PRIVACY POLICY FOR HATTIE LOCKHART SMITH

Last Updated: 15/8/26

1. Introduction

Hattie Lockhart Smith is committed to protecting and respecting your privacy. This Privacy Policy explains how I collect, use, store, and share your personal data when you purchase tickets for or attend one of my workshops, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, I am the Data Controller of your personal data. 

Contact Details:

  • Business Name: Hattie Lockhart Smith

  • Email Address: hattie@hattielockhartsmith.co.ukhattie@hattielockhartsmith.co.uk

  • Postal Address: 217, Upper Shoreham Road, Shoreham by Sea, BN43 6BE

  • Phone Number: 07976017142

2. The Type of Personal Data I Collect

I currently collect and process the following personal information when you buy a ticket or register for a workshop: 

  • Identity Data: First name, last name, and title.

  • Contact Data: Email address, phone number, and billing address.

  • Financial Data: Payment card details (processed securely via a third-party payment processor; we do not store full card details).

  • Transaction Data: Details about payments to and from you, and details of the tickets you have purchased.

  • Special Category Data: Health or access requirements (e.g., dietary requirements, allergy information, or physical accessibility needs) if provided voluntarily by you.

  • Media: Photographs or video footage taken during the workshop (subject to your explicit consent). 

3. How I Get the Personal Data and Why I Have It

Most of the personal data  processed is provided  directly by you for one of the following reasons: [1]

  • To buy a ticket for a workshop.

  • To sign up for the waiting list.

  • To request specific assistance or dietary arrangements.

  • To subscribe to the newsletter or marketing updates. 

Lawful Bases for Processing

Under the UK GDPR, the lawful bases we rely on for processing this information are: 

  1. Performance of a Contract: I need your information to fulfil the contract with you (i.e., to process your ticket order, issue your ticket, and grant you entry to the workshop). 

  2. Your Consent: For marketing communications, capturing promotional photography, or processing special category data (like medical/dietary requirements). You can withdraw your consent at any time by contacting me. 

  3. Legitimate Interests: To run my business efficiently, manage workshop logistics, and improve future events. 

  4. Legal Obligation: To comply with tax, accounting, or corporate regulatory reporting requirements. 

4. How I Share Your Personal Data

I do not sell your personal data. I may share your data with trusted third-party service providers who help us run our workshops: 

  • Ticketing Platforms: (e.g., Ticket Tailor / Eventbrite ) to process registrations.

  • Payment Gateways: ( e.g., Stripe / PayPal ) to securely handle transaction payments.

  • Email Marketing Services: (e.g. Mailchimp / ConvertKit ) if you have opted in to receive marketing.

  • Venues or Caterers: I may share anonymised or necessary dietary/accessibility data with venue staff to keep you safe.

  • Legal and Regulatory Authorities: If required by law, accounting standards, or law enforcement. 

5. International Data Transfers

Some of our third-party systems may host or process data outside of the UK (such as the US). If we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by utilising approved Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA). 

6. How We Store Your Personal Data and For How Long

Your information is securely stored. We put in place appropriate technical and organisational measures to prevent your data from being lost or accessed without authorisation. 

We keep your data only as long as necessary: 

  • Transaction & Financial Records: Retained for 6 years following the end of the financial year to comply with UK tax law (HMRC requirements).

  • Special Category Data (Dietary/Access Needs): Deleted immediately following the completion of the workshop.

  • Marketing Data: Retained until you withdraw your consent or unsubscribe. 

7. Your Data Protection Rights

Under UK data protection law, you have specific rights, including: 

  • Your right of access: You have the right to ask us for copies of your personal data.

  • Your right to rectification: You can ask us to correct information you think is inaccurate or incomplete.

  • Your right to erasure: You can ask us to erase your personal data in certain circumstances.

  • Your right to restriction of processing: You can ask us to limit how we use your data.

  • Your right to object to processing: You can object to us processing your data for direct marketing or legitimate interests.

  • Your right to data portability: You can ask us to transfer your data to another organisation or to you. 

You do not need to pay a fee to exercise your rights. I have one month to respond to you.

Please contact me at hattie@hattielockhartsmith.co.uk

8. How to Complain

If you have any concerns about our use of your personal data, you can make a formal complaint to us at hattie@lockhartsmith.co.uk 

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how I have used your data.

  • ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  • Helpline Number: 0303 123 1113

  • ICO Website: https://www.ico.org.uk