Last Updated: 11 June 2026

Carnivelle (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website, carnivelle.co.uk, book our services, or subscribe to our mailing list.

1. Who We Are (Data Controller)

  • Company Name: Carnivelle
  • Contact Email: hello@carnivelle.co.uk
  • Postal Address: Available upon request for data rights execution
  • Supervisory Authority: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

2. Information We Collect and Why

We collect personal information through your direct interactions with our website:

  • Booking and Inquiry Forms: When you fill out forms on our site, we collect your name, email address, phone number, and booking requirements.
  • Mailing List Sign-ups: If you explicitly opt-in to receive our updates, we collect your name and email address.
  • Automated Tracking: When you browse our site, we automatically collect technical data (such as your IP address, browser type, and how you interact with our pages).

3. Our WordPress Plugins and Third-Party Processors

We do not sell your data. We share your information only with trusted service providers required to operate our website and deliver our services:

  • Form Management: We use WPForms and Bit Forms to capture your booking details and inquiry information securely on our site. [3, 4]
  • Website Building & Design: Our layout is built using Elementor. While Elementor processes structural data to display the site, it does not independently store your personal information. [5]
  • Payment Processing: We do not store financial details. All payments are processed securely outside our server via Stripe or PayPal. You can view the Stripe Privacy Policy and PayPal Privacy Statement on their respective sites. [6]
  • Website Analytics: We use Google Analytics to track anonymous visitor behavior and site performance. This data helps us improve user experience.

4. Legal Grounds for Processing

Under the UK GDPR, we rely on the following legal bases:

  • Contractual Necessity: To fulfill, manage, and schedule your online bookings.
  • Consent: To add you to our mailing list. You must actively opt-in, and you can withdraw consent at any time.
  • Legitimate Interests: To analyze website traffic via Google Analytics to optimize our services.
  • Legal Obligation: To keep financial records of transactions for UK statutory tax reporting.

5. Cookies

Our site uses cookies through Google Analytics and WordPress to improve functionality. You can manage or block cookies through your browser settings, or via our cookie consent banner.

6. International Data Transfers

Some of our partners (such as Google and Stripe) operate in the United States. We ensure that these transfers comply with UK data protection laws using Standard Contractual Clauses (SCCs) or the UK Extension to the EU-U.S. Data Privacy Framework.

7. Data Retention

  • Financial & Booking Data: Retained for 6 years to comply with UK HM Revenue & Customs (HMRC) tax obligations.
  • Mailing List Profiles: Retained until you click the “unsubscribe” link in our emails or request removal.

8. Your Legal Rights

You have the right to access, correct, or erase the personal data we hold about you. You can also object to processing or request data portability.

To exercise these rights, contact us at hello@carnivelle.co.uk.