Privacy Policy

Privacy Policy

Last updated: 28 August 2026

The Hyatt Collective is committed to respecting your privacy and keeping your personal information safe.

This Privacy Policy explains how I collect, use and protect personal information when you visit my website, contact me, or work with me.

Who I am

The Hyatt Collective is a business operated by Lisa Hyatt, a sole trader based in the UK.

If you have any questions about how your personal information is handled, you can contact me at:

lisa@thehyattcollective.co.uk

What information I may collect

Depending on how you interact with me, I may collect:

• Your name
• Business name and job title, where relevant
• Email address
• Telephone number, where you choose to provide it
• Business or billing address
• Information contained in correspondence you send to me
• Information needed to provide business support services
• Invoice and payment information
• Documents, spreadsheets, correspondence or other information you provide to me as part of my work for you
• Information contained in business records and communications

I only collect information that is relevant to the purpose for which I am using it.

How I collect your information

I may receive personal information:

• When you contact me by email
• When you enquire about my services
• When you become a client
• When you provide information as part of my business support services
• Through normal business correspondence and administration

I do not currently operate a website contact form or newsletter.

How I use your information

I may use your personal information to:

• Respond to enquiries
• Discuss and provide my business support services
• Communicate with you about work I am carrying out
• Manage my client and prospective client records
• Prepare and manage invoices and payments
• Maintain appropriate business and financial records
• Meet legal, regulatory and accounting requirements
• Protect the security of my business and information
• Improve and manage my website and its performance

Where I process personal information on behalf of one of my clients as part of providing business support, I will only use that information for the purposes agreed with that client and in accordance with my contractual responsibilities.

My lawful basis for using your information

Under UK data protection law, I need a lawful basis for processing personal information.

Depending on the circumstances, I may rely on:

Contract – where processing is necessary to provide services you have asked me to provide or to take steps before entering into a contract.

Legitimate interests – for example, responding to business enquiries, maintaining appropriate business records, managing ongoing business relationships and running my business effectively, where those interests are not overridden by your rights.

Legal obligation – where I need to process information to meet a legal or accounting requirement.

Consent – where consent is required, for example for certain non-essential cookies or other activities where consent is the appropriate lawful basis.

How I store and protect your information

I take reasonable steps to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

I use business systems including Microsoft 365, Outlook, Word and Excel to manage communications and business records.

I also use Monzo for business invoicing and payment-related activities.

I will only give access to personal information where it is necessary for legitimate business purposes or where I am legally required to do so.

Sharing your information

I do not sell or rent your personal information.

I may share information with trusted service providers where this is necessary to operate my business or provide my services. These may include providers of email, cloud storage, business software, accounting or payment services and website hosting.

Where I process personal information on behalf of a client, I may have access to information relating to that client’s customers, suppliers, employees or other contacts. In these circumstances, I will process that information only as necessary to provide the agreed services and in accordance with the client’s instructions and any applicable data-processing arrangements.

I may also disclose information where I am legally required to do so.

How long I keep your information

I keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected.

Client and prospective client information may be retained for the duration of the relationship and afterwards where there is a legitimate business, legal or accounting reason to do so.

Financial and invoice records will be retained for the period required by applicable tax and accounting requirements.

When information is no longer required, I will take reasonable steps to securely delete or dispose of it.

Your rights

Under UK data protection law, you may have rights including:

• The right to ask for access to the personal information I hold about you
• The right to ask for inaccurate information to be corrected
• The right to ask for your information to be erased in certain circumstances
• The right to ask for processing to be restricted in certain circumstances
• The right to object to certain processing
• The right to data portability in certain circumstances
• The right to withdraw consent where processing is based on consent

Some of these rights are subject to conditions and exemptions under data protection law.

If you would like to exercise any of your rights, please contact me at:

lisa@thehyattcollective.co.uk

I may need to ask you to verify your identity before responding to a request.

Complaints

If you have concerns about how I have handled your personal information, please contact me first so that I have the opportunity to address your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

You can find information about making a complaint on the ICO’s website.

Cookies

My website uses cookies and similar technologies. Some are necessary for the website to function, while others may be used for website performance and tracking purposes where you have given consent.

For more information, please see my Cookie Policy.

Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, the services I use or applicable data protection requirements.

The latest version will always be available on this website.

Contact

If you have any questions about this Privacy Policy or how I handle your personal information, please email:

lisa@thehyattcollective.co.uk