PRIVACY POLICY
Last updated: 1 October 2026
Sunday House Interiors Ltd (“Sunday House”, “we”, “us” or “our”) is the controller of your personal information.
This privacy policy explains what personal information we collect, why we collect it, how we use it, who we may share it with and your rights in relation to it.
CONTACT DETAILS
If you have any questions about this privacy policy or how we use your personal information, you can contact us at:
Sunday House Interiors Ltd
Email: hello@sundayhouse.co.uk
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.
WHAT INFORMATION WE COLLECT
Depending on how you interact with Sunday House, we may collect and use:
your name and contact details;
addresses, including project, property or event locations;
information about your project, property, event, venue or the services you're interested in;
photographs and video recordings;
recordings of client calls or video meetings, where applicable;
records of meetings, decisions and project approvals;
correspondence between you and Sunday House;
details of services you've purchased or enquired about;
financial transaction information; and
other information you choose to provide to us as part of an enquiry or project.
This reflects the categories in the ICO-generated notice, including project/property/event information, meeting records and call recordings. Pasted markdown
HOW AND WHY WE USE YOUR INFORMATION
We may use your personal information to:
respond to enquiries and discuss potential projects;
prepare proposals, quotations and scopes of work;
provide our interior design, creative studio and event styling services;
communicate with you throughout a project;
arrange meetings, deliveries, sourcing and other project requirements;
maintain appropriate project and business records;
manage payments and financial records;
comply with legal, accounting and regulatory requirements; and
respond to or manage queries, complaints, disputes or legal claims.
We do not currently use information submitted through our website to send marketing emails or newsletters.
OUR LAWFUL BASES
Under UK data protection law, we need a lawful basis for using your personal information.
Where we use your information to provide our services, respond to an enquiry about working with us or take steps towards entering into an agreement with you, we generally rely on contract.
Where we need to process information to meet our legal, accounting or regulatory responsibilities, we rely on legal obligation.
Where we need to use information to respond to and manage queries, complaints, disputes or claims, we rely on our legitimate interests in understanding the matter, reviewing relevant records, responding appropriately, resolving disputes and, where necessary, establishing, exercising or defending legal claims.
These are the three lawful bases recorded in the ICO-generated notice. Pasted markdown
WHERE WE GET YOUR INFORMATION
Most of the personal information we process is provided directly by you, for example when you contact us, submit an enquiry form, communicate with us or work with us on a project.
We may also receive relevant information from suppliers and service providers involved in a project. Pasted markdown
HOW LONG WE KEEP YOUR INFORMATION
We only keep personal information for as long as we need it for the purposes for which it was collected, including to provide our services, maintain appropriate business records and meet our legal, accounting and regulatory obligations.
Enquiries that do not result in a project will generally be retained for up to 12 months after our last contact.
Client and project records, including contracts, project correspondence and records of key decisions, will generally be retained for up to six years after the end of the relevant project or contract.
Financial and accounting records will generally be retained for six years from the end of the company financial year to which they relate, or for longer where required by law.
Video or call recordings made in connection with client meetings will generally be deleted within 90 days once any relevant project information has been recorded, unless there is a specific reason for us to retain the recording for longer.
Project and event photographs or video may be retained for portfolio, record-keeping or marketing purposes where we have an appropriate lawful basis to do so.
We may retain information for longer where necessary to establish, exercise or defend legal claims, resolve a dispute, comply with a legal or regulatory obligation, or where another legitimate reason requires us to do so.
We periodically review the information we hold and securely delete or anonymise personal information when it is no longer required.
WHO WE SHARE INFORMATION WITH
Where necessary, we may share relevant personal information with:
suppliers and service providers involved in delivering our services;
professional advisers, such as accountants or legal advisers;
regulatory authorities;
organisations we are legally required to provide information to; and
other parties where necessary to provide the service you've requested.
Where appropriate and subject to the necessary permissions or other lawful basis, some information may also appear publicly through our website, social media, portfolio or other marketing materials.
We also use companies that process information on our behalf. Our current principal processors include:
Squarespace, Inc. — provides our website hosting and website services, including processing information submitted through our website enquiry forms.
Google LLC / Google Workspace — provides our business email, cloud file storage and video-conferencing services, including Gmail, Google Drive and Google Meet.
These correspond to the processors identified in the ICO-generated notice. Pasted markdown
SHARING INFORMATION OUTSIDE THE UK
Some of our service providers may process personal information outside the UK.
This includes Squarespace, Inc. and Google LLC, which may process personal information in the United States.
Where personal information is transferred internationally, appropriate safeguards are used in accordance with UK data protection law. Where applicable, transfers to participating US organisations may be made under the UK Extension to the EU-US Data Privacy Framework, also known as the UK-US data bridge.
The ICO-generated notice identifies both Squarespace and Google as US recipients under the UK data-bridge mechanism. Pasted markdown
YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and the lawful basis we're relying on, UK data protection law may give you rights including:
the right to ask for a copy of the personal information we hold about you;
the right to ask us to correct inaccurate or incomplete information;
the right to ask us to delete your personal information in certain circumstances;
the right to ask us to restrict how we use your information;
the right to object to certain uses of your information; and
the right to data portability in certain circumstances.
Not every right applies in every situation.
If you'd like to exercise any of these rights, contact hello@sundayhouse.co.uk.
The ICO-generated notice records these rights and states that data-protection requests must be handled without undue delay and, in any event, within one month, subject to the applicable rules and exemptions. Pasted markdown
HOW TO COMPLAIN
If you have concerns about how Sunday House uses your personal information, please contact us first at:
If you're unhappy with how we've handled your personal information or your complaint, you also have the right to complain to the Information Commissioner's Office (ICO).
Information Commissioner's Office
ICO Head Office
4th Floor, No. 3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL
Helpline: 0303 123 1113
ICO – Make a complaint