Privacy Policy

Introduction

THE MAGICAL LUXE MIRROR BOOTH COMPANY LTD ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Personal Data

We may collect personally identifiable information that you voluntarily provide to us when you:

• Make a booking or inquiry
• Register for an account
• Fill out a contact form
• Subscribe to our newsletter
• Communicate with us via email or phone

This personal data may include:

• Full name
• Email address
• Phone number
• Business name and address
• Event details (date, location, type)
• Payment information (processed securely through third-party payment processors)
• Photographs, videos and content we create for you, held in your private online gallery
• Your gallery favourites and download choices

Automatically Collected Information

When you access our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Access times and dates
• Pages viewed and time spent on pages
• Referring website addresses

We use the information we collect for the following purposes:

• Service Delivery: To process bookings, provide equipment rental services, and fulfill contracts
• Communication: To send booking confirmations, updates, and respond to inquiries
• Payment Processing: To process payments and prevent fraud
• Account Management: To manage your account and provide customer support
• Marketing: To send promotional materials and updates (with your consent)
• Analytics: To analyse usage patterns and improve our website and services
• Legal Compliance: To comply with legal obligations and resolve disputes
• Safety and Security: To protect our business, equipment, and users

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract Performance: Processing is necessary to fulfill our rental agreements
• Consent: You have given explicit consent for specific processing activities
• Legitimate Interests: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required to comply with legal requirements

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party companies that help us operate our business (payment processors, email services, hosting providers)
• Insurance Companies: For verification of public liability insurance coverage
• Legal Authorities: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, sale, or acquisition of all or part of our business

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We implement appropriate technical and organisational security measures to protect your personal data against:

• Unauthorized access
• Alteration or disclosure
• Accidental loss or destruction

Our security measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Booking Information: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you withdraw consent or request deletion
• Account Data: Retained while your account is active or as needed to provide services

Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the information provided below.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with small amounts of data that may include an anonymous unique identifier.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your activity for advertising purposes (with consent)

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

Photographs, videos and content created at your event belong to you. We hold them in a private online gallery that opens only with the access code we issue for that event.

• Gallery access: Anyone you share the code with can view that gallery, so please share it only with people you trust
• Your activity: Your favourites and downloads are shown only to you and are not visible to other clients
• Retention: Galleries are kept for 12 months after your event so you have time to download everything, then deleted. Contact us if you would like yours removed sooner
• Marketing: We only use images from your event on our website or social media where you have given us permission, and you can withdraw that permission at any time

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your jurisdiction. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective immediately upon posting.