Privacy Policy

This policy was last updated in November 2021 and it will be reviewed yearly unless there is a requirement to update it earlier.

The terms that apply to you are those posted here on my website on the day you use my website. I advise you to print a copy for your records. If you have any questions regarding this privacy policy or would like to see the personal information that is held about you please contact me at the following

1. Introduction.

Twelv. Events Alliance (Tracy Yates) takes your privacy seriously, so thank you for familiarising yourself with my privacy policy. I understand that as a user of my website you will be concerned to know that your data is being used lawfully. This privacy policy aims to inform you about how I collect and process any information that I collect from you, or that you provide to me. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this policy, “process” means collect, store, transfer, use or otherwise act on information. It tells you about your privacy rights and how the law protects you.

I am committed to protecting your privacy and the confidentiality of your personal information. My policy is not just an exercise in complying with the law, but a continuation of my respect for you and your personal information.

Tracy Yates is the data controller (also referred to as me, I, or my in this policy) and I am responsible for any of your personal information that has passed through my website or emails.

All your personal information is captured in line with the General Data Protection Regulation and the Data Protection Act 2018 and I comply with all guidelines provided by the Information Commissioners Office. You can find out more information about ICO on their website at I will never sell, nor lease your personal information to any third parties and your information is private between myself and any third parties who are acting on your behalf, and this is only done with your explicit permission, or if I am required to do so by law.

The law requires me to tell you about your rights and my obligations to you regarding the processing and control of your personal data. I do this now, however additional reading is provided at

2. Contact details.

My details are:

Full name of legal entity: Tracy Yates trading as Twelv. Events Alliance

Email address:

3. Data I process.

I may collect, use, store, and transfer different kinds of personal data about you, your wedding party, or any other suppliers at your wedding to facilitate my service to you. It is crucial that the information I hold about you is accurate and up to date. Please let me know if at any time your personal information changes by emailing me at I have collated these into groups as follows:

Customer data:

Your identity includes information such as first name, last name, title, date of birth, and other identifiers that you may have provided at some time
Your contact information such as billing address, delivery address, email address, telephone numbers, and any other information you have given to me for the purpose of communication or meeting.

Transaction details include details about payments or communications to and from you and information about services that you have purchased from me
Your profile includes information such as your interests, preferences, feedback, and survey responses.

I process your data to supply the services you have purchased and to keep records of these transactions. My lawful ground for this processing is to take steps at your request to enter into a contract to provide such services.

Technical data:

This includes personal identifiers from your browsing activity on my website and online services such as your internet protocol (IP) address, browser type, and version, time zone setting, and location. Length of visit to pages on my website, number of times you use my website, page views and navigation paths, and other technology on the devices you use to access my website.

This information is derived from my analytics tracking system/ software and I process this data to analyse your use of my website and online services and to administer and protect my business and website.

This information is not associated with an identifiable person, however if combined with other information I know about you from previous visits, the information possibly could be used to identify you personally, even if you are not signed into my website.

Requests by your web browser to my server for web pages and other content on my website are recorded.

I use this information in aggregate to assess the popularity of the webpages on my website and how I perform in providing content to you

My lawful ground for processing and analysing this information is to enable me to properly administer my website, grow my business, and plan my marketing strategies.

Marketing data:

Under the Privacy and Electronic Communications Regulations, I may send you marketing communications from me if you have made a purchase, asked for information from me about my services, or you agreed to receive marketing communications and in each case, you have not opted out of receiving such communications since.

This information includes your preferences in receiving marketing from me, communication preferences, responses, and actions in relation to your use of my services
This also helps me to deliver relevant website content and advertisements to you and measure the effectiveness of my advertising.

You can ask me to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you, or at any time by emailing me at If you opt-out of receiving marketing communications this does not apply to personal data provided because of other transactions, such as using my services

My lawful ground for this is if you have given consent, or to be able to learn how customers want to be contacted and how they use my services. In turn, incorporating this into my marketing strategy and growing my business.

Communication data:

This will include any communication that you send to me whether that is through the contact form on my website, through email, text, social media messaging, social media posting, or any other communication that you send me.

My lawful ground for this is to reply to communications sent to me, to keep records, and to establish, pursue, or defend any legal claims.


I may publish some or all your celebration photos on my website, blog, or social media accounts. If you or any member of your wedding party wish to opt-out of my posting photographs from your wedding, you can confirm this in writing using the contact details above.

