Privacy Policy

This policy explains what personal information [LEGAL BUSINESS NAME] (“The Guest List”, “we”, “us”) collects through this website, why we collect it, and the choices you have. The Social Atelier is part of The Guest List, and this policy covers it too.

Who we are

[LEGAL BUSINESS NAME] is responsible for your personal information (the “controller”). You can reach us at [CONTACT EMAIL] or [POSTAL ADDRESS].

What we collect

Information you give us. When you send an inquiry or apply to The Social Atelier, we collect what you enter. That includes:

• your name, email address and phone number
• details of your occasion: its type, date, location, guest count and planned investment range
• anything you tell us about your vision
• who referred you, if you tell us

Please don’t include sensitive information, such as health details, unless it’s essential to planning your event.

Information collected automatically. Our hosting and security provider processes technical information, such as your IP address, browser type and the pages you request. This is needed to deliver the site and protect it from abuse. Our analytics doesn’t use cookies, reports only totals such as page views, and doesn’t build a profile of you.

We don’t use advertising cookies or tracking pixels, and we don’t buy personal information about you.

How we use it, and our legal basis

Purpose	Legal basis (UK and EU GDPR)
Replying to your inquiry or application and discussing your event	Steps you’ve asked us to take before entering a contract
Keeping a record of our conversations with you	Our legitimate interest in running our business
Keeping the website secure and free of spam	Our legitimate interest in protecting the site
Meeting legal, tax and accounting obligations	Legal obligation

We don’t send marketing emails unless you’ve asked for them, and you can stop them at any time. We don’t make decisions about you based solely on automated processing.

Who we share it with

We share personal information only with service providers who help us run the site and reply to you. Our contracts with them require them to protect it and to use it only on our instructions:

• Cloudflare: website hosting, security, spam prevention and storage of form submissions
• Resend: delivery of emails sent from the website
• [EMAIL PROVIDER, e.g. Resend Inboxes or Google Workspace]: our business email

We may also disclose information if the law requires it, or to protect our rights or the safety of others. If our business is sold or reorganized, information may transfer to the new owner under this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International transfers

Our service providers may process information in the United States and other countries. Where UK or EU data protection law applies, we rely on appropriate safeguards. These include the EU–US Data Privacy Framework and its UK extension, or Standard Contractual Clauses.

How long we keep it

We keep inquiry and application details for [RETENTION PERIOD, e.g. 24 months] after our last contact with you. If you become a client, we keep the records our work together needs. After it ends, we keep them for as long as the law requires, for example for tax purposes. After that we delete or anonymize them.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you
• correct it
• delete it
• restrict or object to how we use it
• receive a copy in a portable format
• withdraw consent, where we rely on consent

UK and EU residents can also complain to their data protection authority. In the UK that’s the Information Commissioner’s Office (ico.org.uk).

California and other US state residents may have the right to know what personal information we hold, and to delete or correct it. You may also have the right to opt out of its sale or sharing. We don’t sell or share personal information, and we won’t treat you differently for exercising your rights.

To exercise any of these rights, email [CONTACT EMAIL]. We’ll respond within the time the law requires, usually one month. We may need to verify your identity first.

Do Not Track and Global Privacy Control

We don’t track visitors across websites, so these browser signals have nothing to switch off. We honor them all the same.

Children

This website isn’t intended for children under 16, and we don’t knowingly collect their personal information.

Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit. No method of sending information over the internet is completely secure.

Changes to this policy

We’ll post any changes here and update the date above. If a change is significant, we’ll say so prominently.

Contact

Questions about this policy or your information: [CONTACT EMAIL] · [POSTAL ADDRESS].