1. Introduction

Pretty Little Vintage (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our event styling services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller responsible for your personal information.

Data Controller Contact Details:
Pretty Little Vintage
Email: info@prettylittlevintage.co.uk
Phone: +44 XXXX XXXXXX

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Complete enquiry or contact forms on our website
• Request a quote or consultation for our services
• Make a booking or enter into a contract with us
• Subscribe to our newsletter or mailing list
• Communicate with us via email, phone, or social media
• Leave reviews or testimonials about our services

This information may include:

• Full name and title
• Email address
• Telephone number
• Postal address
• Event date and venue information
• Event requirements and preferences
• Payment information (processed securely by third-party payment processors)
• Any other information you choose to provide

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device information (screen size, device type)

This information is collected through cookies and similar tracking technologies. Please see our Cookie Policy section below for more details.

2.3 Information from Third Parties

We may receive information about you from third parties such as:

• Social media platforms (if you interact with our social media pages)
• Wedding planning websites or directories where we are listed
• Venue coordinators or other event suppliers (with your consent)
• Analytics and marketing service providers

3. How We Use Your Information

We use your personal information for the following purposes, based on lawful grounds under UK GDPR:

3.1 To Provide Our Services (Contract Performance & Legitimate Interests)

• Processing and responding to your enquiries and quote requests
• Providing event styling services and fulfilling our contractual obligations
• Communicating with you about your event, bookings, and arrangements
• Coordinating with venues and other suppliers on your behalf
• Processing payments and maintaining financial records

3.2 For Marketing and Communication (Consent & Legitimate Interests)

• Sending you newsletters, promotional offers, and event inspiration (with your consent)
• Informing you about new services, products, or special offers
• Displaying your testimonials or reviews (with your explicit consent)
• Sharing photos from your event on our website or social media (with your explicit consent)

3.3 To Improve Our Services (Legitimate Interests)

• Analyzing website usage to improve user experience
• Conducting market research and gathering feedback
• Developing new services and products
• Training our staff and improving service quality

3.4 For Legal and Administrative Purposes (Legal Obligation & Legitimate Interests)

• Complying with legal obligations and regulatory requirements
• Protecting our legal rights and preventing fraud
• Maintaining business records and accounts
• Resolving disputes and enforcing our terms and conditions

4. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

4.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These cookies enable basic features like page navigation and access to secure areas.
• Performance Cookies: Collect anonymous information about how visitors use our website, helping us improve its performance.
• Functionality Cookies: Remember your preferences and choices to provide enhanced, personalized features.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements (only with your consent).

4.3 Third-Party Cookies

We use the following third-party services that may set cookies:

• Google Analytics: For website analytics and performance monitoring
• Facebook Pixel: For social media marketing and audience targeting (with consent)
• Instagram: For displaying social media content

4.4 Managing Cookies

You can control and manage cookies through your browser settings. You can choose to block or delete cookies, though this may affect website functionality. To opt out of Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

When you first visit our website, we will display a cookie consent banner. You can accept or decline non-essential cookies at any time.

5. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business:

• Website hosting and maintenance providers
• Email marketing platforms (e.g., Mailchimp, Constant Contact)
• Payment processors (e.g., Stripe, PayPal)
• Analytics services (e.g., Google Analytics)
• Accounting and bookkeeping services

These providers are contractually obligated to protect your data and only use it for the specified purposes.

5.2 Event Suppliers and Venues

With your consent, we may share relevant information with venues, florists, caterers, photographers, and other event suppliers to coordinate your event effectively.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new owner, subject to the same privacy protections.

6. International Data Transfers

Your personal information may be transferred to and stored on servers located outside the United Kingdom, including in countries that may not provide the same level of data protection as UK law.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
• Adequacy decisions recognizing equivalent data protection standards
• Certification schemes such as the EU-US Data Privacy Framework (where applicable)

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Generally, we retain:

• Enquiry information: 2 years from last contact (unless you request deletion)
• Client contract information: 7 years from event date (for legal and accounting purposes)
• Marketing consent records: Until you withdraw consent
• Website analytics data: 26 months (Google Analytics default)
• Financial records: 6 years (as required by HMRC)

When personal information is no longer needed, we securely delete or anonymize it.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you (Subject Access Request).

8.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information.

8.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request deletion of your personal information in certain circumstances, such as when it is no longer necessary or if you withdraw consent.

8.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format and to transfer it to another data controller.

8.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

8.7 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

8.8 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

8.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: info@prettylittlevintage.co.uk
• Phone: +44 XXXX XXXXXX

We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

8.10 Right to Complain

If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• SSL encryption for data transmitted via our website
• Secure password-protected systems and devices
• Regular security audits and updates
• Restricted access to personal information on a need-to-know basis
• Staff training on data protection and security
• Secure backup systems

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Third-Party Websites

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. This Privacy Policy does not apply to those third-party sites.

We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party sites you visit.

Third-party links on our website may include:

• Social media platforms (Instagram, Facebook, Pinterest)
• Wedding planning directories and blogs
• Venue websites
• Supplier partner websites

11. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

12. Marketing Communications

We may send you marketing communications about our services, special offers, and event inspiration if:

• You have provided explicit consent to receive marketing emails
• You are an existing client and we are promoting similar services (soft opt-in)

12.1 Unsubscribe

You can opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link at the bottom of any marketing email
• Contacting us at info@prettylittlevintage.co.uk
• Updating your preferences if you have an account with us

Please note that even if you opt out of marketing communications, we will still send you essential service-related messages (e.g., booking confirmations, event updates).

13. Photography and Event Images

We may take photographs or videos during your event for promotional purposes. These images may feature you, your guests, or your event decor.

We will only use images featuring identifiable individuals if we have obtained your explicit written consent. You can withdraw consent at any time by contacting us, and we will remove the images from our platforms.

If you wish to use our images (e.g., from your event) for your own purposes, please contact us for permission.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.

When we make significant changes, we will:

• Update the “Last Updated” date at the top of this policy
• Notify you via email (if we have your email address)
• Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

We aim to respond to all enquiries within 48 hours during business hours (Monday to Friday, 9am-5pm).