If you have previously agreed for me to use your personal photographs for marketing purposes, however, have now changed your mind then please do contact me using the above contact details.

I may aggregate anonymous data such as statistical or demographic data for any purpose. Anonymous data is data that does not identify you as an individual. Aggregated data may be derived from your personal data but is not considered personal information in law because it does not reveal your identity.

For example, I may aggregate profile data to assess interest in a product or service.

However, if I combine or connect aggregated data with your personal information so that it can identify you in any way, I treat the combined data as personal information and it will be used in accordance with this privacy policy.

4. Sensitive data.

I do not collect any sensitive data about you. Sensitive data is data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. It also includes information about criminal convictions and offences.

5. If you do not provide personal information that I need.

Where I need to collect personal data by law, or under the terms of a contract I have with you, and you fail to provide that data when requested, I may not be able to perform that contract. In that case, I may have to stop providing a service to you. If so, I will notify you of this at the time.

I will only use your personal data for the purpose it was collected for or a reasonably compatible purpose if necessary.

I may process your personal data without your knowledge or consent where this is required or permitted by law.

6. The bases on which I process information about you.

The law requires me to determine under which of six defined bases I process different categories of your personal information, and to notify you of the basis for each category.

If the basis on which I process your personal information is no longer relevant, then I shall immediately stop processing your data.

If the basis changes then if required by law, I shall notify you of the change and of any new basis under which I have determined that I can continue to process your information.

7. Information I process because I have a contractual obligation with you.

When you buy a service from me, or otherwise agree to my terms and conditions, a contract is formed between us.

To carry out my obligations under that contract I must process the information you give me. Some of this information may be personal information.

I may use it to:

Verify your identity for security purpose
Provide you with my services
Provide you with suggestions and advice on products, services and how to obtain the most from using my website

I process this information on the basis there is a contract between us, or that you have requested I use the information before we can enter into a legal contract.

I shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.

8. Information I process with your consent.

Through certain actions when otherwise there is no contractual relationship between us, such as when you browse my website or ask me to provide you with more information about my business and services, you provide your consent to me to process information that may be personal information.

Wherever possible, I aim to obtain your explicit consent to process this information, for example, by asking you to agree to my use of cookies.

If you have given me explicit permission to do so, I may from time to time pass your name and contact information to selected associates whom I consider may provide services or products you would find useful.

I continue to process your information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists.

You may withdraw your consent at any time by instructing me at however, if you do so, you may not be able to use my website or services further.

9. Information I process for the purpose of legitimate interests.

I may process the information on the basis there is a legitimate interest, either to you or to me, in doing so.

Where I process your information on this basis, I do after having considered:

Whether the same objective could be achieved through other means
Whether processing (or not processing) might cause you harm
Whether you would expect me to process your data, and whether you would consider it reasonable to do so

For example, I may process your data on this basis for the purposes of:

Record-keeping for the proper and necessary administration of my business
Responding to unsolicited communication from you to which I believe you would expect a response
Protecting and asserting the legal rights of any party
Insuring against or obtaining professional advice that is required to manage business risk
Protecting your interests where I believe I have a duty to do so

10. Information I process because I have a legal obligation.

Sometimes, I must process your information to comply with a statutory obligation. For example, I may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.

11. Information regarding third-party websites.

My website may contain links, plug-ins, or applications to other websites that I think may be of interest to you. Please note that any information that you provide on these websites is out of my control and therefore you should exercise caution as I cannot guarantee the protection and privacy of your information, as these sites are not governed by this privacy policy. You must check the policy of the website that you are visiting.

In reading this privacy policy you acknowledge that:

I do not control any third-party websites and so I am not responsible for them
Any transactions or contracts that you may enter into are between yourself and the third-party website only and I am not a party to this
I shall not be liable to you in respect of any loss or damage which you suffer by using those websites
You agree that you will not involve me in any dispute between you and the third party

12. Information relating to your method of payment.

Payment is never taken by me or transferred to me through my website. At the point of paying for a service, you will be offered the options of direct payment via BACS, or to my Paypal account.

13. Communicating with me.

When you contact me, whether by telephone, through my website or by e-mail, I collect the information you have given to me to reply with the information you need.

