Privacy policy

Who is responsible for your information

Timeless Links is responsible for personal information collected through this website. For privacy questions or requests, please use our contact page.

To be completed before publishing: legal owner name, postal address, monitored privacy email, and registration details where applicable.

We handle your information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), including the rules on cookies and electronic marketing.

Information we collect

• Booking details, including your name, email address, optional phone number, chosen service, party size, preferred date and time, age group, accepted terms, and any message you provide.
• For customers under 16, parent or guardian name, email, relationship, consent and signature.
• Waiver details, including your name, email address, optional phone number, date of birth, optional allergy or health notes, signatures, the wording agreed to, and the date signed.
• Staff account and sign-in information for authorised team members.
• Your cookie choice, the time it was made, the notice version shown, and a broad country code used to decide whether the banner is required.

How we use it

We use this information to respond to booking requests, manage appointment availability, prepare for fittings, keep signed waiver records, administer staff access, maintain the website, and meet legal or safety obligations. We do not use waiver health information for advertising.

Our reasons for using it

Booking information is used to take requested steps before providing a service and to perform our agreement. Records may also be used to meet legal obligations or pursue legitimate safety and legal interests. Optional allergy or health notes are special-category information and are processed only with explicit consent; you can omit them and discuss concerns at the fitting instead.

Who receives it

Authorised Timeless Links staff can access booking and waiver records. Lovable and its infrastructure providers host and operate the website and database and may process information to provide those services. We may also disclose information where the law requires it or to protect legal rights and safety. We do not sell personal information.

Some of the companies that help us run this website may store or process information outside the UK. Where that happens, we rely on legally recognised safeguards — such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses — so your information receives the same level of protection it has in the UK.

How long we keep it

Booking and signed-waiver records, including any health notes and signatures within them, are kept for seven years from submission and then securely deleted. This period supports safety, insurance, dispute and legal-record needs. Staff account and security records are reviewed separately and removed when no longer needed.

How we protect it

Sensitive customer fields are individually encrypted before storage and are revealed only through checked staff access. Staff access requires an approved account and authenticator-app verification. Access to customer records is logged, record lists are limited to small pages, and public account registration and bulk export are disabled.

Cookies and browser storage

This site uses essential browser storage to remember your privacy choice and support secure staff sign-in. The privacy-choice record contains your choice, its date, the notice version and broad country code. The site does not currently use advertising or analytics cookies. If optional services are introduced, they will remain off in consent-required regions until accepted.

You can change your choice at any time using Cookie settings in the footer. Rejecting optional cookies does not prevent you from booking or signing a waiver.

Your rights

You may have rights to ask for access, correction, deletion, restriction, objection or a portable copy, and to withdraw consent without affecting earlier lawful use. To make a request, use our contact page. We may need to verify your identity first. You can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this page when our services or legal responsibilities change. The latest version and update date will always appear here.