Privacy Notice

1. Who we are

Pretty by Kate is operated by Kate Campbell, a sole trader trading as Pretty by Kate ("we", "us"). We are the data controller for the personal data we collect through prettybykate.com.

Contact for privacy questions: hello@prettybykate.com.

2. Personal data we collect

• Account data — name, email address, login credentials (passwords are stored hashed).
• Trip inputs — destination, dates, preferences, and other details you enter when generating a guide.
• Purchase data — unlock codes, order references, and the email used at checkout.
• Support messages — anything you send us by email or via in-app messages.
• Usage and device data — pages visited, actions taken, IP address, browser type, device identifiers, and approximate location derived from IP.

Payment card details are collected by Etsy at checkout. We never see or store your card number — we only receive the unlock code and order reference needed to deliver your guide.

3. How we use your data and why

• To provide the service — create your account, generate and store your guides, redeem unlock codes. (Legal basis: performance of our contract with you.)
• To process purchases — issue unlock codes, deliver receipts, handle refunds. (Legal basis: performance of contract and legal obligation.)
• Security and fraud prevention — detect and prevent abuse, unauthorised access, and misuse of the service. (Legal basis: legitimate interests.)
• Product improvement — analyse usage to improve guide quality and the website. (Legal basis: legitimate interests.)
• Customer support — respond to your enquiries. (Legal basis: legitimate interests / contract.)
• Marketing — only with your consent, e.g. opt-in newsletters. You can unsubscribe at any time. (Legal basis: consent.)
• Legal compliance — comply with tax, accounting, and other legal obligations. (Legal basis: legal obligation.)

4. Sharing your data

We share personal data with:

• Etsy, Inc. — our sales channel. Etsy processes payments, handles tax compliance and invoicing, and provides buyer support for transactions.
• Service providers / subprocessors — hosting and database infrastructure (Supabase / Lovable Cloud), AI providers used to generate parts of your guides, email delivery providers, and analytics tools.
• Professional advisers — accountants and legal advisers where necessary.
• Authorities — where required by law, court order, or to protect our rights.

We do not sell your personal data.

5. International transfers

Some of our service providers are located outside the UK and EEA (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

6. How long we keep your data

We retain your account and guide data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we need to keep records to meet legal, tax, accounting or fraud-prevention obligations (typically up to 7 years for purchase records).

7. Your rights

Under UK and EU GDPR (and equivalent laws in other regions), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• restrict or object to certain processing;
• port your data to another provider;
• withdraw consent at any time (where processing is based on consent);
• lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO).

To exercise your rights, email hello@prettybykate.com. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, hashed passwords, and managed cloud infrastructure. No system is perfectly secure, but we work to keep your data safe.

9. Cookies

We use a small number of cookies and similar technologies:

• Essential cookies — required to keep you logged in and to remember your session. These cannot be turned off.
• Analytics cookies — help us understand how the site is used so we can improve it.

You can manage cookies through your browser settings. Blocking essential cookies will break parts of the site.

10. Children

Pretty by Kate is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. The "Last updated" date at the top of the page reflects the most recent version. Material changes will be communicated by email or via the service.

12. Contact

For any privacy-related questions, email hello@prettybykate.com.