I record your request and my reply to increase the efficiency of my business. I keep personally identifiable information associated with your messages, such as your name and email address to be able to track my communications with you to provide a high-quality service.

14. Complaining.

When I receive a complaint, I record all the information you have given to me. I use that information to resolve your complaint.

If your complaint reasonably requires me to contact some other person, I may decide to give to that other person some of the information contained in your complaint. I do this as infrequently as possible, but it is a matter for my sole discretion as to whether I do give information, and if I do, what that information is.

I may also compile statistics showing information obtained from this source to assess the level of service we provide, but not in a way that could identify you or any other person.

15. Cookies.

Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved.

Some cookies may last for a defined period, such as one day or until you close your browser. Others last indefinitely.

My website uses cookies. They are placed by software that operates on my server, and by software operated by third parties whose services I use.

Your web browser should allow you to delete any you choose. It also should allow you to prevent or limit their use. I would recommend that you allow the use of cookies to take full advantage of the features on my website that relies on their use.

When you first visit my website, I ask you whether you wish me to use cookies. If you choose not to accept them, I shall not use them for your visit except to record that you have not consented to their use for any other purpose.

If you choose not to use cookies or you prevent their use through your browser settings, you will not be able to use all the functionality of my website.

I use cookies in the following ways:

To track how you use my website
To allow the full functionality of my website for you
To record whether you have seen specific messages I display on my website
To keep you signed into my website
To record your answers to surveys and questionnaires on my site while you complete them
To enable you to watch any videos that I have placed on my website
To operate my contact form and to enhance the security of the form

[I provide more information about the cookies I use in my cookie policy]

16. Information may be processed outside of the European Union.

My website is hosted in the UK; however, I may also use outsourced services in countries outside the European Union from time to time in other aspects of my business (e.g. Paypal, Flodesk.) Accordingly, information obtained within the UK or any other country could be processed outside the European Union.

With respect to any information transferred outside the European Union, I use the following safeguard by complying with the code of conduct from the General Data Protection Regulation and the Data Protection Act 2018.

17. Control over your own information.

Your duty to inform me of changes – It is important that the personal information I hold about you is accurate and current. Please keep me informed if your personal information changes. Under data protection laws you have rights in relation to your personal information that includes the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of your information and where the lawful ground of processing is consent, to withdraw consent.

I try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex, or you have made several requests. In this case, I will notify you.

Access to your personal information – At any time you may review or update personally identifiable information that I hold about you, by contacting me at You will not have to pay a fee to access your personal data (or to exercise any of your other rights), however I may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive or refuse to comply with your request in these circumstances
Removal of your information – If you wish me to remove personally identifiable information from my website, you should contact me at to make your request. This may limit the service I can provide to you
Verification of your information – When I receive any request to access, edit or delete personally identifiable information I shall first take reasonable steps to verify your identity and ensure your right to access your personal information before granting you access, or otherwise taking any action. This is important to safeguard your information and this is a security measure to ensure that your personal information is not disclosed to any persons who have no right to receive it

18. Use of my website by children.

I do not provide services for purchase by children, nor do I market to children. If you are under 18, you may use my website only with consent from a parent or guardian.

19. Encryption of information sent between us.

Your information is important to me and so I have put in place security measures to prevent your information from being accidentally lost, used, altered, or accessed without my authorisation. For my website, I use Secure Sockets Layer (SSL) certificates to verify my identity to your browser and to encrypt any information you give me.

Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or another trust mark in your browser’s URL bar or toolbar.

20. How you can complain.

If you are not happy with my privacy policy or if you have any complaints, then you should tell me.

If a dispute is not settled, then I hope you will agree to attempt to resolve it by engaging in good faith with me in a process of mediation or arbitration.

If you are in any way dissatisfied with how I process your personal information, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervising authority for information protection issues. This can be done at I would, however, appreciate the opportunity to talk to you about your concern before you approach the ICO.

21. Retention period for personal data.

Except as otherwise mentioned in this privacy policy, I keep your personal information only for as long as required to fulfill the purposes I collected it for:

To provide you with the services you have requested
To comply with other law, including for the period demanded by our tax authorities
To support a claim or defence in court

22. Compliance with the law.

My privacy policy has been compiled to comply with the law of every country or legal jurisdiction in which I aim to do business. If you think it fails to satisfy the law of your jurisdiction, I should like to hear from you.

Pin It on Pinterest