Privacy Policy

1. Who We Are

Kent & Sussex Shooting School is the data controller for the personal information we hold about you. Our contact details are: Email: [email protected] | Phone: 07487 619746 | Website: ksshooting.co.uk

2. What Personal Data We Collect

We may collect and process the following personal data:

Identity and contact data: your name, email address, and telephone number when you submit an enquiry or booking form.

Payment data: when you purchase a lesson, course, or voucher through our website, payment is processed securely by Stripe. We do not store your card details. Stripe's privacy policy applies to payment data.

Technical data: your IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools (Google Analytics 4).

Communications data: any messages you send us via our contact or booking forms.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To process and manage your booking or enquiry (legal basis: contract performance).

To respond to your questions and provide customer support (legal basis: legitimate interests).

To process payments securely via Stripe (legal basis: contract performance).

To improve our website and understand how visitors use it, using anonymised analytics data (legal basis: legitimate interests, subject to your cookie consent).

To comply with legal obligations, such as financial record-keeping (legal basis: legal obligation).

4. Cookies and Analytics

Our website uses cookies. We use Google Analytics 4 to collect anonymised data about how visitors use our site. This analytics tracking is only activated after you give your consent via our cookie banner.

You can withdraw your consent at any time by clearing your browser cookies and declining consent when you next visit. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

5. Sharing Your Data

We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and business, including:

Stripe (payment processing) — Stripe's privacy policy is available at stripe.com/gb/privacy.

Google (analytics) — Google's privacy policy is available at policies.google.com/privacy.

These providers are contractually required to keep your data secure and to use it only for the purposes we specify.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking and payment records are retained for six years in line with HMRC requirements. Enquiry and contact data is retained for up to two years.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you.

Right to rectification: you can ask us to correct inaccurate or incomplete data.

Right to erasure: you can ask us to delete your data in certain circumstances.

Right to restrict processing: you can ask us to limit how we use your data.

Right to data portability: you can request your data in a structured, machine-readable format.

Right to object: you can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Payment data is handled exclusively by Stripe, which is PCI DSS compliant.

9. International Transfers

Some of our third-party providers (including Google and Stripe) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.