SandbarWho is responsible
BEACH BAR WIRRAL LIMITED, at 8 Hesketh Way, Bromborough, Wirral, United Kingdom, CH62 2EL, is the data controller for Sandbar account, product, support and marketing data. Contact support@beachbarwirrall.shop or +44 7923466378 for privacy requests.
Sandbar is an online-only AI outdoor celebration planning and creative asset service.
What we collect
- Account and subscription details: name, email, plan, renewal state and customer identifiers.
- Payment and order records: plan, amount in USD, payment status, refund or dispute status, billing country and transaction references.
- Product inputs: occasion, headcount, setting, date or weather window, budget, children, dietary and no-alcohol preferences, prompts and edits.
- Generated results: structured plans, invitation images, task identifiers, reels, export requests and usage counters.
- Files: optional venue photos, reference images, logo files and recap photos.
- Support and lead data: contact details, messages, party briefs, consent and correspondence.
- Technical data: IP address, browser, device, timestamps, security logs, cookie choices and page interactions.
Do not upload confidential documents, identity documents, payment card images or content you lack permission to use.
How we collect it
We receive data directly when you use the planner, upload a file, subscribe, manage billing, submit either contact form or contact support. Hosting, payment, email, analytics and AI processors return limited operational records needed to deliver and secure the service.
How AI user input and results are processed
User input includes planner answers, free-text prompts, edits, selected example or sample data, and any optional venue photo, reference image, logo or recap photo you upload. We send only the input and files needed for the requested text, image or video generation to the configured AI provider. The provider processes that material on our instructions to return the requested plan, visual asset or reel; we do not permit user input, uploads or generated results to be used to train AI models.
Prompts and generated results are kept while needed to provide account history and downloads, or deleted earlier following a valid request unless a legal retention duty applies. Uploaded files are cached only for generation and are scheduled for deletion within 30 days. You can request deletion of eligible user input, files and generated results by emailing support@beachbarwirrall.shop. Removing content from active systems may be followed by a limited backup-rotation period.
Why we use it and legal bases
- Contract: create plans and assets, manage subscriptions, deliver files, provide support and administer cancellation.
- Legitimate interests: prevent abuse, secure accounts, diagnose failures, measure service reliability and defend legal claims, balanced against user rights.
- Legal obligation: maintain tax, accounting, refund, dispute and compliance records.
- Consent: optional non-essential analytics or marketing where required; consent can be withdrawn.
We do not claim to train AI models on your private prompts, uploads or generated outputs. We instruct processors to handle them for service delivery under contractual safeguards.
International transfers
Processors may handle data in the United Kingdom, European Economic Area, United States and other countries. Where UK or EEA data leaves its origin, we use adequacy regulations, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses and supplementary measures as appropriate.
How long we keep it
- Account and subscription records: while active, then up to 6 years where needed for contract, tax or claims.
- Payment, refund and dispute records: generally 6 years after the relevant financial period.
- Support and lead correspondence: up to 24 months after resolution.
- Prompts and generated plans: while needed for account access, or earlier on valid deletion request unless legally retained.
- Uploaded reference, logo and recap files: cached for generation and scheduled for deletion within 30 days.
- Security logs: generally up to 12 months.
Generated files downloaded to your device remain under your control. Backup deletion may take an additional limited rotation period.
Security
We apply access controls, encrypted transport, restricted service credentials, server-side secret handling, payment-provider checkout, audit logging and processor reviews. No online system can be guaranteed completely secure. Contact us promptly if you believe your account or upload has been exposed.
GDPR and CCPA rights
Depending on location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to a supervisory authority. UK users may complain to the Information Commissioner’s Office. EEA users may contact their local authority.
California residents may request categories and specific pieces of information, correction or deletion and may opt out of sale or sharing used for cross-context behavioural advertising. We do not discriminate for exercising privacy rights. We may verify identity before acting and may retain data where an exemption applies.
Do Not Sell or Share
Sandbar does not sell personal information for money. We do not use personal information for cross-context behavioural advertising. Send a request to support@beachbarwirrall.shop with “Do Not Sell or Share” in the subject if you want us to record the preference or ask about current practices.
Automated decisions and children
AI generation creates suggestions and files but does not make decisions with legal or similarly significant effects about you. A person should review outputs before use.
Sandbar is not for children under 13. Users aged 13–17 need consent from a parent or guardian. Any educational alcohol-related content is limited to adults aged 18 or over; the service does not sell or deliver alcohol.
Contact and complaints
Email support@beachbarwirrall.shop, call +44 7923466378, or write to BEACH BAR WIRRAL LIMITED, 8 Hesketh Way, Bromborough, Wirral, United Kingdom, CH62 2EL. We aim to acknowledge privacy requests promptly and respond within the period required by applicable law.