Last updated: 9 November 2026
1. Who we are
This Privacy Policy explains how Alex Haigh, trading as YEULA™ (“YEULA”, “we”, “us” or “our”), handles personal data through https://yeula.co.uk/, when you contact us or book a service, and while we provide our services.
• Controller: Alex Haigh, trading as YEULA™
• Business address: 182–184 High Street North, East Ham, London, E6 2JA
• Privacy contact: alexhaigh333@gmail.com
• VAT status: Not VAT registered.
The controller is the person or organisation that decides why and how personal data is processed. Alex Haigh is the controller for the processing described in this Policy.
2. Personal data we collect
Depending on how you interact with us, we may collect:
• Identity and contact details, such as your name, role, organisation, email address, telephone number and business address.
• Enquiry and booking information, such as the service you are considering, booking details, preferred dates, communications and appointment history.
• Project information, such as licence terms, font licensing documents, correspondence, business requirements and information about a dispute, threatened claim, designer, foundry, agency or client that you provide to us.
• Payment and transaction information, such as invoice details, amounts, payment status and transaction references. Payments are processed by Stripe. We do not intentionally store full payment-card details.
• Technical information, such as IP address, browser and device information, pages visited and information collected through cookies or similar technologies, subject to your choices and applicable law.
• Marketing information, such as your marketing preferences and whether you have opted out.
Please do not send special-category personal data, criminal-offence data or another person’s confidential information unless it is necessary for the work and you are authorised to provide it.
3. How we obtain personal data
We collect information directly when you contact us, use our website, make a booking, pay an invoice, provide project materials or otherwise communicate with us.
We may also receive information from your employer or organisation, a professional adviser, a person referring you to us, or a provider supporting bookings or payments. Our website is built using Framer. Bookings are arranged through Cal.com, and payments are processed through Stripe. Those providers may process personal data when you use the relevant website, booking or payment functions.
Where we obtain personal data from another source, we will provide information required by applicable law, unless an exception applies.
4. Why we use personal data and our legal bases
We use personal data only where the law permits us to do so. Depending on the circumstances, our legal bases include:
• Responding to an enquiry and taking steps at your request before a contract: taking steps at your request before entering into a contract.
• Providing a booked service: performance of a contract.
• Managing appointments and project communications: performance of a contract and, where appropriate, our legitimate interests in administering our business.
• Processing payments, issuing invoices and keeping tax and accounting records: performance of a contract and compliance with legal obligations.
• Maintaining business records and establishing, exercising or defending legal claims: legitimate interests, legal obligations, or the establishment, exercise or defence of legal claims, as applicable.
• Operating, securing and improving our website: legitimate interests, subject to applicable rules for cookies and similar technologies.
• Sending direct marketing: consent or another lawful basis where permitted by law.
• Using non-essential cookies or similar technologies: consent where required by law.
Our legitimate interests include operating and protecting our business, responding to business enquiries, maintaining appropriate records, and protecting or defending our legal rights. We consider the effect on individuals and do not rely on legitimate interests where their rights override our interests.
5. Confidential project information
We use project information to provide the service requested, communicate with you, keep necessary records and protect or defend legal claims. We restrict access to people and service providers who need the information for those purposes and are subject to appropriate confidentiality obligations.
Our Terms of Business explain the contractual confidentiality obligations. Do not send materials you are not authorised to disclose. Our confidentiality obligations do not, by themselves, create legal professional privilege.
6. Who we share personal data with
We may share personal data where necessary with:
• Framer, which supports the website;
• Cal.com, which supports bookings and appointment scheduling;
• Stripe, which processes payments;
• providers supporting email, file storage, accounting, security or other business operations, if used;
• professional advisers, insurers and auditors, where necessary;
• a potential purchaser or successor in connection with a business transfer, subject to appropriate safeguards; and
• courts, regulators, law-enforcement bodies or other public authorities where required by law or reasonably necessary to protect legal rights.
We do not sell personal data or share it with third parties for their own direct marketing.
7. International transfers
Some providers may process personal data outside the United Kingdom or allow access to it from outside the United Kingdom. The location and transfer arrangements depend on the services and settings used. Where a transfer is restricted under applicable data-protection law, we will use a permitted transfer mechanism and any required safeguards, or another lawful transfer route.
You can contact us at alexhaigh333@gmail.com for information about relevant transfer safeguards.
8. How long we keep personal data
We generally retain client, project, booking, payment and related business records for six years after the relevant engagement or transaction ends, or for six years from the end of the relevant tax year where that is needed for accounting or tax records. We may retain information for longer where necessary to comply with law, resolve a dispute or establish, exercise or defend a legal claim.
We will not keep information longer than reasonably necessary. Information that is no longer required will be securely deleted or anonymised. We will review whether six years is appropriate for each category of information and retain shorter-lived technical or security data for only as long as reasonably needed for its purpose.
9. Your rights
Subject to applicable law, you may have the right to:
• request access to your personal data;
• ask us to correct inaccurate data or delete data;
• ask us to restrict processing or provide certain data to you or another organisation;
• object to processing based on legitimate interests; and
• withdraw consent where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Some rights are subject to conditions and exceptions.
To exercise a right, contact alexhaigh333@gmail.com. We may need to verify your identity and clarify your request.
You may complain to the Information Commissioner’s Office (ICO). Information about the ICO and making a complaint is available at ico.org.uk.
10. Marketing
We may send communications needed to respond to your enquiry or administer a booking or engagement. We will send marketing communications only where permitted by law. You can opt out at any time using an unsubscribe link, if provided, or by emailing alexhaigh333@gmail.com. Opting out of marketing will not stop service or administrative communications.
11. Cookies and similar technologies
The website may use cookies and similar technologies. Strictly necessary technologies may be used where they meet the applicable legal exemption. We will seek consent before using non-essential cookies or similar technologies where required by law.
The technologies we use, their purposes and your choices are described in our Cookie Policy.
12. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children
Our services are intended principally for business users and are not directed to children. We do not knowingly seek to collect children’s personal data. Contact us if you believe a child has provided personal data to us.
14. Changes to this Policy
We may update this Policy to reflect changes in our business, services, data handling or legal obligations. We will publish the current version on our website and revise the “Last updated” date. Where required, we will provide further notice.
15. Contact
Questions or requests about this Policy or our use of personal data should be sent to:
• Alex Haigh, trading as YEULA™
• 182–184 High Street North, East Ham, London, E6 2JA
• Email: alexhaigh333@gmail.com