Privacy Policy for DD Events London Decoration Platform

DD Events is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can reach us using the details in Section 13.

We collect information that you give us directly, information generated as you use our planner, and limited technical information collected automatically.

• Account details — name, email address, phone number and password (stored securely as a hash).
• Booking & event details — event date, venue address, guest count, chosen templates and any custom design layouts you create.
• Billing information — billing address and payment confirmation details. Card numbers are processed directly by our payment provider and are never stored on our servers.
• Communications — messages you send through our contact form, support tickets, or by email/WhatsApp.
• Technical data — IP address, browser type, device information and pages visited, collected via cookies and similar technologies.

• To create and manage your account and saved designs
• To process bookings, calculate live pricing, and take payment
• To arrange delivery, setup and collection of decorations
• To respond to enquiries, support tickets and refund requests
• To send booking confirmations, order updates and (where you've opted in) occasional marketing emails
• To detect fraud, enforce our Terms & Conditions, and keep our platform secure
• To understand how our website is used so we can improve it

We only process your personal data where we have a valid legal basis to do so:

• Contract — processing needed to create your account, take your booking, and deliver the service you've paid for.
• Legitimate interests — keeping our platform secure, preventing fraud, and improving our services.
• Consent — for optional marketing emails and non-essential cookies, which you can withdraw at any time.
• Legal obligation — where we're required to keep records for tax, accounting or other statutory purposes.

We use essential cookies to keep you logged in and to remember items in your cart, and analytics cookies to understand how visitors use our site. You can control or disable non-essential cookies through your browser settings at any time.

We do not sell your personal data. We share data only where necessary, with:

• Payment processors, to securely take payment for your booking
• Delivery & setup staff or subcontractors, to fulfil your event on the day
• Hosting & email service providers, who process data on our behalf under contract
• Regulators or law enforcement, where we're legally required to do so

Some of our service providers (for example, cloud hosting or email delivery tools) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or standard contractual clauses.

We keep personal data only for as long as necessary for the purposes described in this policy: account data for as long as your account is active, order and billing records for at least 6 years to meet UK tax obligations, and enquiry/support messages for as long as needed to resolve your query. You can request deletion of your account at any time, subject to Section 9.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten"), where applicable
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us using the details in Section 13. We'll respond within one month, as required by law.

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We use appropriate technical and organisational measures — including encrypted password storage, secure (HTTPS) connections and access controls — to protect your data from unauthorised access, loss or misuse. No online system is 100% secure, but we work continuously to keep our platform safe.

We may update this Privacy Policy for DD Events London Decoration Platform from time to time to reflect changes in our services or the law. Any changes will be posted on this page along with an updated "Last updated" date. We encourage you to review this page periodically.

If you have questions about this policy or how we handle your data, or wish to exercise any of your rights, please get in touch:

• Email: ddeventslondon108@gmail.com
• Phone: +44 7587 359426
• Post: DD Events, United Kingdom

If you're not satisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.