PTPOxon Partnership (“we”, “us”, “our”) operates two trading names:

• Power Tools & Ponytails (PTP) – DIY services and small repairs

• The Handy Hub – Workshops, training sessions, and community learning events

We are committed to protecting your personal data and respecting your privacy.

This Privacy Notice explains what information we collect, how we use it, and your rights under UK data protection law.

1. Who we are

Legal Name: PTPOxon Partnership

Trading Names: Power Tools & Ponytails (PTP), The Handy Hub

Partners: Gemma Wilde-Crofts & Katy Wilde-Crofts

Email: ptpoxon@gmail.com

We are the “data controller” for the personal data we collect.

2. What personal data we collect

For DIY services (PTP):

• Name

• Address

• Email address

• Phone number

• Details about the job or property

• Invoices, quotes, and payment records

For workshops (The Handy Hub):

• Name

• Email address

• Phone number

• Emergency contact (optional)

• Booking information

• Workshop attendance

• Waiver/consent forms

Website & communication:

• Enquiry form details

• Email correspondence

We do not collect or store payment card details — these are handled securely by our payment provider.

3. How we use your information

We use your personal data to:

• Provide DIY services and complete repair jobs

• Manage workshop bookings and attendance

• Send confirmations, reminders, and updates

• Issue invoices, receipts, and keep financial records

• Respond to enquiries

• Meet our legal and insurance obligations

• Improve our services and website

We only collect what we need and only keep it for as long as necessary.

4. Lawful basis for processing

We process personal data under the following lawful bases:

• Contract: to provide the service you have booked

• Legal obligation: for tax, accounting, and insurance requirements

• Consent: for optional things like marketing emails or photos

• Legitimate interests: for running and improving our business

You can withdraw consent at any time.

5. Sharing your information

We only share your data when necessary, such as with:

• Payment processors (e.g., SumUp, Stripe)

• Booking platforms (if used)

• Insurance providers (if required for a claim)

• Accountants or HMRC (for legal compliance)

• Venues hosting workshops (attendance lists only when required for safety)

We do not sell your data or share it for advertising.

6. How long we keep your data

We keep personal data only for as long as needed:

• Financial records: 6 years (legal requirement)

• Workshop waivers: up to 3 years

• General enquiries: up to 12 months

• Marketing consent: until you unsubscribe

After this, data is securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion (in some cases)

• Restrict or object to processing

• Withdraw consent

• Request a copy of your data

To exercise your rights, email ptpoxon@gmail.com.

8. Data Protection

We take data protection seriously and follow the requirements of the UK GDPR and the Data Protection Act 2018.

PTPOxon Partnership is registered with the Information Commissioner’s Office (ICO) as a data controller.

We use appropriate technical and organisational measures to keep your data secure, including:

• Password‑protected devices

• Secure cloud storage

• Limited access to personal data

• Encrypted communication where possible

9. Contact us

If you have any questions about this Privacy Notice or how we handle your data, please contact:

Email: ptpoxon@gmail.com

If you are unhappy with how we handle your data, you can also contact the Information Commissioner’s Office (ICO).