Fiesta’S commitment to your privacy

Privacy Policy

Last updated: 10 September 2025

1. Introduction & Who We Are

1. Fiesta Studios Ltd (“we”, “us”, “our”) is the data controller for personal data collected via our websites and during our trading activities.
2. Registered address: Unit 11, Lopen Business Park, Mill Lane, Lopen, Somerset, TA13 5JS, United Kingdom.
3. Contact: sales@fiestastudios.com · Tel: 01460 242464.

2. Scope

2. This policy covers personal data we process when you visit our websites (including fiestastudios.co.uk and fiestastudios.com), open a trade account, place orders, contact us, or engage with our marketing.
3. It does not cover third-party sites you may access via links from our site.

3. Data We Collect

3. Identity & contact data — name, business name, role, email, phone, billing/delivery addresses.
4. Account & order data — login details, order history, invoices, payment status, delivery preferences.
5. Communications — emails, forms, calls, trade show interactions.
6. Marketing preferences — newsletter opt-ins/opt-outs, cookie choices.
7. Technical/usage data — IP address, device/browser, pages visited, referring URLs, approximate location (via cookies or similar technologies).
8. Payment data — processed securely by our payment provider; we do not store full card numbers.

4. How We Collect Data

4. Directly from you (account registration, orders, emails, phone, events).
5. Automatically through cookies/analytics when you browse our sites.
6. From partners (couriers, payment providers) for fulfilment, fraud prevention and compliance.

5. How We Use Data & Lawful Bases

5. Contract — to create/manage trade accounts, process and deliver orders, and provide customer service (UK GDPR Art.6(1)(b)).
6. Legal obligation — tax/accounting, product safety, fraud prevention, sanctions screening (Art.6(1)(c)).
7. Legitimate interests — secure/improve our services, B2B marketing to corporate subscribers, respond to business enquiries (Art.6(1)(f)).
8. Consent — email marketing to individuals where required and non-essential cookies/analytics (Art.6(1)(a)). You can withdraw consent at any time.

6. Marketing

6. We may send B2B marketing to corporate subscribers under PECR legitimate interests.
7. For individuals (including sole traders/partnerships), we rely on consent. You can unsubscribe at any time via links in our emails or by contacting us.

7. Cookies & Similar Technologies

7. We use cookies and similar technologies to operate the website, remember preferences, and (subject to consent) measure performance.
8. On first visit, you may accept/reject/manage categories. You can change choices later via “Cookie Settings”.
9. Categories include: strictly necessary (always active), functional, analytics and marketing.
10. We use Google Analytics for aggregated usage statistics; analytics cookies are set only with your consent (where required).

8. Payment Processing

8. Online card payments are processed securely by our provider (currently Sage Pay/Opayo). We receive payment confirmations but do not store full card details on our servers.
9. We may offer account terms; related data is processed for invoicing and credit control.

9. Sharing Your Data

9. We share data as necessary with trusted service providers acting on our instructions: payment processors, IT/hosting, email services, couriers/fulfilment, and professional advisers.
10. We may disclose data to authorities where legally required.

10. International Transfers

10. Where partners process data outside the UK, we use appropriate safeguards (e.g., UK IDTA or the UK Addendum to EU SCCs) to protect your data.

11. Data Retention

11. Account & order records: typically 6 years after the end of the financial year (for tax/accounting).
12. Marketing data: until you unsubscribe/withdraw consent, plus a short suppression period.
13. Analytics data: per our configuration and your cookie choices.

12. Security

12. We implement appropriate technical and organisational measures (encryption in transit, access controls, backups, and periodic reviews). No system is 100% secure; we maintain incident response procedures aligned with UK GDPR.

13. Your Rights

13. You may have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where processing is based on consent, you can withdraw it at any time.
14. To exercise rights, contact sales@fiestastudios.com. You can also complain to the UK ICO at ico.org.uk.

14. Promotional Photographs & Historical Pricing

14. From time to time we may display promotional photographs or marketing materials containing prices from past events, shows or catalogues. These prices are historical and provided for illustration only.
15. The current price shown in our live price lists, quotations or checkout will always prevail.

15. Changes to This Policy

15. We may update this policy periodically. We will post changes here and update the “Last updated” date. Significant changes may also be notified by email or on-site notice.

16. Contact Us

16. Questions about this policy or your data: sales@fiestastudios.com or write to Data Protection, Fiesta Studios Ltd, Unit 11, Lopen Business Park, Mill Lane, Lopen, Somerset, TA13 5JS, UK.