Rugby Inflatables
Privacy Policy
At Rugby Inflatables, we are committed to protecting your personal data and respecting your privacy.
This policy explains how we collect, use, store and protect your information in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
Effective date: November 2025
Last reviewed: March 2026
Quick Summary
✓ We only collect information needed to provide our services.
✓ Your information is stored securely and access is restricted.
✓ We never sell your personal data or share it for another organisation’s own marketing.
✓ You remain in control of your personal information.
Who We Are
In this privacy policy:
“We”, “us” and “our” refer to Rugby Inflatables.
“You” and “your” refer to our customers and website visitors.
Data Controller: Macauly Peel
Email:
info@rugby-inflatables.co.uk
Why We Collect Your Data
We collect and process personal information where it is necessary to:
✓ Respond to enquiries and manage bookings
✓ Deliver, install and collect equipment
✓ Meet legal, insurance and tax requirements
✓ Maintain safety and inspection records
✓ Operate and improve our services
✓ Send marketing communications where you have consented
What Personal Data We Collect
Depending on how you contact or book with us, we may collect:
Name
Contact details
Email address, telephone number and address
Event information
Date, venue and setup details
Payment records
Booking, payment and invoice information
Website information
IP address and website usage information
Setup photographs
Images taken for safety, insurance or marketing purposes
We only collect personal information that is reasonably necessary to provide our services, meet our obligations or operate our business.
Our Lawful Basis for Processing
UK data protection law requires us to have a lawful reason for using your information. Depending on the circumstances, we rely on:
Contractual necessity
To process your booking and provide the services you have requested.
Legal obligation
To meet tax, accounting, insurance, safety and other legal requirements.
Legitimate interests
To operate, protect and improve our business, provided your rights and interests do not override those interests.
Consent
For optional marketing communications and the use of identifiable photographs where consent is required.
Where we rely on consent, you can withdraw it at any time.
How Long We Keep Your Data
We only retain personal data for as long as it is needed for the purpose it was collected, or as required by law.
| Type of Record |
Typical Retention Period |
| Booking, hire and financial records |
Usually 6 years |
| Accident or incident reports |
At least 3 years, or longer where legally necessary, including incidents involving children |
| Marketing and photographic consent |
Until consent is withdrawn or the information is no longer required |
| General enquiries |
Deleted when resolved and no longer reasonably required |
Once information is no longer required, it will be securely deleted, destroyed or anonymised.
Who Has Access to Your Data
Access to personal information is limited to people who need it to carry out their responsibilities.
Macauly Peel — Owner and Data Controller
Authorised Rugby Inflatables team members involved in customer service, bookings, deliveries, setup or collections
Third-Party Service Providers
We use selected third-party providers to help operate our business and provide our services. These may include:
Booking Online Ltd
Online booking system
Fastmail
Email services
Social media platforms
Where you contact or interact with us through social media
We use trusted providers that process personal data in accordance with applicable UK data protection law, contractual obligations and their own privacy policies.
When We May Share Your Data
We do not sell your personal information. We may share limited information where reasonably necessary:
✓ To meet a legal or regulatory obligation
✓ To support an insurance claim, accident investigation or legal matter
✓ To prevent or investigate fraud, misuse or unlawful activity
✓ To provide services through an authorised processor or supplier
Any sharing will be limited to the information necessary for the specific purpose.
Photography and Marketing
We may take photographs of equipment and completed setups for:
Safety and insurance records
Website, social media and printed marketing
We do not use identifiable images of individuals for marketing without appropriate consent.
Particular care is taken where children may appear in a photograph.
Consent is generally not required for photographs that only show our equipment and do not identify an individual.
You can withdraw marketing or photographic consent at any time by contacting us.
Marketing Preferences
You will only receive direct marketing communications where you have opted in or where another lawful basis permits us to contact you.
You can unsubscribe or withdraw your consent at any time:
Cookies and Website Tracking
Our website may use cookies and similar technologies to:
✓ Improve your website experience
✓ Enable booking and website functionality
✓ Measure and understand website performance
Subject to the tools enabled on our website, this may include services such as Google Analytics or Microsoft Clarity.
You can manage or block cookies through your browser settings. Restricting certain cookies may affect how parts of the website work.
Your Data Protection Rights
Depending on the circumstances, you may have the right to:
✓ Access the personal data we hold about you
✓ Correct inaccurate or incomplete information
✓ Request deletion of your personal data
✓ Restrict or object to certain processing
✓ Withdraw consent where processing relies on consent
✓ Request a portable copy of eligible information
We normally respond to valid data protection requests within one month. We may need to verify your identity before releasing or changing personal information.
Data Security
We take reasonable steps to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Password-protected systems
Restricted access controls
Secure storage and deletion procedures
Data Breach Procedure
In the unlikely event of a personal data breach, we will:
1. Investigate, assess and contain the incident as quickly as reasonably possible.
2. Notify the Information Commissioner’s Office within 72 hours where legally required.
3. Inform affected individuals where the breach is likely to create a high risk to their rights and freedoms.
Questions or Complaints
Please contact us first if you have a question or concern about how your personal information has been handled. We will aim to resolve the matter promptly.
You also have the right to complain to the UK data protection regulator:
Updates to This Policy
This privacy policy is reviewed regularly and may be updated where required due to changes in legislation, guidance, technology or our business operations. The latest review date will be shown at the top of this page.