The following reference text preserves the client-supplied legal wording for privacy and personal data use.
13. Privacy and Use of Personal Data
The Company may collect and process personal data for booking administration, customer communication, identity and age verification where needed, payment handling, safety management, legal compliance, accounting, fraud prevention, and record keeping. Personal data will be processed in accordance with applicable data protection laws, including the General Data Protection Regulation where applicable. Where payments are processed through Stripe, relevant payment and transaction data may also be processed by Stripe in accordance with its own privacy and security framework.
The Customer must ensure that all booking information provided is accurate and up to date. Where a booking is made on behalf of other participants, the booking person confirms that they are authorized to provide the relevant information to the Company. The Company does not sell personal data and will only share personal data where this is necessary for payment processing, legal compliance, regulatory obligations, customer support, fraud prevention, accounting, insurance handling, or the proper performance of the booked service.
Unless separately agreed, any marketing communications, testimonials, or use of photographs or video featuring customers should be handled by the Company on the basis of valid consent or another lawful basis where required by law.