Your information, handled with care.

This website is operated by MUSCLE & MISCHIEF LIMITED, trading as Muscle & Mischief, a private limited company registered in England and Wales (company number 17342721). Registered office: [To be confirmed: replacement registered office address, to be supplied before publication].

We are the controller of the personal information described in this policy. Contact us at hello@muscleandmischief.co.uk.

We are not currently registered with the Information Commissioner's Office (ICO); our fee and exemption status has not yet been assessed. No exemption is claimed. This page will be updated once that assessment is complete.

Booking and enquiry form: name, email address, mobile number, event type, date and time, venue name, address, postcode and venue type, guest numbers, extras chosen, special requests and your agreement to our safety statements. Where an ID check is requested, a copy of the identity document you upload.

Payments: card details are entered directly into Stripe's secure payment form. We never see or store your full card details. We receive confirmation of payment and limited payment information from Stripe.

Work With Us applications: full name, email, mobile, date of birth, town, county, postcode, gender, driving licence and vehicle details, competition background, coach, experience, availability, travel distance, social media and website links, your "about you" text, and any photos, CV and introduction video you upload.

Clothing priority list: name, email address, preferred collection, colour, size, quantity and comments.

Emails and messages: the content of emails you send us and records of emails we send you.

• To respond to enquiries and manage bookings: preparing quotes, calculating travel, taking deposits and balances, confirmations and reminders. Lawful basis: [To be confirmed: contract / steps before a contract].
• To keep events safe: checking venue details and, where requested, verifying identity. Lawful basis: [To be confirmed: legitimate interests].
• To assess Work With Us applications. Lawful basis: [To be confirmed: consent given on the application form / legitimate interests].
• To tell you about the clothing launch when you join the priority list. Lawful basis: consent, which you can withdraw at any time.
• To meet accounting, tax and legal obligations. Lawful basis: legal obligation.

We do not sell your personal information. We use the following service providers to run this website and our bookings:

• Lovable Cloud: website hosting, the secure database and private file storage where submissions and uploads are kept, and delivery of our website emails.
• Stripe: deposit and balance payments. Stripe receives your name, email and payment details.
• postcodes.io: receives the venue postcode to find its location for travel pricing.
• OSRM (Open Source Routing Machine): receives map coordinates to calculate driving distance.
• Google Fonts: supplies the website's fonts, which means your IP address is sent to Google when pages load.
• Our email inbox at hello@muscleandmischief.co.uk, provided by [To be confirmed: email inbox provider].

If you contact us through Instagram, WhatsApp or another messaging service, that service's own privacy policy also applies. [To be confirmed: confirm which messaging services you use]

[To be confirmed: provider processing locations and applicable international-transfer safeguards; no specific safeguard has yet been confirmed]

• General enquiries: [To be confirmed: proposed retention: 12 months after our last contact, unless the enquiry becomes a booking; deletion process to be confirmed].
• Booking and payment records: [To be confirmed: proposed retention: 6 years after the end of the relevant financial year, subject to applicable accounting, tax and legal requirements; deletion process to be confirmed].
• Identity documents uploaded for booking checks: deleted automatically 30 days after upload.
• Work With Us applications, including photos and videos: [To be confirmed: proposed retention: 6 months after the recruitment decision, unless separate agreement is obtained for future opportunities; deletion process to be confirmed].
• Clothing priority-list sign-ups: [To be confirmed: retention, withdrawal process and proposed review of inactive contacts after 24 months].

Website submissions and uploads are held in Lovable Cloud, with administrator access controls and time-limited links for viewing uploaded files. [To be confirmed: approve the final security description and deletion procedures; this draft is not a security or compliance certification].

Under UK data protection law you have the right to access your information, ask us to correct or delete it, restrict or object to how we use it, ask for it to be transferred, and withdraw consent at any time where we rely on consent.

To make a request, email hello@muscleandmischief.co.uk. [To be confirmed: rights-request handling, identity checks and applicable response deadlines].

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

For details of the cookies and similar technologies used on this website, see our Cookie Policy.

We may update this policy from time to time. The latest version will always be published on this page.