Privacy Policy

1. Information We Collect

We collect the following types of personal information:

• Contact information — your name, email address, and phone number when you book a workshop or submit an inquiry.
• Payment information — credit or debit card details processed securely through Stripe. We never store your full card number on our servers.
• Booking details — the workshop type, date, time, and number of guests in your party.
• Communications — messages you send us via email, phone, or any contact form on the site.

2. How We Use Your Information

We use the information we collect to:

• Process and confirm your workshop booking.
• Send booking confirmation, reminder, and follow-up emails and SMS messages.
• Respond to your questions or support requests.
• Send occasional promotional emails about upcoming workshops or events (you may opt out at any time).
• Comply with legal obligations.

3. Payment Processing

All payments are processed by Stripe, a PCI-DSS-compliant payment processor. Your card details are transmitted directly to Stripe and are never stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers — trusted vendors who help us operate our business (e.g., payment processing, email delivery), bound by confidentiality obligations.
• Legal compliance — when required by law, court order, or governmental authority.

5. Data Retention

We retain your booking and contact information for as long as reasonably necessary to provide our services, resolve disputes, and comply with legal requirements. You may request deletion of your personal data by contacting us at info@tuftspot.com.

6. Marketing Communications

If you opt in to email or SMS marketing, you may unsubscribe at any time by clicking the unsubscribe link in any email or replying STOP to any SMS message. We will honor your request promptly.

7. Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, or misuse, including the use of encrypted connections (HTTPS) for all data transmission. However, no method of electronic storage or transmission is 100% secure.

8. Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us: