Your information
Privacy Policy
Last updated: 25 August 2026
Shisha Point is the controller of personal information collected through this website and our booking service. Shisha Point is currently an unregistered trading business. Privacy enquiries can be sent to info@shishapoint.co.uk. A correspondence address will be added when established and is available during booking confirmation.
1. Information we collect
When you submit or choose to save a booking, join our mailing list, or contact us, we may collect your name, telephone number, email address, requested hire date, city, delivery postcode, booking type, number of devices, flavour selections, notes, booking reference and correspondence with us. We also record limited website attribution information, such as referral source, campaign labels, landing page and an anonymous visitor identifier, to understand which marketing produces bookings. We may also record payment and deposit status, identification-check status and information about delivery, collection, damage or disputes. We do not ask you to upload identity documents through this website.
2. How we use your information
- To receive, save, assess and respond to booking requests.
- To send one delayed booking reminder when you actively select that option, and cancel it if you complete the booking first.
- To send news, offers, flavour updates and event information when you join our mailing list.
- To confirm availability, identity requirements, pricing, payment, delivery and collection.
- To send booking alerts and customer confirmation emails.
- To measure booking-form and campaign performance.
- To manage equipment, deposits, cancellations, complaints and disputes.
- To keep appropriate business, accounting and security records.
- To comply with legal obligations and protect our legitimate business interests.
3. Our lawful bases
We normally process booking information because it is necessary to take steps at your request before entering a contract and to perform a confirmed hire agreement. The optional unfinished-booking reminder and mailing-list emails are sent with your consent, which you may withhold by leaving the relevant option unticked. You may withdraw mailing-list consent at any time by contacting info@shishapoint.co.uk. We may process records to comply with legal obligations and rely on legitimate interests for proportionate service measurement, security, fraud prevention, complaint handling and defending legal claims, provided those interests do not override your rights.
4. Email and service providers
Our website uses service providers that support hosting, database storage and email delivery. Booking records are stored through the website hosting service. Resend processes email addresses and message content to send booking alerts and confirmations. These providers process information on our behalf under their own security and data-protection arrangements. Information may be processed outside the United Kingdom where appropriate safeguards are used.
5. How long we keep information
Unfinished booking drafts are available for up to 7 days and are then deleted. We normally keep submitted booking records for 12 months after the scheduled hire date, then delete or anonymise them. We may retain limited information for longer where reasonably required for accounting, tax, fraud prevention, an unresolved complaint, a legal claim or another legal obligation. Unsuccessful enquiries may be deleted sooner when no longer needed.
6. Who we share information with
We share information only where needed with members of the Shisha Point team, service providers supporting the website and email delivery, delivery or event personnel who need booking details, professional advisers, insurers, payment providers, or public authorities where legally required. We do not sell personal information.
7. Security
We use access controls and service-provider security features intended to protect booking information. No internet service is completely risk-free, so please do not put sensitive identification, payment-card or medical information in the free-text booking notes.
8. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict your information, object to certain processing and receive some information in a portable format. You may also withdraw consent where processing relies on consent. To make a request, email info@shishapoint.co.uk. We may need to verify your identity before responding.
9. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
11. Changes to this policy
We may update this policy when our service, providers or legal obligations change. The latest version will be published here with its updated date.