GRACE MY EVENTS
PRIVACY POLICY
Last Updated: February 2026
1. Who We Are
Grace My Events is a partnership trading in England and Wales.
Business Address: [Insert Address]
Email: [Insert Email Address]
Telephone: [Insert Telephone Number]
For the purposes of data protection law, Grace My Events is the “data controller” of your personal data.
We comply with:
UK GDPR
Data Protection Act 2018
2. The Information We Collect
We may collect and process the following personal data:
Identity Information
Full name
Title
Contact Information
Billing address
Delivery address
Email address
Telephone number
Order Information
Purchase details
Hire bookings
Event date and venue information
Payment Information
Payments are processed securely via third-party providers.
We do not store full card details.
Technical Information
IP address
Browser type
Device type
Website usage data
Marketing Preferences
Whether you opt in to receive marketing emails
3. How We Use Your Information
We process your personal data for the following lawful reasons:
Contract Performance
To:
Process orders
Deliver goods
Provide digital downloads
Manage hire bookings
Respond to enquiries
Legal Obligation
To:
Comply with HMRC record-keeping requirements
Prevent fraud
Legitimate Interests
To:
Improve our website
Analyse customer behaviour
Protect our business from misuse
Consent
Where required, for:
Email marketing
Non-essential cookies
4. Digital Downloads
When purchasing digital products:
Your email address is used to deliver download access.
Download activity may be logged for fraud prevention.
Digital files are deleted from our system after 90 days.
5. Hire Services Data
For hire bookings and wedding services, we may collect:
Venue details
Event timing information
Styling preferences
This information is used solely to fulfil your booking.
6. Who We Share Data With
We may share data with:
Payment processors
Delivery couriers
Website hosting providers
Accountants (for legal compliance)
We do not sell or rent personal data.
7. International Transfers
If any data is processed outside the UK, appropriate safeguards are in place (such as standard contractual clauses).
8. Data Retention
We retain personal data only as long as necessary.
For tax and accounting purposes, transaction records are retained for 6 years in line with HMRC requirements.
Marketing data is retained until you withdraw consent.
9. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion (where legally permitted)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
You may also lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Telephone: 0303 123 1113
10. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
Secure hosting
Password protection
Restricted access
Encrypted payment processing
11. Cookies
We use cookies to:
Enable website functionality
Analyse website traffic
Improve user experience
Full details are set out in our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on our website.