Privacy Policy

Woodhill Weddings ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, share, and protect your personal data, and sets out your rights, in accordance with the UK GDPR and the Data Protection Act 2018.

We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, please contact us using the details at the end of this page.

Who We Are

Information We Collect

We may collect and process the following categories of personal data:

• Identity and contact details (names, email address, phone number, postal address)
• Wedding and booking details (date, guest numbers, preferences, and requirements)
• Payment and transaction information (processed securely via third-party providers; we do not store full card details)
• Correspondence and information you provide through enquiries
• Technical and usage data from your visit to this website, such as IP address and pages viewed, where cookies are enabled

How We Collect Your Data

• Directly from you when you enquire, book, or correspond with us
• Automatically as you use our website, through cookies and similar technologies
• From third parties such as your approved suppliers, where relevant to your wedding

How We Use Your Information

We only use your personal data where the law allows us to. The table below sets out the purposes for which we use your data and the lawful basis we rely on.

Marketing

We will only send you marketing communications where you have consented to receive them. You can withdraw your consent or unsubscribe at any time by contacting us or using the unsubscribe link in our emails.

Sharing Your Data

We may share your personal data with the following, only where necessary:

• Approved suppliers involved in delivering your wedding
• Payment processors who handle transactions securely on our behalf
• Professional advisers, such as accountants and legal advisers
• Authorities or regulators where we are required to do so by law

We do not sell your personal data to any third party.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Financial records are typically kept for at least six years to meet HMRC requirements. Enquiry and marketing data is retained for a period to confirm unless you ask us to delete it sooner.

Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Where we use third-party providers, we take steps to ensure they offer appropriate safeguards.

International Transfers

We aim to keep your personal data within the UK and the European Economic Area. Where any transfer outside these areas is necessary, we will ensure an appropriate safeguard is in place, as required by data protection law.

Cookies

This website uses essential cookies that are necessary for it to function. Where analytics or marketing cookies are used, we will request your consent first. Our current analytics provider is to confirm. You can control cookies through your browser settings.

Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request that we correct inaccurate or incomplete data
• Request that we delete your data in certain circumstances
• Restrict or object to our processing of your data
• Request the transfer of your data (data portability)
• Withdraw your consent at any time, where we rely on consent

To exercise any of these rights, please contact us using the details below. We will respond within one month.

How to Complain

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, atico.org.uk.

Changes to This Policy

We may update this policy from time to time. The version in force is the one published on this page, and the effective date is shown at the top.

Contact