Privacy Policy

Privacy Policy for Hugg Design

Last updated: September 2026

1. Introduction

Welcome to the Privacy Policy for Hugg Design.

Hugg Design is an events business operated by a sole trader based in the United Kingdom. I respect your privacy and am committed to protecting your personal data. This privacy policy informs you how I look after your personal data when you visit my website, book my event services, or interact with me as a supplier or venue partner. It also tells you about your privacy rights and how the law protects you.

Under the UK General Data Protection Regulation (UK GDPR), Hugg Design is the Data Controller responsible for your personal data.

2. The Data I Collect About You

Personal data means any information about an individual from which that person can be identified. I may collect, use, store, and transfer different kinds of personal data about you, which I have grouped together as follows:

Identity Data: Includes first name, maiden name, last name, username or similar identifier, and marital status (e.g., for wedding bookings).
Contact Data: Includes billing address, delivery address, event location, email address, and telephone numbers.
Financial Data: Includes bank account details for payment processing.
Transaction Data: Includes details about payments to and from you, and other details of products and services you have purchased from me.
Special Category Data: Because I plan and design events, I may occasionally need to collect information regarding health, dietary requirements, or accessibility needs to ensure your event runs safely and comfortably. I will only collect this with your explicit consent.

3. How I Collect Your Data

I use different methods to collect data from and about you, including through:

Direct Interactions: You may give me your Identity, Contact, and Financial Data by filling in forms, booking an event, or corresponding with me by post, phone, email, or social media.
Third Parties: I may receive personal data about you from event venues, caterers, coordinators, or other suppliers associated with your event.

4. How I Use Your Personal Data (Lawful Bases)

I will only use your personal data when the law allows me to. Most commonly, I will use your personal data in the following circumstances:

Performance of a Contract: Where I need to perform the contract I am about to enter into or have entered into with you to design and deliver your event.
Legitimate Interests: Where it is necessary for my legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., managing client relationships, asking for feedback).
Legal Obligation: Where I need to comply with a legal or regulatory obligation (such as keeping financial records for HMRC tax compliance).

5. Disclosures of Your Personal Data

To deliver my event design services, I may have to share your personal data with trusted third parties, including:

Event Suppliers & Partners: Venue managers, caterers, florists, production teams, and entertainers strictly as required to execute your event.
Professional Advisers: Accountants, auditors, lawyers, or insurers providing professional services in the UK.
HM Revenue & Customs (HMRC): Regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances.

I require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. Data Security

I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. I limit access to your personal data to those who have a business need to know.

7. Data Retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

By UK law, for tax purposes, I must keep basic information about my clients and transactions (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers.

8. Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data, including the right to:

Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Withdraw consent at any time (where I am relying on consent to process your data).

If you wish to exercise any of these rights, please contact me using the details below.

9. Contact Details and Complaints

If you have any questions about this privacy policy or my privacy practices, please contact me:

Business Name: Hugg Design
Email Address: hello@huggdesign.co.uk

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact me in the first instance.