Introduction
SO SWEET FESTIVALS LIMITED operates this website as an informational digital publishing and resource platform. This Privacy Policy explains in a clear and practical way how the company may collect, use, store, and manage personal data when a visitor reads the website, submits a request, makes an enquiry, or communicates about informational PDF materials. The company aims to collect only data that is reasonably necessary for correspondence, request handling, record keeping, and lawful business administration. This policy is written for readers in the United Kingdom and is intended to be understandable rather than obscure.
What information may be collected
Information may include a visitor's name when voluntarily provided, phone number, email correspondence, notes submitted through a form, records of requested materials, and basic administrative records associated with communication. In some cases, the company may also maintain standard business records related to timing of correspondence, fulfilment status, or issue resolution. The company does not state that it seeks sensitive health data through this website. Visitors should avoid including confidential medical details in general enquiries because the website is intended for informational material requests rather than clinical consultation.
Where a visitor contacts the company directly by email or phone, the details voluntarily shared in that communication may be stored for the purpose of responding and maintaining an orderly business record. If a visitor chooses not to provide optional information, the company may still be able to respond, although it may have less context for handling the enquiry efficiently.
How information is used
Personal data may be used to acknowledge a request, respond to questions, explain what a digital guide contains, discuss access arrangements, maintain orderly correspondence, prevent misuse, and meet lawful record keeping requirements. The company may also use information to identify which guide was requested and to make the communication more relevant. If a person has asked for information about a specific PDF title, the company may use the details supplied to present that title or a closely related option in a clearer way.
Data is not collected for the purpose of making medical assessments. The website is not presented as a medical service, and the company does not position the materials as a substitute for professional care. Business use of data is therefore tied to administration, contact, delivery discussions, and legitimate operational needs rather than healthcare decision making.
Legal basis and practical reasoning
Where data protection law requires a lawful basis, the company may rely on consent where a visitor has chosen to submit a request, legitimate interests in operating a small informational publishing business, and legal obligations where retention is required by law or for accounting purposes. In practical terms, the company needs basic contact information to answer a request, identify the relevant digital material, and keep records that show how a transaction or enquiry was handled.
The company aims to apply a proportionate approach. That means not collecting more personal data than is reasonably necessary for ordinary request handling and business administration. It also means trying to keep internal records clear, limited, and relevant to the purpose for which the information was originally supplied.
Retention
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including correspondence handling, operational follow-up, dispute management, legal compliance, and standard accounting administration. Retention periods may differ depending on whether the information relates to a simple enquiry, a request that did not proceed, or a completed access arrangement. When data is no longer required, it should be deleted, anonymised, or otherwise handled in a manner that is appropriate to the circumstances.
Because small business records often overlap with accounting and communication records, some information may need to be retained longer than the contact itself remains active. The company nevertheless seeks to avoid indefinite retention where there is no ongoing legal or legitimate business reason to keep the information.
Data sharing
The company does not describe the website as a marketplace for third-party data sharing. Information may be shared only where reasonably necessary to support ordinary business operations, such as secure hosting, professional advisers, payment administration, legal compliance, or issue resolution. Any sharing is intended to be limited and relevant to the business purpose involved. The company does not claim to sell personal data as part of its ordinary operation.
Where external service support is used for email, hosting, or administration, those providers may process information on the company's behalf in the ordinary course of technical service delivery. The company aims to work with service arrangements that are appropriate for a legitimate business website and its limited operational needs.
User rights
Depending on applicable law, individuals may have rights to request access to their personal data, request correction of inaccurate data, request deletion in certain circumstances, object to certain processing, ask for restriction, or complain to the relevant supervisory authority if they believe data has been handled improperly. These rights are not absolute and may depend on the legal basis, the purpose of the data, and the type of record involved. However, the company recognises that individuals should be able to make reasonable privacy enquiries and receive a meaningful response.
A request about personal data should be specific enough to help identify the relevant record. The company may need to verify identity before disclosing information in order to protect privacy and reduce the risk of inappropriate disclosure.
Security and responsible handling
No internet-based system can be described as perfectly secure, but the company aims to use proportionate administrative and technical measures suited to a small informational resource website. This includes taking a careful approach to correspondence, record handling, and access management. The company also encourages visitors to avoid sending unnecessary confidential information through ordinary website communication channels.
Internal access to correspondence and request information should be limited to situations where it is reasonably needed for administration, support, compliance, or business record keeping. A measured approach is important because the website is intended to function as a straightforward educational materials business rather than an intrusive data collection environment.
Contact information
Questions about this Privacy Policy, a request concerning personal data, or a general privacy-related concern may be directed to the company using the contact details shown on the website.
Company: SO SWEET FESTIVALS LIMITED
Address: LIFFORD HALL TUNNEL LANE; KINGS NORTON; BIRMINGHAM; ENGLAND B30 3JN
Email: hello@sosweetfestivals.co.uk
Phone: +44 121 496 2483
This is informational material and not medical advice or a substitute for professional help. Consult a physician before making lifestyle changes.
This policy should be read together with the general website rules and the explanatory material provided on the main page. The language of this policy is intended to be practical and transparent so that users can understand what to expect from the handling of their information.