Privacy Policy - TAD Studios

1. Who We Are

TAD Studios operates the website tadstudios.co.uk and provides rehearsal room booking services for bands and musicians. We are the data controller responsible for your personal information.

If you have any questions about this privacy policy or how we handle your data, please contact us:

Website: tadstudios.co.uk
Email: contact@tadaudio.ltd
Address:
Unit 8/9 Grange Farm Industrial Estate
Little Chesterton
Bicester
Oxford
Oxfordshire
OX25 3PD

2. What Personal Data We Collect

We collect and process the following categories of personal data when you use our booking service:

2.1 Information You Provide to Us

Full name
Email address
Phone number
Band or group name
Payment information (processed securely via our payment provider; we do not store card details)
Any notes or special requests submitted with a booking

2.2 Information Collected Automatically

IP address and approximate location
Browser type and device information
Pages visited and time spent on our site
Booking history and session logs

2.3 Calendar Integration Data

If you connect your Google Calendar or use our Google Calendar sync feature, we may access:

Your Google account email address (to identify your calendar)
Calendar event details necessary to create and manage your rehearsal bookings

We only access calendar data required to create, update, or cancel rehearsal bookings. We do not read, store, or share any other calendar events.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To process and confirm rehearsal room bookings
To send booking confirmations, reminders, and receipts
To synchronise bookings with Google Calendar at your request
To manage payments and handle refunds
To respond to your enquiries and provide customer support
To send important service updates (e.g. changes to opening hours or room availability)
To improve our website and booking experience
To comply with our legal and financial record-keeping obligations

Legal Bases for Processing

We rely on the following lawful bases under UK GDPR:

Contract: Processing necessary to fulfil your booking and provide our services
Legitimate interests: Improving our service, fraud prevention, and website analytics
Legal obligation: Retaining financial records as required by law
Consent: Where you have explicitly opted in (e.g. marketing communications or calendar integration)

4. Google Calendar Integration

Our booking system integrates with Google Calendar to allow you to sync your rehearsal sessions directly to your calendar. When you authorise this integration:

We use Google OAuth to securely connect to your Google account
We only request the minimum permissions necessary to create and manage calendar events on your behalf
Your Google credentials are never stored by us — access is managed through secure OAuth tokens
You can revoke our access to your Google Calendar at any time via your Google account settings at myaccount.google.com

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who We Share Your Data With

We do not sell your personal data. We share it only in the following circumstances:

Payment processors: To securely handle booking payments (e.g. Stripe)
Google: To provide Calendar integration at your request
Email service providers: To send booking confirmations and communications
Hosting and infrastructure providers: Who store and serve our website and booking data
Legal authorities: Where required by law or to protect our legal rights

All third-party service providers are required to handle your data securely and only for the purposes we specify.

6. How Long We Keep Your Data

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations:

Booking records: 7 years (for financial and legal compliance)
Account information: For the duration of your account, plus 2 years after closure
Communication records: 2 years
Google Calendar tokens: Until you revoke access or your account is closed

After these periods, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Ask us to correct inaccurate or incomplete data
Right to erasure: Request deletion of your data (subject to legal retention requirements)
Right to restriction: Ask us to limit how we use your data
Right to data portability: Receive your data in a machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [your contact email]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

Our website uses cookies to ensure it functions correctly and to understand how visitors use it. Cookies we use include:

Essential cookies: Required for the booking system and session management to work
Analytics cookies: To understand how visitors interact with our site (e.g. Google Analytics)

You can control cookies through your browser settings. Disabling essential cookies may prevent you from making bookings. For more detail, please see our Cookie Policy [link if applicable].

9. Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

HTTPS encryption for all data transmission
Secure OAuth authentication for Google integrations
Access controls limiting who can view booking data
Regular security reviews of our systems

No online system can be guaranteed 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by email or by displaying a prominent notice on our website. The date at the top of this page indicates when it was last updated.

We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or your personal data, please get in touch:

Email: contact@tadaudio.ltd
Website: tadstudios.co.uk
Address:
Unit 8/9 Grange Farm Industrial Estate
Little Chesterton
Bicester
Oxford
Oxfordshire
OX25 3PD

We aim to respond to all enquiries within 5 business days.