Who looks after your information
Mija Flores is run by Kristina Coulman-Cook, a sole trader based in Bury St Edmunds, Suffolk, UK. We are the “controller” of the personal information described here, which means we decide how it is used. If you have any questions, email hello@mijaflores.co.uk.
We keep things simple. We only collect what we need to run our workshops, we never sell your information, and we don’t use it for anything you wouldn’t expect.
What we collect
- Booking details: your name, email address and phone number, the workshop you’ve booked and the names of anyone you book for.
- Payment records: the amount paid, the date, how you paid (cash or bank transfer) and, for bank transfers, the name and reference that appear on our bank statement.
- Allergies and access needs: anything you choose to tell us so we can keep you safe and comfortable on the day.
- Messages: emails and social media messages you send us.
- Photos: workshop photos, only where you’ve agreed.
- Newsletter: your email address, only if you sign up to hear about new workshops.
Why we use it, and our legal basis
| What for | Legal basis (UK GDPR) |
| Taking your booking, sending confirmations and workshop details, and contacting you about changes | Contract: we need it to provide the workshop you booked |
| Keeping financial records for tax | Legal obligation |
| Using allergy or health information to keep you safe | Your explicit consent, which you can withdraw at any time |
| Sharing workshop photos online | Your consent |
| Emailing you about new workshops | Your consent. Every email has an unsubscribe link |
| Analytics and advertising cookies, once in use | Your consent, given through our cookie banner |
| Replying to your questions | Legitimate interests: running a friendly small business |
Who we share it with
We only share your information with services that help us run the business, and only what they need:
- our bank, which processes bank transfer (BACS) payments;
- our email provider, Google (Gmail), to send confirmations and newsletters;
- our accountant and HMRC, for tax records;
- our insurer, only if there is an incident at a workshop.
Some of these providers may store information outside the UK. Where they do, they use legal safeguards approved under UK data protection law.
How long we keep it
- Booking and payment records: 6 years after the end of the tax year they relate to, as required by HMRC.
- Allergy and access information: deleted within 1 month after your workshop.
- Messages: up to 2 years, unless they form part of a booking record.
- Newsletter details: until you unsubscribe.
- Photos: until you ask us to take them down.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to have it moved to another service, and to withdraw consent at any time. To do any of these, email hello@mijaflores.co.uk. We’ll reply within one month.
Cookies and analytics
Cookies are small files saved on your device when you visit a website. As Mija Flores grows, we plan to use them for two things:
- Analytics: to understand how people find and use our website, such as which pages are popular, using tools like Cloudflare Web Analytics or Google Analytics.
- Advertising: to show our adverts to people who may be interested in our workshops, for example on social media, and to see how well those adverts work.
We will only use analytics and advertising cookies if you agree to them. When we start using them, you’ll see a cookie banner where you can accept or decline, and you can change your mind at any time. Declining won’t stop you using the website.
We’ll update this policy with the specific tools we use and how long their cookies last before we switch them on.
Keeping it safe
We keep your information on password-protected devices and accounts, and only we can see it.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first and we’ll put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change this policy, we’ll update the date at the top of this page.