Privacy policy
Last updated 8 November 2026. This is a starting template: have it reviewed by a UK solicitor before launch.
The Hub Global Business Solutions Ltd (company number 17431221), 15 School Close, Northfield, Birmingham, England, B31 2SH, operates SpotlightFor and is the data controller for personal data processed through this website, under the UK GDPR and the Data Protection Act 2018.
What we collect
- Account data: your name, email address, password (stored only as a one-way hash), time zone and preferences.
- Booking data: occasions, times, prices and payment references. Card details are handled by our payment providers (Stripe or Revolut) and never reach us.
- Dedication content: the names, message and photo you add. Photos are stripped of location and camera data on upload.
- Anonymous usage statistics without cookies: we count visits with a daily-rotating anonymous identifier and do not store IP addresses for analytics.
Why we use it
To provide your booking (contract), keep the service secure and prevent abuse (legitimate interests), and meet legal obligations such as keeping financial records.
Who can see your dedication
During your live period, anyone visiting the occasion page. Afterwards, according to your setting: public (listed on the celebration wall and indexable), unlisted (only people with the link) or private (only you). We never show recipient contact details, customer emails or payment information publicly.
Your rights
You can access, correct or delete your data. You can delete a dedication's content from your dashboard, and request account deletion in your settings. We keep payment records for as long as UK law requires.
Contact
Email [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).