Privacy Policy

Introduction & Data Controller
We are Magic Alteration, a company registered under company number 16357195. Our registered address is 19 Station Road, Swinton, Manchester M27 6AH. You can contact us by email at magicstitches81@gmail.com or by phone at 07305400900.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you use our services, including our website, app, or communicate with us.

What Personal Data We Collect
We may collect the following personal data:
• Identification Data: Name, contact details (email address, phone number), and order details.
• Authentication Data: Data used for login and authentication purposes.
• Usage & Technical Data: Information about your interactions with our website or app, including cookies, IP address, and browsing behavior.
• Third-Party API Data: If you connect to our services via Google Calendar, we may collect data regarding calendar events that you allow us to access for booking and scheduling purposes.

Purposes & Legal Basis for Processing
We process your data for the following purposes:
1. Providing Alteration Services: To fulfill and manage orders and service requests.
2. Authentication and Account Management: To verify and manage user accounts.
3. Notifications and Marketing: To send you updates, promotional offers, or news related to our services.
4. Analytics and Improvement: To analyze usage patterns for improving our website and app functionality.
5. Legal Compliance: To comply with our legal obligations, such as financial record-keeping.
We process your data based on the following legal grounds:
• Contract performance (to fulfill your requests and provide our services),
• Consent (for marketing and some forms of data processing),
• Legitimate interests (for analysis, service improvement, and customer communication),
• Legal obligations (for record-keeping and other compliance purposes).

Data Retention
We retain your data for the period necessary to fulfill the purposes mentioned above or as legally required:
• Order Data: Retained for up to 7 years for accounting and legal compliance.
• Analytics Data: Retained for 2 years.
• Marketing Data: Retained until you withdraw your consent.

Data Sharing & Third-Party Processors
We may share your personal data with the following trusted third-party service providers, under strict contractual obligations:
• Booking and Payment Processors: To manage and process your payments and bookings.
• Hosting Providers: To manage the website and application infrastructure.
• Analytics Providers: To help us analyze website usage and improve our services.
• Google APIs: If you use Google Calendar for booking, we access calendar data as per the permissions you provide.
We do not sell your personal data to third parties.

Cookies & Tracking Technologies
We use cookies and similar technologies for the following purposes:
• Essential Operations: To ensure the proper functioning of our website and services.
• Analytics: To understand how users interact with our website and improve our services.
• Marketing: To provide you with relevant ads and offers based on your preferences.
You can block or delete cookies, but please note that some features of our website may not function properly if you do.

Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request that we delete your personal data.
• Restriction: Request restrictions on how we process your data.
• Objection: Object to the processing of your data for certain purposes.
• Portability: Request the transfer of your data to another service provider.
• Withdrawal of Consent: Withdraw your consent for marketing or other specific data processing.
To exercise any of these rights, please contact us at magicstitches81@gmail.com.

Security & Data Protection
We implement various security measures to protect your data, including:
• Encryption: To ensure your data is transmitted securely.
• Secure Servers: To store your data in a protected environment.
• Access Control: To ensure only authorized personnel can access your data.

Children & Minors
Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the updated date. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
Magic Alterations
19 Station Road, Swinton, Manchester M27 6AH
Email: magicstitches81@gmail.com
Phone: 07305400900