1. Who we are

The 360 Booth Co. is the data controller for personal information collected through this website and our booking process. You can reach our data contact at the360boothcompany@gmail.com.

2. What we collect

3. How we use your data

4. Sharing

We don't sell or rent your data. We share only with: payment processors (Stripe), email and gallery hosting providers, and accountants — all bound by confidentiality and GDPR-compliant agreements.

5. Retention

Enquiries are kept for up to 24 months. Booking and financial records are kept for 6 years to meet HMRC obligations. Event footage is retained for 12 months in your private gallery and then deleted unless you ask us to keep it.

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). Contact us at the360boothcompany@gmail.com to exercise any of these rights.

7. Security

We use encryption in transit, role-based access to systems, and password-protected galleries. No system is perfectly secure, but we take reasonable steps to protect your information.

8. Changes

We may update this policy from time to time. The "last updated" date at the top will reflect the latest version.