Privacy
Privacy notice
Last updated 9 October 2026
This notice explains what personal information SAWA Events collects when you visit this website, book tickets, contact us or email us, why we collect it, who we share it with, how long we keep it and what your rights are.
Who we are
SAWA Events is the trading name of Noura Hamze, a sole trader based in London, United Kingdom. Noura Hamze, trading as SAWA Events, is the controller of your personal information. That means we decide how it is used and are responsible for looking after it. For anything about your personal information, email hello@sawaevents.co.uk.
What we collect, why, and for how long
| Information | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Ticket bookings. Your email address, number of tickets, amount paid and booking reference. | To take your booking, send your confirmation and booking emails, and deal with any questions or refunds. | Contract with you (including free tickets for under-1s). After the event, our legal obligation to keep business records and our legitimate interest in dealing with any refund or payment dispute. | Kept for as long as HM Revenue & Customs requires us to keep business records: 5 years after the 31 January tax return deadline for the tax year of your booking (about 6 to 7 years in all). Then deleted. Checkouts that are cancelled or expire are deleted after 48 hours, and any never completed within 10 days. |
| Children's first names. The first name of each child you book for, and whether they are under 1. | To keep the guest list, check children in and keep everyone safe on the day. | Our legitimate interest in running a safe, organised children's event. We collect as little as we can and keep it briefly, because children's information deserves extra care. | Deleted 30 days after the event. |
| Business and tax records. Booking reference, date, amount and payment reference. | To keep the accounts the law requires. | Legal obligation. | As for ticket bookings above. Children's names are never part of these records. |
| Payment details. Card details, billing name and address, entered into Stripe's secure checkout. | To take payment. We never see or store your card details; Stripe handles them. Stripe also uses payment and device information to prevent fraud, as a controller in its own right under its own privacy policy. | Contract with you. For fraud prevention, our and Stripe's legitimate interest in preventing fraud. | Kept by Stripe under its own retention rules and legal duties. |
| Enquiries. Your name, email, phone number (if you give it) and your message, from our contact form or by email. | To reply to you and plan your event. | Taking steps you ask for before a contract, such as a quote. For general questions, our legitimate interest in answering them. | Up to 12 months, unless you book with us, in which case it becomes part of your booking record. |
| Website visits. Technical data such as your IP address, browser type, the pages you visit, how long they take to load and any errors. | To deliver the website, keep it secure, see whether it is working and fix errors. | Our legitimate interest in running a secure website. | Short-lived security and error logs kept by our hosting providers, usually a few days to a month. |
You need to give us your email address and your children's first names to book, because we cannot confirm a booking or run the guest list without them. Everything else is optional. Please only book for children you are responsible for, or whose parent or guardian has agreed.
Children's information
We only collect children's first names, and only from their parent or guardian when booking. We use them for the guest list and safety on the day and nothing else. Please do not send health or medical details through our website. If your child has an allergy or other need we should know about, email us or tell us on the day. Health information is especially sensitive, so we only record it with your explicit consent, use it only to keep your child safe at the event and delete it afterwards. You can withdraw your consent at any time.
We photograph our decorations and set-ups for our portfolio. We do not publish photos in which a child can be identified, or name a child or client in our portfolio or testimonials, without the parent's or client's separate permission, which can be withdrawn at any time by emailing hello@sawaevents.co.uk.
Who we share it with
We do not sell your information or use it for advertising. We share it only with the service providers that run our business for us. They act on our instructions under contracts that require them to protect it.
| Provider | What they do for us | Where | How transfers are protected |
|---|---|---|---|
| Lovable (Lovable Labs Incorporated and Lovable Labs Sweden AB) | Builds and hosts this website and its database, records basic page-view and error information, and relays our payment requests to Stripe. | Sweden and USA. Our booking database is hosted by Lovable's provider Supabase in Ireland. | UK adequacy regulations for Sweden and Ireland; the UK Addendum to the EU standard contractual clauses for the USA. |
| Stripe (Stripe Payments UK Ltd and Stripe, LLC). Stripe's privacy policy | Processes card payments and sends payment receipts. Stripe is also a controller in its own right for fraud prevention and its legal duties. | UK, EU and USA | Stripe's UK International Data Transfer terms and the UK Extension to the EU-US Data Privacy Framework. |
| Resend (Plus Five Five, Inc.) | Sends our booking confirmation and notification emails. | USA and EU | The UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses. |
| Cloudflare, Inc. | Runs our domain name, protects the website from attack and forwards email sent to our addresses. | USA and worldwide network | The UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses. |
| Google LLC | Provides the mailbox where we receive your emails. | USA | The UK Extension to the EU-US Data Privacy Framework. |
| WhatsApp (WhatsApp LLC) | Only if you choose to message us on WhatsApp. WhatsApp handles your messages under its own terms. | USA | Under WhatsApp's own terms. |
We may also share information where the law requires it, for example with HM Revenue & Customs, or to protect someone's safety.
International transfers
Some of our providers are based in the United States or store data there. Where your information leaves the UK, it is protected as shown in the table above. Our booking database is stored in Ireland, which the UK recognises as providing adequate protection. Email hello@sawaevents.co.uk if you would like more detail or a copy of the safeguards.
Cookies and similar technologies
We do not use advertising or analytics cookies, and we do not track you across other websites. We use only the small number of cookies and browser storage items that the website needs to work, stay secure and prevent payment fraud. The law allows these without consent, so we do not show a cookie banner. You can block or delete cookies in your browser settings, although parts of the site, such as checkout, may then not work.
| Name | Set by | Purpose | How long |
|---|---|---|---|
| __cf_bm | Cloudflare (our hosting network) | Tells people apart from automated bots, to protect the site. Our portfolio images are served by our database provider, which may set the same cookie. | 30 minutes |
| __dpl | Lovable (our hosting) | Makes sure you are served the current version of the site. | 24 hours |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention during payment. Set only once you open checkout. | 1 year and 30 minutes |
| tsr-scroll-restoration (browser session storage) | This website | Remembers your scroll position as you move between pages. | Until you close the tab |
| sawa_admin_token (browser session storage) | This website | Keeps the site owner signed in to the admin area. Never set for visitors. | Until the tab is closed, at most 12 hours |
Our hosting provider also records which pages are viewed, how long they take to load and any errors, without using cookies or storing anything on your device, so we can see whether the site is working and fix problems. Our fonts are served from this website, not from Google.
Marketing
We do not send marketing emails. The emails we send are about your booking or your enquiry. If we ever offer a newsletter, we will ask you first, and every message will include a simple way to unsubscribe.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it, or object to us using it, including where we rely on legitimate interests;
- ask for information you gave us in a format you can take elsewhere;
- withdraw your consent at any time, where we rely on it (for example for photos or health information).
To use any of these rights, email hello@sawaevents.co.uk. It is free, and we will reply within one month. We may need to confirm who you are first. Some rights are limited, for example we must keep booking records for tax purposes. We do not make decisions about you by automated means.
How we keep it safe
Your information is sent over encrypted connections and stored with providers that protect it to industry standards. Access to booking records is limited to the business owner and the person who maintains this website for us, who acts only on our instructions. If something goes wrong that puts your information at risk, we will deal with it promptly, record it, and tell you and the Information Commission where the law requires.
Questions and complaints
If you have a question or a complaint about how we handle your personal information, please email hello@sawaevents.co.uk first. We will acknowledge your complaint within 30 days and tell you what we are doing about it.
You can also complain to the Information Commission (formerly the Information Commissioner's Office, or ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We will update this page if the way we use personal information changes, and change the date at the top.