visit, in the hosting platform's server logs.
2. The cookies and browser storage listed in our cookie policy.

Things you choose to tell us

If you tell us about an allergy, an access need or a medical condition so that we can look after you at a workshop, that counts as special category data. We only hold it because you gave it to us, we use it only to keep you safe and comfortable on the day, we share it only with the person running the session, and we delete it once it is no longer needed.

How we use it

1. To take, confirm and manage your booking, including sending your confirmation, a reminder before the day, and a note if a date changes or is cancelled.
2. To take payment and issue refunds.
3. To reply to your messages.
4. To keep the records a small business has to keep for tax and accounting.
5. To keep the website secure and working, and to see which pages are used.

We do not send marketing emails unless you have asked for them, and we do not sell or rent your details to anyone. If we ever start a newsletter, it will be opt-in, and every email will have an unsubscribe link.

Our legal basis

1. Contract: taking and managing your booking, and replying to a message you send us.
2. Legal obligation: keeping sales and payment records for HMRC.
3. Legitimate interests: keeping the website secure, keeping a record of who attended, and running the business sensibly. We balance these against your interests and you can object (see your rights).
4. Consent: anything you volunteer about allergies or access needs, and any marketing you opt in to. You can withdraw consent at any time.

Who we share it with

We share your information only with the services we need to run the website and the bookings. Each of them acts on our instructions and must keep your data secure:

1. Wix.com Ltd hosts the website and stores our bookings, calendar, contact-form submissions and customer records. Wix's information security management system is certified to ISO 27001, along with ISO 27017, ISO 27018 and ISO 27701.
2. Our payment provider, reached through Wix's secure checkout, processes card payments and refunds.
3. Postmark (ActiveCampaign, LLC) sends the emails you receive from us about your booking or your message.
4. Google Fonts serves the typefaces on this website; when a page loads, your browser requests the font files from Google, which sees your IP address.
5. The people who run a workshop see the names of who is coming, and anything you have told us they need to know to look after you.

Some of these providers are based outside the UK. Where that is the case, transfers are covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. We may also disclose information where the law requires it.

How long we keep it

1. Bookings and payments: six years after the end of the tax year they fall in, because HMRC requires it.
2. Messages: until the query is dealt with and for up to twelve months after, in case you come back to it.
3. Allergy or access notes: deleted after the workshop they relate to.
4. Server logs and cookies: as set out in the cookie policy.

Keeping it safe

The website is served over HTTPS. Booking records live in Wix's systems and are reached only by signed-in staff. Email sending keys are held as secrets on the hosting platform, not in the website's code. If you think your information has been lost or misused, tell us straight away at piaplum@yahoo.com.

Your rights

Under UK GDPR you can ask us to:

1. show you the information we hold about you;
2. correct anything that is wrong or out of date;
3. delete it, where we no longer need it for the reasons above;
4. restrict or object to how we use it;
5. send you a copy in a portable format;
6. withdraw consent for anything that relied on it.

Email piaplum@yahoo.com and we will respond within a month. There is no charge. If you are not happy with how we handle your request, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Our workshops are for adults unless the listing says otherwise. Where a session welcomes children, such as family pottery painting, the booking must be made by a parent or guardian, who is our point of contact. We hold the minimum we need about a child, which is usually only their first name and age, and we never market to children.

Other websites

This website links to other sites, including Google Maps and the people who host our workshops. We have no control over those sites and this policy does not cover them. Read their privacy policies before using them.

Changes to this policy

We will update this page if anything changes about what we collect or who we share it with. The date at the top tells you when it was last reviewed.

Contact

Pia’s Place
114 High Street, King’s Lynn, Norfolk PE30 1DD
piaplum@yahoo.com