PRIVACY POLICY

1. About this policy

This Privacy Policy is provided by White Heather Events Ltd, acting as the Data Controller. It may be updated from time to time, with any changes included on this page. 

For any enquiries about this policy please contact us at info@whiteheatherevents.co.uk.

2. How we collect and use your data

2.1 On our website

We collect the following personal data directly from you when you submit an enquiry form on the ‘Contact us’ page of our website - your name, your email address, your phone number. We will utilise the information collected via this page for the purposes of responding to your enquiry about our services. In submitting the enquiry form you are also asked whether you consent to us sending you further updates and marketing materials about our products and services, which, if you consent, we may do from time to time using your email address and /or phone number. If you wish to remove your consent and unsubscribe from this, you can let us know by emailing info@whiteheatherevents.co.uk.

We may use Google Analytics. Google Analytics automatically collects the following personal data: IP address (to determine the geographical location of users - these are anonymised before being stored), device information (such as device type, browser type, operating system, screen resolution), behavioural data (including page views, session length, bounce rates, navigation paths and interaction with the site), cookies and tracking IDs (to track your activities across our site and other sites, including return visits and user preferences). This data is collected for the purpose of analysing the browsing and interaction behaviours of visitors to our site, to improve our websites performance and user experience. Google Analytics may, from time to time, be integrated and used with Google Ads to support re-marketing or tracking advertising campaigns. You can opt out of Google Analytics tracking by adjusting your browser settings, blocking cookies or using the Google Analytics Opt-out Browser Add-on tools. For more information please refer to Google’s Privacy Policy.

2.2 When you engage our services

As part of getting to know you and to ensure we can tailor our services to you, we may gather and record additional personal data through the course of providing our planning services including but not limited to your occupation, home address, date of birth, family information. The nature of our services means we may also collect sensitive personal data, such as sexual orientation. Data collated through the engagement of our services will only be used to personalise the service we provide to you and our communication with you. 

2.3 When you take part in our market research

From time to time we conduct market research surveys to help us improve our proposition. This may include the collection of additional personal data including but not limited to your occupation, home address, date of birth, family information. We may also collect information about your opinions and preferences in relation to wedding and event planning. This data will be collated to understand market trends and influence the design of our products, services and marketing. When taking part in our research we ask for your consent to utilise your data for these purposes and if you consent for us to send you further updates and marketing materials about our products and services, which (if you consent) we may do from time to time using your email address and / or phone number. If you wish to remove your consent and unsubscribe from this, you can let us know by emailing info@whiteheatherevents.co.uk. 

2.4 Legal basis

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@whiteheatherevents.co.uk

and / or

(b) We have a legitimate interest

3. How long we keep your data

Personal data collected via our online enquiry form will be retained and utilised for up to 36 months before it is deleted.

Data collected through Google Analytics will be retained for up to 38 months before it is deleted.

Personal data (including sensitive personal data) collected through your engagement of our services will be retained as part of your file for 6 years for legal reasons, after which it will be deleted. The exception to this is your email address, which we will retain for the purposes of keeping in touch - as a business based on relationships this is generally important to us and to our clients. We will periodically review this as minimum after / every 36 months. You can ask us to delete your email address at any time if you no longer wish to keep in touch.

Personal data collected through our market research will be retained for up to 12 months before it is deleted. 

Summaries of analysis and insights based on data collected will be retained indefinitely.

Irrespective of the above, if you have consented to us adding your email address to our mailing list for marketing purposes, it will be retained and reviewed periodically, at minimum after / every 36 months. You have the option for to unsubscribe, as outlined above.

4. How we secure your data

We take appropriate measures to manage the security of your personal data, including, where practicable encryption and / or secure storage. Physical copies of personal data are also stored securely in locked areas. Access to personal data is restricted to authorised persons and for legitimate business purposes.

5. How we share your data

We may share your personal data with third parties as necessary in the course of providing our services to you. This will usually be limited to other suppliers of, and guests attending, your event. As part of our supplier due diligence we will seek assurances about their compliance with GDPR.

Data collected by Google Analytics may be shared with Google for the purposes of analysing website performance or running marketing campaigns. Google is a U.S based company, which means data may be transferred outside the European Economic Area (EEA). Safeguards are in place through Standard Contractual Clauses, to comply with GDPR. For more information please refer to Google’s Privacy Policy.

Summaries of analysis and insights based on data collected may be shared publicly.

6. Your rights 

Under GDPR, you have the right to access, correct or delete your personal data. You may also withdraw consent for processing or request a copy of your data in a portable format. To exercise these rights, contact us as info@whiteheatherevents.co.uk. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

If you have any concerns about our use of your personal information, you can make a complaint to us at info@whiteheatherevents.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:       

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Last updated: 14 October 2024