Privacy Policy
Version 1.0 · Last updated 21st October 2026
1. Who we are
We are Lucy Attwood Events Limited, a company registered in England and Wales (company number 05914836). Our registered office is 8 Blandfield Road, London SW12 8BG. In this policy, “we”, “us” and “our” mean Lucy Attwood Events Limited.
We design and manage luxury private parties, weddings and events. Discretion is central to what we do, and we treat personal information with the same care.
For the personal information described in this policy, we are the controller. This means we decide how and why it is used. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA937900.
How to contact us about your personal information:
- Email: parties@lucyattwoodevents.com
- Phone: 020 8264 0265
This policy explains how we collect, use, share and protect personal information, and the rights you have. It applies to our clients, their guests, people who enquire with us, our suppliers and visitors to our website.
2. The information we collect
We only collect what we need to plan and deliver your event, run our business and meet our legal obligations.
| Who | What we collect |
|---|---|
| Clients and people who enquire | Name, contact details, home and event addresses, details of the event you are planning, your preferences and requirements, correspondence with us, payment and invoicing details, and any information you choose to share about your family or occasion |
| Guests | Name, contact details, RSVP response, dietary, allergy and accessibility needs, seating and accommodation arrangements, and, where needed, travel details |
| Suppliers and their staff | Name, business contact details, quotes, contracts, insurance and certification details, and payment details |
| Website visitors | Information collected through cookies and similar technologies, such as pages visited and device type (see section 8) |
| Everyone at an event | Photographs and film, where taken at the event (see section 8) |
How we collect it:
- From you directly, when you enquire, meet us, sign a Proposal, email or call us, or complete forms.
- From our clients, who give us their guests’ details so we can plan the event.
- From guests directly, for example through an RSVP form.
- From Suppliers, for example quotes, contracts and invoices.
- From our website, through cookies (see section 8).
- From publicly available sources, such as Companies House, when we check Suppliers.
3. Why we use it, and our legal basis
The law requires us to have a legal basis for each way we use personal information. The table below sets these out.
| What we use it for | Legal basis |
|---|---|
| Responding to enquiries and preparing Proposals and Event Budgets | Taking steps at your request before entering a contract |
| Planning, designing and managing your event, including booking and coordinating Suppliers | Performing our contract with you |
| Managing guest lists, RSVPs, seating and accommodation | Our legitimate interest, and our client’s, in delivering the event the client has asked for |
| Invoicing, taking payments and keeping accounts | Performing our contract; complying with legal obligations, such as tax law |
| Checking and managing Suppliers | Our legitimate interest in delivering a safe, high-quality event |
| Keeping guests safe, including dietary, allergy and accessibility needs | Explicit consent, or protecting someone’s vital interests in an emergency (see section 4) |
| Health, safety and security at events | Complying with legal obligations; our legitimate interest in keeping everyone safe |
| Featuring events in our portfolio, website, social media, awards entries and press | Your consent (see section 8) |
| Running and improving our website | Our legitimate interest; consent where the law requires it for cookies (see section 8) |
| Dealing with complaints and legal claims | Our legitimate interest in resolving disputes; complying with legal obligations |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can ask us for more detail about this.
We do not make any decisions about you using solely automated processes.
4. Health information, guests and children
Health information. Dietary requirements, allergies and accessibility needs can reveal information about someone’s health, which the law treats as “special category” information. We collect it only to keep guests safe and comfortable. Where possible, we ask guests for it directly through the RSVP and ask for their explicit consent. We share it only with the Suppliers who need it, such as the caterer or venue, and delete it after the event (see section 7). In a medical emergency, we may share relevant information to protect someone’s life.
Guests. When a client gives us their guests’ details, we ask the client to let guests know and to point them to this policy. Guests can contact us directly at any time to ask about their information.
Children. Some events include children as guests. We collect only what we need about them, such as name, age group, dietary needs and accessibility needs, and we receive it from a parent, guardian or our client. We will not feature identifiable children in our marketing without a parent’s or guardian’s permission.
5. Who we share it with
We never sell personal information. We share it only where needed, and only what each recipient needs:
- Suppliers for your event, such as venues, caterers, florists, entertainers, photographers, transport and accommodation providers. They use it to deliver their services and are responsible for it under their own privacy terms.
