Our Privacy Policy was last updated on 16/07/2026.

This privacy notice explains how we collect, use, and protect your personal data when you visit and use our website: www.steadfastspace.com.

By providing us with your personal information, you confirm that you are over 13 years of age.

Steadfast Space (run by Esther Rook, sole trader) is the data controller and is responsible for your personal data (referred to as "we", "us" or "our" in this policy).

Contact Details

Full name of legal entity: Esther Rook, trading as Steadfast Space

Business address: 5 Howard Close, Lee-on-the-Solent, Hampshire, PO13 8LU

Email address: [email protected]m

It is important that the information we hold about you is accurate and up to date. Please let us know if your personal information changes by emailing us.

2. What Data Do We Collect and Why?

Personal data means any information that can be used to identify you. It does not include anonymised data.

We may process the following categories of personal data:

Communication Data – any communication you send us (via forms on the website, email, social media, or other channels). This is used to respond to you, provide requested information or resources, keep records, and manage any legal claims. Our lawful basis: legitimate interests (to reply and keep records).

Customer Data – details relating to any purchases or bookings you make (name, contact information, billing details, payment details, etc.). This is used to deliver services and maintain records of transactions. Our lawful basis: contractual necessity.

User Data – data about how you use our website and services (such as pages visited, content interactions, and preferences). This helps us ensure the website functions properly and improve our services. Our lawful basis: legitimate interests.

Technical Data – details about your device and browsing (IP address, browser type, session duration, navigation paths, etc.), collected via analytics tools. This helps us improve website performance, security, and marketing effectiveness. Our lawful basis: legitimate interests.

Marketing Data – your communication preferences and interest in receiving marketing messages from us. This is used to send you relevant content, promotions, and updates. Our lawful basis: legitimate interests or consent (where required).

We do not collect sensitive personal data (e.g., health, ethnicity, beliefs, or criminal data).

If you do not provide data we require to deliver a service, we may be unable to fulfil the contract.

We will only use your personal data for the purpose it was collected unless a new purpose arises, in which case we will notify you and explain the legal grounds.

We do not carry out automated decision-making or profiling.

3. How We Collect Your Data

Directly from you – via forms, emails, messages, or purchases.

Automatically – through cookies and analytics when you use our website.

From third parties – e.g., analytics providers (Google), advertising networks (such as Facebook), or payment service providers.

For more details, please see our Cookie Policy.

4. Marketing Communications

We may send you marketing communications if:

You have requested information or purchased from us; or

You have consented to receive such communications; and

You have not opted out of receiving marketing.

You can opt out at any time using the unsubscribe link in our emails or by contacting us directly at [email protected].

We will never share your personal data with third parties for their own marketing purposes without your explicit consent.

5. Sharing Your Data

We may share your data with trusted third parties, such as:

Service providers (IT, hosting, email, and payment systems).

Professional advisers (lawyers, accountants, insurers).

Regulators and government bodies if required by law.

Third parties in the event of a business sale, transfer, or restructuring.

All third parties are required to respect your data and process it only as instructed by us.

6. International Transfers

Some service providers (e.g., analytics or cloud providers) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards (such as approved contractual clauses or equivalent protection measures).

7. Data Security

We have put in place appropriate security measures to protect your personal data from being lost, used, altered, or accessed without authorisation.

If a data breach occurs, we will notify you and the relevant authorities where legally required.

8. Data Retention

We keep personal data only as long as necessary for the purposes collected, including legal, accounting, or reporting requirements.

For tax purposes, we keep basic customer information (contact, identity, financial, and transaction data) for six years.

In some cases, we may anonymise your data for research or analysis.

9. Your Legal Rights

You have the right to:

Request access to your data.

Request correction or erasure.

Object to processing or restrict processing.

Request transfer of your data.

Withdraw consent (where consent is the basis of processing).

To exercise these rights, please contact [email protected].

You will not be charged unless a request is excessive or unfounded. We may require proof of identity before actioning your request.

If you are unhappy with how we process your data, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk. We would appreciate the chance to resolve your concerns first.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices and encourage you to read their policies.

11. Cookies

We use cookies to enhance your browsing experience and analyse website traffic. You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality.

For more details, see our Cookie Policy.

Your acceptance of these terms

By using this Site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.