Privacy Notice of Shona Hancock trading as Ceremonies with Sho
1. How we use your personal data
We are committed to protecting your personal data. The only data we collect from you is as submitted by you on the form overleaf, through meetings and questionnaires.
We will use your sensitive personal data (eg race, religion, sexual orientation, gender) for the purposes of providing our services to you or if we need to comply with a legal obligation. Our legal grounds for processing this data are your explicit consent and, where applicable, the performance of a contract with you or compliance with a legal obligation.
We will use your non-sensitive personal data to (i) register you as a new client, (ii) manage payment, (iii) collect and recover monies owed to us, (iv) manage our relationship with you, and (v) send you details of our goods and services.
Our legal grounds for processing your data in relation to points (i) to (iv) above are performance of a contract with you, and in relation to (iii) and (v) above, necessary for our legitimate interests, including for direct marketing purposes, to develop our products/services and grow our business and to recover monies owed.
We will not share your details with third parties for marketing purposes except with your express consent.
2. Disclosure of your personal data
We may have to share your personal data with (i) service providers who provide IT and system administration support, (ii) professional advisers including lawyers, bankers, auditors and insurers, (iii) HMRC and other regulatory authorities, (iv) third parties to whom we sell, transfer or merge parts of our business or our assets, and/or (v) to other professionals for the purposes of discussing your ceremony.
We require all of these third parties to respect the security of your personal data and to treat it in accordance with the law. They are only allowed to process your personal data on our instructions unless required by law.
3. International transfers
Some of our third-party providers are businesses outside the UK in countries which may not always offer the same levels of protection for your personal data. Where we transfer data internationally, we ensure appropriate safeguards are in place such as adequacy regulations, the UK-US Data Bridge, the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. Where required, we also carry out a Transfer Risk Assessment to ensure that your data is adequately protected in practice.
4. Data security
We have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.
5. Data retention
We will only keep your personal data for as long as is necessary to fulfil the purposes for which we collected it. We may retain your data to satisfy legal, accounting or reporting requirements — for example, we need to keep certain information about you for 6 years after you cease to be a client for tax purposes.
We may anonymise your personal data (so that you can no longer be identified from it) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
6. Your rights
You have certain rights in relation to the personal data we hold about you. These include the right to request access to your data, to have inaccurate data corrected, to request
deletion of your data in certain circumstances, to restrict processing, to data portability, and to object to processing. Full details are available at ico.org.uk.
To make a data subject access request, please contact Shona Hancock at hello@ceremonieswithsho.co.uk or write to 3 Cadogan Grove, Backwell BS48 3QN. We will respond within one calendar month. Under the Data (Use and Access) Act 2025, we may pause this deadline while we request additional information to verify your identity or clarify your request, and our search will be reasonable and proportionate.
7. Keeping your data up to date
We have a duty to keep your personal data up to date and accurate. From time to time we may contact you to confirm your details are still correct. If your personal data changes (such as a change of address), please let us know as soon as possible using the contact details in section 6 above.
8. How to complain
If you are not happy with any aspect of how we collect and use your personal data, please contact us first so that we can try to resolve it for you. You can raise a complaint by emailing hello@ceremonieswithsho.co.uk or writing to the address detailed in section 6 above.
We will acknowledge your complaint within 30 days and investigate it without undue delay. If you are not satisfied with our response, you have the right to complain to the
Information Commissioner’s Office (ICO) at ico.org.uk. Under current rules, data subjects are generally expected in practice to raise complaints with us first before escalating to the ICO.
9. Changes to this notice
We may update this privacy notice from time to time. We will notify you of any material changes where appropriate, and any updates will be provided to you at your next appointment or on request.
Last updated: 9/9/26