Privacy notice
Last updated 20 August 2026
This notice covers Chair and Blade. It describes what happens to your information when you visit, who else sees it, and what you can ask us to do about it. It was written by reading what the site actually does, not from a template.
Who we are
Chair and Blade Ltd is the data controller. We're a company registered in England and Wales, company number 16691285. The studio is at 25 St John Street, Manchester M3 4DT. Our registered office is 24 Harrington Street, Manchester, Lancashire, M18 8UQ.
For anything in this notice, including a request about your own data, contact us on data@chairandblade.co.uk.
The short version
There's nothing here to fill in: no contact form, sign-up or newsletter. The site doesn't ask you for anything. What's involved in a visit is what any website receives by being loaded, plus analytics if you accept it.
Booking is the exception, and it happens somewhere else. See Bookings below.
What we handle, and why
Technical information from your visit
Loading any page sends your IP address, browser type and the page you asked for to our hosting provider, which keeps request logs. This is unavoidable in the sense that a web server cannot answer a request without receiving it. We rely on legitimate interests (Article 6(1)(f)) in keeping the site available and secure.
Analytics, only if you accept
We use Google Analytics through Google Tag Manager to understand which pages people read. Analytics storage is switched off by default and only turns on when you choose Accept on the cookie banner, so we rely on your consent (Article 6(1)(a)). You can decline, and nothing breaks.
One thing worth being precise about, because "nothing happens until you accept" would be misleading: the Tag Manager container itself loads on every visit, forbidden from storing anything until you decide. Loading it does contact Google and does reveal your IP address. Our cookie policy sets out what is and isn't stored on your device.
Vercel Analytics
Our host runs its own analytics, which counts page views without cookies and without storing anything on your device. It records the page, the referring site, and coarse device and country information, and it doesn't build a profile of you or follow you to other sites. It runs on every visit under legitimate interests (Article 6(1)(f)), separately from the Google analytics described above.
Error reports
When something breaks we receive an error report through Sentry, which includes your IP address, the page and technical details of the fault. Legitimate interests again (Article 6(1)(f)): a site nobody can fix stays broken.
The map
The map in the footer loads from Google only when you choose to show it. Until you click, nothing is requested from Google and it sees nothing. If you do load it, Google receives your IP address and may set its own cookies inside that frame, under its own privacy policy rather than ours. The Get Directions link sends nothing until you follow it.
Reviews we display
The reviews on this site are pulled from our Google Business Profile and briefly cached so the page still works when Google's service is unavailable. That cache holds reviewer first names, ratings and review text, all of it already published publicly on Google by the reviewer. It expires after 30 days.
Bookings
We don't take bookings on this site. The booking button sends you to Square, and whatever you enter there you give to Square directly. For your booking and payment records, Square is the controller and its own privacy policy applies. We see the resulting appointment through our Square account, but this website never receives, holds or transmits your booking details.
Who else is involved
These are the third parties that see anything at all. Everything a visitor generates on this site is listed.
| Who | What they do | What they see |
|---|---|---|
| Vercel | Hosting, cookieless page-view analytics, and the review cache | IP address, browser, request logs, pages viewed, cached review text |
| Google (Tag Manager and Analytics) | Analytics, only after you accept | IP address, pages viewed, device and country |
| Google (Maps) | The footer map, only if you load it | IP address and the page you loaded it from |
| Cloudinary | Serving images and the hero video | IP address and browser |
| Cloudflare | Bot check on the staff login | IP address |
| Sentry | Error reporting | IP address, page, technical fault details |
| Sanity | The content management system behind the site | No visitor data. Staff accounts only |
| Square | Bookings and payments, as its own controller | Whatever you enter when booking |
Several of these are based in the United States. Where that applies, transfers rely on the standard contractual clauses and the UK addendum in each provider's terms.
How long things are kept
- Cached reviews: 30 days, then they expire automatically.
- Server and error logs: kept by our hosting and error providers on their own schedules, typically weeks rather than years.
- Analytics: Google's retention settings apply. We hold no copy.
- Your cookie choice: stored in your own browser until you clear it. We keep no copy of it.
- Booking records: held by Square on its schedule, not ours.
Your rights
You can ask for a copy of what we hold about you, ask us to correct or delete it, object to or restrict how we use it, and withdraw consent for analytics at any time by declining in the cookie banner or clearing your browser storage. Because this site collects so little, a request will often be answered by explaining that we hold nothing tied to you.
Ask on data@chairandblade.co.uk. We'll reply within one month. For anything you entered when booking, Square holds it, so ask us and we'll point you at the right route.
If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd rather you told us first so we can put it right.
Changes
If we change what the site does, this notice changes with it and the date at the top moves.