Privacy policy

Last updated: 6 November 2026 · Wix edition

Who is responsible?

Heritage Possessed is the brand used for this website. The legal operator’s name and service address are being finalised and will be displayed here and at checkout before any ticket sales open. No paid bookings are currently available. This notice describes how the operator handles personal data collected through the Heritage Possessed website.

What we collect and why

• Enquiries and event interest: your name, email, chosen topic, message and submission time. We use these to answer you or contact you about the experience you asked about. Our lawful basis is taking steps at your request before a contract, or our legitimate interest in responding to general enquiries. An interest enquiry is not a marketing subscription.
• Bookings, when enabled: lead guest name and email, chosen event, ticket quantity, price, booking reference, terms acceptance version/time, payment status and Wix order reference. We use these to make and fulfil the booking (contract), maintain accounts and comply with applicable legal obligations.
• Website operation: the hosting service may process IP addresses, security logs and, on a private site, account identity and authentication data for access control and security. Our lawful basis for our security processing is legitimate interests. The hosting provider also processes data under its own applicable terms.
• Privacy preferences: this browser’s media preference and choice time, stored locally for up to 180 days. See our cookie notice.

We do not ask for payment-card details, medical records or sensitive personal information in the contact form. Please do not include these in your message. If an access adjustment needs a private discussion, contact us first so we can agree an appropriate way to handle it.

Shop orders and gift vouchers

When the shop opens, we collect order contact details, selected products and sizes, quantities, prices, payment references and any delivery address supplied at checkout. We use this information to fulfil your order and manage returns under the contract, and to meet accounting obligations. Voucher codes, original values, balances and expiry dates are held so we can issue and redeem vouchers. We keep order and voucher financial records for up to six years after completion or final redemption, subject to applicable legal requirements. Necessary address and order details may be shared with a confirmed fulfilment or delivery provider; that provider will be identified before sales open. Shop enquiries use the same process as other enquiries.

Who can receive your data?

Wix supplies this website’s hosting, contact forms, store catalogue, visitor sessions and order systems. Enquiries are saved in the Wix Forms dashboard, and contact details may also be recorded in Wix Contacts. Gmail handles messages sent directly to our email address. When online payments open, Wix and the payment provider selected by the operator will handle checkout and payment data; full card details are not stored by Heritage Possessed. Necessary order details may be shared with a confirmed delivery provider, and event details with a venue where required to fulfil a booking. We will identify the relevant payment and fulfilment arrangements before sales open.

WhatsApp, Instagram, Facebook, TikTok, YouTube and other linked platforms process data under their own privacy notices when you choose to visit them. Social links do not load social widgets or tracking pixels on this site. We do not sell your information or use it for targeted advertising.

International processing

Some providers may process data outside the UK. Any restricted transfers for which we are responsible require an applicable adequacy decision or other lawful safeguard, such as approved contractual terms. We will check the relevant provider arrangements before activating additional services. Contact us for information about safeguards relevant to your data.

How long we keep it

We review ordinary enquiries for deletion within 12 months of the last meaningful contact, unless a continuing issue justifies longer retention. Event-interest messages are reviewed within 12 months or after the requested event update. Booking and financial records are generally kept for up to six years after the transaction for accounting and dispute purposes, subject to any applicable legal requirement. Uncompleted payment records are reviewed after 30 days. These are retention policies, not a claim that every deletion is automatic. Access and security logs follow the provider’s operational retention rules.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact heritagepossessed@gmail.com; we normally respond within one month, subject to lawful extensions and identity checks. You can complain to the Information Commissioner’s Office. You do not have to contact us first.

Security and choices

We limit access, use encrypted connections and collect only what is needed for the stated purposes. No online service can promise absolute security. There are no advertising trackers or automated decisions producing legal or similarly significant effects. Reopen cookie settings from the homepage footer to change your browser’s media preference. A material change to processing will be reflected in this notice.