AUTENTICA LONDON LTD
Privacy Policy
Last updated: 11 March 2026
1. Who We Are
Autentica London Ltd ("we", "us", "our") is a boutique luxury event planning company registered in England and Wales. We are the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
Autentica London Ltd
Email: sales@autenticalondon.com
Website: autenticalondon.com
2. What Personal Data We Collect
We may collect and process the following categories of personal data about you:
2.1 Information You Provide to Us
Name and contact details — including email address and telephone number
Enquiry and event details — including the type of event, preferred dates, guest numbers, budget range, and any other information you choose to share with us
Correspondence — any messages, emails or communications you send to us
Billing and payment information — where you engage us for our services
2.2 Information We Collect Automatically
When you visit our website, we may automatically collect certain technical information, including:
Your IP address and approximate location
Browser type and version
Pages visited and time spent on the Site
Referring website or search terms used to find us
This data is collected via cookies and analytics tools. Please see our Cookies Policy for full details.
2.3 Information From Third Parties
We may occasionally receive information about you from third parties, such as referrals from other clients or suppliers. We will always use such information in accordance with this Privacy Policy.
3. How We Use Your Personal Data
We use your personal data for the following purposes and on the following legal bases under UK GDPR:
3.1 To Respond to Your Enquiry
Legal basis: Legitimate interests — it is in both our and your interest to communicate about a potential engagement.
When you contact us via our website, email or any other channel, we use your personal data to respond to your enquiry, answer your questions, and discuss your event requirements.
3.2 To Provide Our Services
Legal basis: Performance of a contract — processing is necessary to fulfil our agreement with you.
Where you engage Autentica London Ltd to plan and manage your event, we use your personal data to deliver those services, including coordinating with suppliers, venues and third parties on your behalf.
3.3 To Send You Relevant Communications
Legal basis: Legitimate interests or consent, depending on the context.
We may contact you with information relevant to your event, follow-up correspondence following an enquiry, or updates about our services. We will not send you unsolicited marketing emails without your explicit consent, and you may opt out at any time.
3.4 To Comply With Legal Obligations
Legal basis: Legal obligation.
We may process your personal data where we are required to do so by law, including for accounting, tax and regulatory compliance purposes.
3.5 To Improve Our Website and Services
Legal basis: Legitimate interests.
We use anonymised analytics data to understand how visitors use our website and to improve the quality of our content, services and user experience. This data does not identify you personally.
4. Who We Share Your Data With
We do not sell, rent or trade your personal data. We may share your information only in the following circumstances:
4.1 Trusted Suppliers and Partners
In the course of planning and delivering your event, we may share relevant details with our network of trusted suppliers — including venues, caterers, florists, photographers and entertainment providers — strictly on a need-to-know basis and only with your knowledge.
4.2 Service Providers
We may share data with third-party service providers who assist us in operating our business, including:
Website hosting and analytics (Squarespace, Google Analytics)
Email and communication tools
Accounting and invoicing software
All third-party providers are required to process your data only on our instructions and in accordance with applicable data protection law.
4.3 Legal Requirements
We may disclose your personal data if required to do so by law, court order, or in response to a valid request from a regulatory authority.
5. International Data Transfers
Some of our third-party service providers (such as Google) may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or reliance on adequacy decisions.
6. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. Our general retention periods are:
Enquiry data (where no engagement follows) — up to 12 months from the date of your last contact with us
Client data (where we have provided services) — up to 7 years from the end of our engagement, in line with our legal and accounting obligations
Website analytics data — as set by our analytics provider (typically up to 26 months for Google Analytics)
After the applicable retention period, your data will be securely deleted or anonymised.
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access — you have the right to request a copy of the personal data we hold about you
Right to rectification — you have the right to ask us to correct any inaccurate or incomplete data we hold about you
Right to erasure — you have the right to ask us to delete your personal data in certain circumstances
Right to restrict processing — you have the right to ask us to restrict how we use your data in certain circumstances
Right to data portability — you have the right to request that we transfer your data to you or to a third party in a structured, commonly used format
Right to object — you have the right to object to our processing of your data where we rely on legitimate interests as our legal basis
Right to withdraw consent — where we process your data on the basis of your consent, you have the right to withdraw that consent at any time
To exercise any of these rights, please contact us at sales@autenticalondon.com. We will respond to your request within one calendar month. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
8. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration.
While we take all reasonable steps to protect your data, please be aware that no method of transmission over the internet is completely secure. If you have any concerns about the security of your data, please contact us immediately.
9. How to Make a Complaint
If you have concerns about how we handle your personal data, we ask that you contact us in the first instance so we can address your concerns directly.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:
Information Commissioner's Office
Website: https://ico.org.uk
Helpline: 0303 123 1113
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.
Where changes are material, we will take reasonable steps to notify you — for example by placing a prominent notice on our website.
© 2026 Autentica London Ltd. All rights reserved.

