Your privacy

Who we are

Glazed and Confused is a small pop-up pottery-painting business run by Katy in Bristol. For anything on this page, or to ask about your information, please send us a message through the site and we will come back to you.

What we collect

• When you book: your name, email, phone number (if you give one), how many people are coming, and any notes you add, such as access needs.
• When you message us: your name, email and what you write, including private-hire enquiries.
• When you join a waitlist: your name, email, phone (optional) and party size for that date.
• When you join our mailing list: your email, your name if you share it, and the time you gave your consent.
• Automatically: your IP address, used only to keep the forms safe from spam and abuse.

We do not collect anything we do not need, and we never sell your details to anyone.

Why we hold it, and our lawful basis

• To run your booking and send your confirmation and reminders. Lawful basis: performing our contract with you.
• To reply to your message or enquiry. Lawful basis: our legitimate interest in answering you, or taking steps to arrange a booking.
• To let you know when a waitlist space opens up. Lawful basis: our legitimate interest in offering you the space you asked about.
• To send occasional updates about upcoming sessions and news, if you have joined our list. Lawful basis: your consent, which you can withdraw at any time.
• To protect the site from spam using your IP address and a Cloudflare anti-spam check. Lawful basis: our legitimate interest in keeping the site working and secure.

Cookies

We keep this simple. The only cookie we set is an essential one that keeps Katy signed in to the private admin area. There are no analytics cookies and no tracking cookies, so there is no cookie banner to click through.

We count page visits anonymously so we can see which pages are popular. No cookies are used for this and nothing personal is stored, just a daily tally per page.

Our forms use Cloudflare Turnstile, a privacy-friendly anti-spam check that replaces the usual "prove you are human" puzzles.

Who helps us run the site

A few trusted companies process data on our behalf, under contracts that keep your information protected:

• Cloudflare hosts the website and stores the booking database.
• Resend sends our emails, such as your booking confirmation, once email sending is switched on.
• Stripe handles card payments securely when you pay online at booking.

These providers only use your data to do their job for us.

How long we keep it

• Booking records are kept while we are arranging and running your session, and afterwards for as long as we need them for our accounts and tax records.
• Messages and enquiries are kept until they are dealt with and for a reasonable time after, in case you get back in touch.
• Mailing-list details are kept until you unsubscribe, which you can do from any email or by asking us.
• Waitlist entries are only needed for that date and are cleared out afterwards.

Your rights

Under UK data protection law you can ask us to show you the information we hold about you, correct it, delete it, or limit how we use it. You can object to certain uses, ask for a copy to take elsewhere, and withdraw any consent you have given.

To do any of this, just send us a message and we will sort it out. It is free, and we will reply as quickly as we can.

Making a complaint

We would always rather hear from you first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.