Privacy Policy – Werkroom

Last updated: 1 April 2026

1. Introduction

This Privacy Policy explains how Werkroom (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website and booking system at www.werkroomshop.com (the “Service”).

By using our Service, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

2. Data Controller

Werkroom is the data controller responsible for your personal data.

If you have any questions, you can contact us at:
Email: werksroom@gmail.com

3. What Data We Collect

Personal Data you provide

We may collect:

  • Name

  • Email address

  • Phone number

  • Booking details and preferences

Automatically collected data (Usage Data)

We may collect:

  • IP address

  • Browser type and version

  • Pages visited and time spent

  • Device type and identifiers

4. How We Use Your Data

We use your personal data to:

  • Manage bookings and appointments

  • Provide and operate our services

  • Communicate with you regarding appointments (e.g., confirmations, reminders)

  • Respond to enquiries or requests

  • Improve our website and customer experience

  • Send marketing communications (only where permitted by law)

5. Legal Basis for Processing (UK GDPR)

We rely on the following legal bases:

  • Contract – to provide booked services

  • Legitimate interests – to improve services and prevent misuse

  • Legal obligation – where required by law

  • Consent – for marketing communications and certain cookies

You can withdraw consent at any time.

6. Marketing Communications

We may send you updates, offers, or news about our services if:

  • you have booked with us or enquired, or

  • you have opted in to receive marketing

You can unsubscribe at any time via:

  • the link in our emails, or

  • by contacting us directly

7. Sharing Your Data

We only share your data where necessary, including with:

  • Booking system providers

  • Payment processors (we do not store card details)

  • Email marketing providers (e.g., Mailchimp)

  • Website analytics providers

All third parties are required to handle your data securely and in line with data protection laws.

We do not sell your personal data.

8. Payments

Payments may be processed by third-party providers (e.g., Square).

We do not store your card details. Payment providers process your data under their own privacy policies and in accordance with PCI-DSS security standards.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Ensure the website functions properly

  • Remember your preferences

  • Analyse website performance

Cookies may include:

  • Essential cookies (required for the website to work)

  • Analytics cookies (to understand usage)

  • Functionality cookies (to improve your experience)

Where required, we will request your consent before placing non-essential cookies. You can manage cookies through your browser settings.

10. Data Retention

We only keep your personal data for as long as necessary to:

  • Fulfil the purposes outlined in this policy

  • Comply with legal and tax obligations

  • Resolve disputes and enforce agreements

When no longer needed, your data will be securely deleted or anonymised.

11. Your Rights (UK & EU Users)

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, contact us at the email above.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data.

However, no online system is completely secure, and we cannot guarantee absolute security.

13. International Transfers

Some of our service providers may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as:

  • UK-approved standard contractual clauses, or

  • Transfers to countries with adequate protection

14. Children’s Data

Our Service is not intended for children under 16.

We do not knowingly collect data from anyone under 16 without parental consent.
If you believe a child has provided us with personal data, please contact us and we will remove it.

15. Third-Party Links

Our website may contain links to other websites.

We are not responsible for their privacy practices. We recommend reviewing their privacy policies.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated date. Please review it periodically.

17. Contact Us

If you have any questions about this Privacy Policy or your data:

Email: werksroom@gmail.com