1. Introduction
Duende Lab Limited ("Duende Lab", "we", "our", or "us") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, process and protect personal information when you use our website, make a booking, attend a workshop, purchase products, contact us or otherwise interact with our business.
By using our website or services, you acknowledge the practices described in this Privacy Policy.
2. Information We Collect
We may collect the following information:
Information You Provide
- Full name
- Email address
- Telephone number
- Booking information
- Communications sent to us
Payment Information
Payments are processed through secure third-party payment providers.
Duende Lab does not store or have access to full payment card details, card numbers, security codes or similar payment credentials.
Technical Information
When you visit our website, we may collect technical information including:
- IP address
- Browser type
- Device information
- Operating system
- Website usage information
- Cookie-related information
3. How We Use Your Information
We may use personal information to:
- Process and manage bookings
- Deliver workshops and events
- Provide customer support
- Send booking confirmations
- Send workshop reminders
- Process refunds
- Manage cancellations and rescheduling requests
- Improve our services
- Maintain website functionality
- Protect our business from fraud and abuse
- Comply with legal and regulatory obligations
4. Booking Communications
When a booking is made, we may send service-related communications including:
- Booking confirmations
- Workshop reminders
- Cancellation notices
- Refund confirmations
- Rescheduling notifications
- Operational updates relating to bookings
These communications form part of the service being provided and may be sent regardless of marketing preferences.
5. Marketing Communications
From time to time, we may send:
- Newsletters
- Workshop announcements
- Special offers
- Promotions
- New product launches
- Event invitations
- Marketing updates
Where required by law, marketing communications will only be sent where appropriate consent has been obtained or another lawful basis applies.
Recipients may unsubscribe from marketing communications at any time using the unsubscribe link provided or by contacting us directly.
6. Sharing Information with Third Parties
We may share information with carefully selected third-party service providers who assist us with:
- Payment processing
- Booking management
- Website operation
- Customer communications
- Technical infrastructure
- Hosting services
- Security services
- Legal and regulatory compliance
All third-party providers are required to process personal information securely and in accordance with applicable data protection laws.
We do not sell personal information to third parties.
7. CCTV and Audio Recording
For security, health and safety and operational purposes, CCTV systems operate within our premises.
Our CCTV systems may capture:
- Video recordings
- Audio recordings
CCTV may be used for:
- Security monitoring
- Crime prevention
- Incident investigation
- Health and safety management
- Complaint investigation
- Protection of staff, visitors and property
Recordings are retained for a limited period and are automatically overwritten unless required for the investigation of an incident, complaint, dispute, legal claim or other legitimate business purpose.
8. Analytics and Website Improvement
We may use analytics, performance monitoring, advertising, marketing and website optimisation tools to better understand how visitors interact with our website and services.
These tools may collect information such as:
- Device information
- Browser information
- IP address
- Pages visited
- Time spent on pages
- Referral sources
- Website interactions
Any such tools will be implemented and managed in accordance with applicable data protection laws and cookie consent requirements.
9. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected.
Information may be retained for operational, legal, accounting, tax, security, dispute resolution, fraud prevention and business record-keeping purposes.
Where information is no longer required, it may be securely deleted, anonymised or archived.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Disclosure
- Destruction
While we take security seriously, no method of transmission or storage can be guaranteed to be completely secure.
11. International Transfers
Some service providers used by Duende Lab may process information outside the United Kingdom.
Where international transfers occur, appropriate safeguards will be implemented where required by applicable law.
12. Your Rights
Subject to applicable law, individuals may have the right to:
- Request access to their personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request restriction of processing
- Object to certain forms of processing
- Withdraw marketing consent
- Lodge a complaint with the Information Commissioner's Office (ICO)
Duende Lab will consider all requests in accordance with applicable legal obligations and legitimate business interests.
Certain information may be retained where required for legal, accounting, tax, fraud prevention, dispute resolution, security or record-keeping purposes.
13. Cookies
Our website may use cookies and similar technologies to improve website functionality, security, performance and user experience.
Further information may be provided through our Cookie Policy and cookie consent tools.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Updated versions will be published on our website and will become effective upon publication.
15. Contact Us
If you have questions regarding this Privacy Policy or our handling of personal information, please contact:
Duende Lab Limited
Email: contact@duendelab.com
Website: https://duendelab.com
We will make reasonable efforts to respond to privacy-related enquiries in a timely manner.