Privacy policy
Effective 30 January 2026
Helta Skelta (“we”, “our”, “us”) is committed to protecting your privacy and complying with the UK GDPR and Data Protection Act 2018. This policy explains how we collect, use, and safeguard your personal data when you visit our website or use our services.
1. Data controller
Helta Skelta is the data controller for the purposes of data protection law. You can reach us using the details below.
2. What data we collect
- Identity & contact data — name, company, job title, email, phone number, postal address.
- Booking & transaction data — services booked and payment metadata (handled by trusted providers; no card data is stored on our servers).
- Technical & usage data — IP address, device and browser type, pages visited, dwell time, referrers, and performance metrics.
- Communications data — enquiries sent via forms, email, or social channels plus survey responses and feedback.
3. Legal bases for processing
- Contract — providing and administering our services, including enquiries, bookings, and support.
- Consent — non-essential cookies/analytics and optional marketing communications.
- Legal obligation — complying with tax, accounting, and regulatory requirements.
- Legitimate interests — improving our services, ensuring security, and growing the studio while respecting your rights.
4. How we use your data
- Provide, personalise, and improve our services and website.
- Respond to enquiries and manage bookings, holds, and payments.
- Monitor performance, availability, and security.
- Send updates or marketing where you have opted in (you can unsubscribe at any time).
5. Cookies & analytics
We use essential cookies to make the site work, and optional analytics to improve performance. Specifically, we use Vercel Analytics and Vercel Speed Insights. These tools may process anonymised IP addresses, device and browser information, pages visited, and performance metrics. We never use analytics for advertising or to track individual users.
On your first visit you can accept all cookies or only the essential ones. Update your choice any time here:
6. Sharing your data
We do not sell your personal data. We may share it with service providers that help us operate the website or deliver services (such as hosting, analytics, payment processors, and IT support), professional advisers (like accountants and insurers), and authorities where required by law. We require these recipients to keep your data secure and use it only for the purposes we specify.
7. International transfers
If personal data is transferred outside the UK or EEA we use appropriate safeguards such as UK-approved Standard Contractual Clauses or other lawful mechanisms.
8. Data retention
We keep personal data only as long as needed for the purposes set out in this policy:
- Customer and transaction records — generally six years after our relationship ends (to meet legal and tax obligations).
- Marketing data — until you withdraw consent or opt out.
9. Your rights
Under UK GDPR you can access, rectify, erase, or restrict processing of your personal data; object to processing; request data portability; and withdraw consent at any time. Contact admin@heltaskelta.uk to exercise these rights.
You can also lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Security
We use appropriate technical and organisational measures to protect your data. However, no method of transmission over the internet is completely secure.
11. Changes to this policy
We update this policy from time to time. The latest version will always be available here along with the effective date noted above.