Privacy Policy

1. Who We Are

Ever Yours Ltd is the data controller responsible for your personal data. Company number: 16939113. Registered address: 8 Copel Close, Highfields Caldecote, Cambridge, England, CB23 7ZQ. Contact email: hello@ever-yours.co.uk.

2. What Data We Collect

Information you provide directly: name, email address, phone number, event date, message content (via our enquiry form), and marketing preferences (if you opt in to receive emails from us). Information collected automatically: IP address and approximate location, browser type and version, pages visited and time spent, and referring website. This data is collected through our hosting platform's server logs and is used in aggregate only.

3. How We Use Your Data

We process your personal data for the following purposes: responding to your enquiry (lawful basis: legitimate interest, Article 6(1)(f) UK GDPR); providing our services to you (lawful basis: performance of a contract, Article 6(1)(b)); sending marketing emails if you explicitly opt in (lawful basis: consent, Article 6(1)(a) UK GDPR + Regulation 22 PECR — you can withdraw consent at any time); and improving our website (lawful basis: legitimate interest). We will never sell your personal data to third parties.

4. Marketing Emails

If you tick the marketing opt-in checkbox on our enquiry form, we will send you occasional emails about our services, offers, and events. These emails are sent via Klaviyo, our email marketing platform. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@ever-yours.co.uk. We keep records of your consent, including when and how it was given.

5. How Long We Keep Your Data

Contact form submissions: 12 months from the date of your enquiry, or for the duration of any resulting business relationship, whichever is longer. Marketing consent records: retained for as long as you remain subscribed, plus 12 months after unsubscribing (for compliance records). Server logs: automatically deleted after 30 days by our hosting provider.

6. Who We Share Your Data With

We only share your data with: our team, to respond to your enquiry and deliver our services; Webflow, Inc., our website hosting provider, who processes data on our behalf under a GDPR-compliant Data Processing Agreement; and Klaviyo, Inc., our email marketing platform (only if you opt in to marketing emails), who processes data under Standard Contractual Clauses and a GDPR-compliant Data Processing Agreement. We do not share your data with any other third parties unless required by law.

7. International Transfers

Our website is hosted by Webflow, Inc., and marketing emails are processed by Klaviyo, Inc. Both are US-based companies that maintain appropriate safeguards for international data transfers in compliance with UK GDPR, including Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA).

8. Cookies

Our website uses the following cookies: _cfuvid (Cloudflare), used for bot detection and rate limiting. This is a strictly necessary, session-duration cookie. Strictly necessary cookies do not require your consent under the Privacy and Electronic Communications Regulations (PECR). They are essential for the website to function. We do not currently use any analytics, advertising, or marketing cookies. If we add these in the future, we will update this policy and implement a cookie consent mechanism before activating them.

9. Your Rights

Under UK GDPR, you have the right to: access (request a copy of the personal data we hold about you); rectification (ask us to correct inaccurate or incomplete data); erasure (ask us to delete your personal data where there is no compelling reason to continue processing it); restriction (ask us to limit how we use your data); data portability (request your data in a structured, machine-readable format); object (object to our processing of your data based on legitimate interest); and withdraw consent (withdraw your consent for marketing emails at any time). To exercise any of these rights, contact us at hello@ever-yours.co.uk. We will respond within one month.

10. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data, including: HTTPS encryption on all pages, secure hosting infrastructure with regular security updates, and access limited to authorised personnel only.

11. Links to Other Websites

Our website contains links to external sites, including social media platforms such as Instagram and TikTok. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Website: ico.org.uk. Phone: 0303 123 1113. Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the chance to address your concerns first — please contact us at hello@ever-yours.co.uk.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.