Privacy Policy
This Privacy Policy describes how personal data is collected, used, and protected by Conor Aphilia / Aphilia Studio, operating via the website https://www.londonshibari.com, in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The data controller is Conor Aphilia, a sole trader based in the United Kingdom. Any enquiries relating to this policy or the handling of personal data may be directed through the contact form provided on the website or by email as outlined on the contact page.
Collection and Use of Personal Data
Personal data may be collected when an individual submits an enquiry or booking request via the website, corresponds directly via email, or otherwise engages in communication that reasonably requires the exchange of identifying information. The types of personal data collected may include full name, contact details (such as email address and telephone number), booking preferences, accessibility considerations, and any voluntarily disclosed information relevant to the nature of the service requested.
Such data is processed on the lawful basis of consent and for the legitimate interest of facilitating communications, managing bookings, ensuring personalisation of services, and maintaining accurate business records. Where sensitive data is disclosed (such as health or access needs), this is processed with the individual’s explicit consent and only to the extent necessary for the safe provision of services.
Data Retention
Personal data shall be retained for no longer than is necessary for the purposes for which it was collected. Contact form data will generally be retained for a period not exceeding twelve months. Booking and invoicing information, including related correspondence, may be retained for a period of up to seven years to comply with statutory and financial obligations.
Testimonials or publicly shared feedback provided with consent will be retained until the individual requests removal. Individuals may withdraw consent at any time by making a written request via the contact page or by direct email.
Data Security
Appropriate technical and organisational measures are implemented to ensure a level of security appropriate to the risk, including secure storage, password protection, device encryption, and, where applicable, restricted access. While every effort is made to protect personal data, individuals acknowledge that no method of transmission over the internet can be guaranteed to be fully secure.
Sharing of Personal Data
Personal data will not be shared with third parties except where required by law, where necessary for the exercise or defence of legal claims, or with the data subject’s explicit consent. No personal data is transferred outside of the United Kingdom without appropriate safeguards in place in accordance with UK GDPR requirements.
Use of Cookies
The website may use cookies or similar technologies to enhance user experience, analyse web traffic, and assist in the functioning of certain features. Cookies may be disabled via the user’s browser settings. Any non-essential cookies will only be set with the user’s prior consent in accordance with the Privacy and Electronic Communications Regulations (PECR).
Your Rights
Under data protection law, individuals have the right to access personal data held about them, to request rectification or erasure, to restrict or object to processing, to data portability where applicable, and to withdraw consent at any time. Requests must be made in writing. Individuals also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if they believe their data has been handled in a way that breaches applicable law.
Policy Updates
This Privacy Policy may be amended from time to time to reflect changes in legal requirements or service practices. The most recent version will always be available on this website. Continued use of the website after changes have been posted shall constitute acceptance of those changes.