Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how Hidden Loves Studio collects, uses and protects personal information.

Hidden Loves Studio is operated by Alexandra Simpson as a sole trader.

1. Who is responsible for your information?

For the purposes of applicable UK data-protection law, the data controller is:

Alexandra Simpson trading as Hidden Loves Studio
Business address: [BUSINESS ADDRESS]
Email: alex@hiddenlovesstudio.com

2. Information we may collect

Depending on how you use the website, we may collect:

Identity and contact information

  • Name
  • Email address
  • Billing address
  • Country or region
  • Contact information included in an enquiry

Order information

  • Products ordered
  • Order number
  • Order date
  • Amount paid
  • Currency
  • Order status
  • Digital-delivery information
  • Messages relating to the order

Payment information

Payments may be processed through independent payment providers.

Hidden Loves Studio may receive transaction information and payment status, but does not necessarily receive or retain your complete payment-card details.

Your payment provider will process payment information under its own privacy terms.

Customisation information

If you request custom work, we may receive:

  • Names
  • Wedding dates
  • Venue details
  • Personal wording
  • Photographs
  • Interests or personal details requested for the design
  • Other information needed to complete the agreed work

Please provide only information needed for the order and obtain permission before supplying another person’s personal information.

Communications

We may retain:

  • Emails
  • Contact-form submissions
  • Customer-service messages
  • Information supplied when reporting a problem
  • Feedback and review-related correspondence

Technical and website information

The website or its service providers may collect:

  • IP address
  • Browser and device information
  • Website activity
  • Referring pages
  • Cookie identifiers
  • Security and diagnostic information

The information actually collected depends on the services, cookies and integrations active on the website.

3. Why we use personal information

We may use personal information to:

  • Process and administer orders
  • Deliver PDFs and template-access information
  • Respond to customer enquiries
  • Provide customer support
  • Investigate access or technical problems
  • Complete agreed customisation work
  • Process refunds where applicable
  • Maintain financial and transaction records
  • Prevent fraud, misuse and security incidents
  • Establish, exercise or defend legal rights
  • Improve the website and customer experience
  • Send marketing where you have consented or where another lawful basis applies

The ICO states that a privacy notice should explain why personal information is processed, how long it is kept and who it is shared with. [ico.org.uk]

4. Lawful bases

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to:

  • Process your purchase
  • Deliver your digital product
  • Provide customer support
  • Complete agreed custom work
  • Manage a cancellation or refund

Legal obligation

Where information must be used or retained to comply with tax, accounting, consumer-protection or other legal requirements.

Legitimate interests

Where necessary for legitimate business purposes, including:

  • Protecting the website and business
  • Preventing fraud or misuse
  • Maintaining relevant business records
  • Responding to disputes
  • Improving services

We consider these interests against your rights and expectations.

Consent

Where you actively agree to processing, such as optional marketing or non-essential cookies where consent is required.

You may withdraw consent at any time. Withdrawal does not make earlier lawful processing unlawful.

5. Who we may share information with

Information may be shared where necessary with:

  • IndieMade, as the website and ecommerce platform
  • Payment providers selected or shown during checkout
  • Email and communications providers
  • Canva, where you access or use a Canva-hosted template
  • Website hosting, security, analytics and technical service providers
  • Professional advisers such as accountants, insurers or solicitors
  • Government, tax, regulatory or law-enforcement authorities where legally required
  • Another person or organisation involved in a business transfer, subject to appropriate safeguards

We do not sell customer personal information.

6. International processing

Hidden Loves Studio sells worldwide and uses online service providers that may process information in different countries.

Where personal information is transferred internationally, appropriate legal protections will be used where required.

Third-party providers may also apply their own international-transfer arrangements under their privacy policies.

7. How long information is kept

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute requirements.

Different information may be retained for different periods.

Order and transaction records may be retained for the period required to meet relevant financial and legal obligations.

Customer-service and customisation material may be removed earlier where it is no longer needed, subject to records reasonably required to deal with the order or a potential dispute.

8. Security

Reasonable organisational and technical measures are used to protect personal information from unauthorised access, loss, misuse or disclosure.

No online system can be guaranteed completely secure. Please avoid sending unnecessary sensitive information through standard email or website forms.

9. Marketing

We will not automatically add you to marketing communications simply because you make a purchase.

Where you choose to receive marketing, you can unsubscribe using the method provided in the communication or by contacting:

alex@hiddenlovesstudio.com

Service messages relating to an order are not marketing and may still be sent where necessary to fulfil the contract or resolve an issue.

10. Your data-protection rights

Depending on applicable law and the circumstances, you may have rights relating to:

  • Access to your personal information
  • Correction of inaccurate information
  • Deletion of information
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent
  • Complaining to a supervisory authority

Some rights are qualified, and legal or record-keeping requirements may prevent information from being deleted immediately.

To exercise a right, email alex@hiddenlovesstudio.com. Additional information may be requested to confirm your identity.

11. Children’s information

Hidden Loves Studio products and services are intended for adults arranging weddings or events.

Please do not submit a child’s personal information unless it is genuinely necessary for a permitted design and you are legally authorised to provide it.

12. Third-party websites

The website may link to third-party services, including Canva, payment providers and social-media platforms.

Those organisations control their own websites and privacy practices. Their privacy policies should be reviewed separately.

13. Cookies

The website may use cookies and similar technology.

Further information is provided in the separate Cookie Policy.

14. Changes to this policy

This Privacy Policy may be updated to reflect changes in the website, service providers or applicable requirements.

The latest version will appear on this website with its revision date.

15. Contact and complaints

For privacy questions or requests:

Hidden Loves Studio
Owner and data controller: Alexandra Simpson
Business address: [BUSINESS ADDRESS]
Email: alex@hiddenlovesstudio.com

You may also have the right to complain to the UK Information Commissioner’s Office or the appropriate supervisory authority in your country.