- Our team, including trusted freelance planners and event staff who work under our instructions and confidentiality obligations.
- Service providers who support our business, namely WordPress (our website), Google Workspace (email, documents and calendars), Google Analytics (website statistics), Dropbox (file storage and sharing) and Anthropic (an AI assistant that helps us with planning and drafting). They act only on our instructions and must keep information secure.
- Professional advisers, such as our accountants, lawyers and insurers.
- Authorities, such as HMRC, the police or the emergency services, where the law requires it or to protect someone’s safety.
- A buyer of our business, if we sell or transfer it, who would be bound by this policy.
Transfers outside the UK. Some of our service providers, including those based in the United States, store information outside the UK, and events held abroad involve Suppliers in other countries. When we transfer personal information outside the UK, we make sure it remains protected. We do this by using countries the UK recognises as providing adequate protection, approved contract terms, or, for events abroad, where the transfer is necessary to deliver the event you have asked for. You can ask us for details.
6. Keeping it secure
We use appropriate technical and organisational measures to protect personal information from loss, misuse and unauthorised access. These include password-protected and encrypted systems, limiting access to those who need it, and confidentiality obligations on our team and Suppliers. If a breach occurs that is likely to put your rights at risk, we will tell you and the ICO where the law requires.
7. How long we keep it
We keep personal information only for as long as we need it, then delete or securely destroy it.
| Information | How long we keep it |
|---|---|
| Guest details, including names, contact details, and dietary, allergy and accessibility needs | Up to 3 months after the event |
| Enquiries that do not lead to a booking | 2 years after our last contact |
| Client contracts, Proposals and correspondence | 6 years after the event, the period in which legal claims can be brought |
| Invoices, payments and accounting records | 6 years after the end of the financial year they relate to, as tax law requires |
| Supplier contracts and records | 6 years after the event |
| Records of consent to publicity | For as long as we rely on the consent, plus 6 years |
| Event images used with consent | Until consent is withdrawn (see section 8) |
| Complaint records | 6 years after the complaint is closed |
8. Marketing, photographs and cookies
Marketing. We do not send marketing emails or newsletters. We only contact you about your enquiry or event.
Photographs and publicity. We will only feature your event, your name or images of it in our portfolio, website, social media, awards entries or press with your written consent. You can withdraw consent at any time. We will then stop using the images in new material and remove them from our own website and social media. We cannot recall material already printed or published by others. We will not feature identifiable guests or children without appropriate permission. Photographs taken by your photographer are governed by your agreement with them.
Cookies. Our website uses cookies, which are small files stored on your device:
| Type | What it does | Your choice |
|---|---|---|
| Strictly necessary | Keeps the website working and secure, including spam protection on our enquiry forms (Akismet and WPForms) and log-in for our own team (WordPress) | Always on |
| Statistical | Google Analytics (cookies whose names begin with _ga, kept for up to 2 years) and Jetpack Stats by WordPress.com tell us how many people visit, which pages they view and how they found us, so we can improve the website | Only with your consent, which you can give or refuse in our cookie banner |
We do not use advertising or social media tracking cookies. Google Analytics is provided by Google, which may process information in the United States (see section 5). You can change your cookie choices at any time through the cookie settings link on our website, or through your browser settings.
9. Your rights
You have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is inaccurate or incomplete;
- delete your information, in some circumstances;
- restrict how we use your information, in some circumstances;
- object to our use of your information where we rely on legitimate interests;
- receive information you gave us in a portable format, in some circumstances; and
- withdraw consent at any time, where we rely on it. This does not affect anything we did before you withdrew it.
To use any of these rights, contact us using the details in section 1. We do not charge a fee. We may ask you to confirm your identity. We will respond within one month, or tell you within that month if we need longer because your request is complex.
10. Complaints
If you are unhappy with how we have handled your personal information, please contact us first using the details in section 1. You can complain in any way you choose, including by email, phone, post or social media. We will acknowledge your complaint within 30 days, look into it properly, keep you updated, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office:
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on our website, with the date it was last updated. If we make significant changes, we will tell our current clients directly.