Privacy Policy

1. Who We Are

This website is operated by Shannon Stevenson's Katy Perry Tribute ("we", "us", "our"). Our website address is thekatytribute.com. You can contact us via the enquiry form on the website.

2. What Data We Collect

When you submit an enquiry through our contact form, we collect the following personal data:

• Full name
• Email address
• Phone number (optional)
• Your message / enquiry details
• Date and time of submission

We also collect standard web server logs (IP address, browser type) for security purposes.

3. How We Use Your Data

We use your personal data solely to:

• Respond to your booking enquiry
• Send you a confirmation that we received your message
• Communicate with you regarding your potential booking

We do not use your data for marketing without your explicit consent, and we do not sell your data to third parties.

4. Legal Basis (UK GDPR)

We process your data under the lawful basis of consent — you explicitly agree to data processing when you tick the consent checkbox on the enquiry form. You may withdraw consent at any time by contacting us.

5. How Long We Keep Your Data

We retain enquiry data for up to 2 years for the purposes of managing bookings and correspondence. After this period, data is deleted. You may request earlier deletion at any time (see Your Rights below).

6. Third Parties

We use the following third-party services to operate this website:

• Resend (resend.com) — used to send email notifications. Your email address is transmitted to Resend's servers to deliver confirmation emails. Resend is GDPR compliant.
• Porkbun — our web hosting and domain provider.

7. Cookies

This website uses a single functional cookie to remember your cookie consent preference. We do not use advertising or tracking cookies. You can decline non-essential cookies via the banner shown on your first visit.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us via the website's enquiry form.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure password storage, and restricted access to our admin systems.