# Privacy Notice
Version 2026-10-15. Effective for new agreements accepted from 15 October 2026.

Two different roles
Hampshire Marketing Ltd is responsible for account administration, its own billing, support and security records. For customer booking records hosted on behalf of a business, that business is normally the controller and Hampshire Marketing acts as its processor. Contact support@hampshiremarketing.co.uk about our processing; contact the business you booked with about its services or booking records.
Information and purposes
Account contact details, business details and subscription references are used to provide and administer your account. Support correspondence helps us resolve requests. Security and access records help prevent abuse. Booking information can include customer contact details, selected sessions, attendance and payment references, depending on the features the business uses. Do not put card details or unnecessary sensitive information into booking or support messages.
Lawful bases
For our own processing, the bases are performance of a contract where it is with you personally, legitimate interests in administering business accounts and protecting the service, and legal obligations for required financial records. Optional marketing requires the appropriate permission. The business taking bookings must identify and explain its own lawful bases to its customers.
Providers and Google connections
Payment processing uses Stripe. Optional Google connections support identity, calendar availability, session events, meeting links and authorised email sending. See the existing Google data disclosure for scopes, use, disconnection and Limited Use commitments. Hosting is on an IONOS UK VPS; AWS email and recovery use London. Overseas provider access and retained migration copies are described in the DPA provider register. London is our selected AWS region, not a guarantee of UK-only provider access. International transfers are subject to the safeguards described in the DPA.
Retention and deletion
Different records require different retention periods. Demo checkout receipts and hashed visitor identifiers are scheduled for deletion after 30 days. Financial records may need longer retention to meet legal obligations. Production booking return/deletion is operator-assisted with a 30-day completion target from verified instructions; urgent statutory deadlines take priority. Routine recovery backups expire on the cycle described in the DPA. Financial, support and security records are retained only for their justified purposes, subject to reviewed exceptions. Disconnecting Google stops future authorised activity but does not itself erase booking records or messages already sent.
Publicity permissions
Approved case studies and testimonials may include a representative’s name, role, image and comments. We use these only within the recorded approval and applicable lawful basis. Where we rely on individual consent, we request it separately and it may be withdrawn at any time without affecting the service by emailing support@hampshiremarketing.co.uk. Publication can make approved material accessible worldwide on the agreed channels. Restricted approval and withdrawal records may be retained where needed for legal compliance or the establishment, exercise or defence of legal claims, subject to our retention policy. Publicity permission is separate from permission to receive marketing emails and does not authorise us to reuse customer booking records for advertising.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it. Contact support@hampshiremarketing.co.uk; if your request concerns a business’s booking records, we will help that business respond. You can complain to the Information Commissioner’s Office.