Happy Barnet Privacy Policy v2.0
Happy Barnet, byBarnet and The Secret Book Swap customer privacy notice
Happy Barnet, byBarnet and The Secret Book Swap are trading names of Laura Barnet, a sole trader based in the UK.
You can contact us about any privacy-related matters at hello@happybarnet.com. A postal address is available on request for data-protection correspondence.
This privacy notice tells you what to expect us to do with your personal information.
Automated Decisions
Children’s Data
What information we collect, use, and why
We collect or use the following information to provide services and goods, including delivery:
Names and contact details
Addresses
Purchase or account history
Payment details (including card or bank information for transfers and direct debits)
Account information
Records of meetings and decisions
Information relating to compliments or complaints
We collect or use the following information for service updates or marketing purposes:
Names and contact details
Marketing preferences
Location data (preferred venue for Secret Book Swap)
Recorded images, such as photos or videos
Purchase or viewing history
Website and app user journey information
We collect or use the following personal information for dealing with queries, complaints or claims:
Names and contact details
Address
Payment details
Purchase or service history
Financial transaction information
Correspondence
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide services and goods are:
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
byBarnet
We collect and use personal information such as your name, contact details, order information, payment confirmations, and correspondence so that we can create, personalise, and deliver handcrafted goods you have purchased or enquired about. This processing is necessary to manage orders, respond to enquiries, provide aftercare, and maintain records for customer service and legal purposes.
Benefit vs risk: Customers reasonably expect us to use their information to process and deliver their orders and to communicate about their purchases. We only collect the information needed to do this and store it securely, so any potential impact on privacy is minimal and proportionate.
Happy Barnet
We process client contact details, business information, project documentation, creative materials (such as photographs, videos, and written content), and correspondence to provide marketing, systems, and operational support services. This may include developing websites, managing marketing content, creating promotional materials, and providing strategic advice. Where required to deliver these services, we may be given access to client accounts (for example, social media, website hosting, or Google Business listings) in order to create or update content as agreed.
Benefit vs risk: Processing this information allows us to provide the professional services our clients have requested, ensuring accuracy, efficiency, and a consistent brand presence. We only access or use materials and account details for the purpose of fulfilling agreed work, store them securely, and do not retain credentials longer than necessary. The data we process is limited to what is essential for providing the service, and we ensure that all information and assets are handled confidentially and with respect for privacy and data protection expectations.
The Secret Book Swap (attendees)
We collect participant names, contact details, ticket purchase and payment details, and correspondence to organise and manage community book swap events. This includes managing bookings, communicating about events, and providing a safe and enjoyable experience for attendees.
Benefit vs risk: Participants expect their information to be used to confirm bookings, manage attendance, and facilitate event communications. Collecting limited data for these purposes enables smooth event organisation while respecting privacy and choice.
The Secret Book Swap (guest writers)
We may collect and use information such as your name, professional biography, contact details, correspondence, and publicly available materials (such as photos, website links, or social media profiles).This information is used to invite you to take part in events, coordinate your attendance, and promote your appearance to attendees.
If you agree to participate, we may also use photographs taken during the event, short biographies, and links to your books or websites in our event listings, social media posts, or follow-up blogs.
Benefit vs risk: This processing supports the smooth organisation and publicity of our events, benefiting both our community and the guest authors by helping promote your work to an interested audience. We only use professional and relevant information, ensure all materials are handled respectfully, and provide clear options to review or withdraw promotional content if you wish.
Across all three, we have a legitimate interest in maintaining correspondence with our customers, clients, and event participants, and in communicating about similar products, services, or events that may be of interest. We always provide a clear and simple way to opt out of such communications. We carefully balance our business needs with your rights and expectations by collecting only the information necessary to provide our goods and services, using it responsibly, and keeping it secure. We do not use personal information in ways you would not reasonably expect.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
byBarnet
We may use your contact details to send occasional updates about new handcrafted products, seasonal collections, or similar items you may enjoy, based on previous purchases or enquiries. We may also use photographs of finished products and, with permission, customer images or testimonials for marketing purposes (for example, on our website or social media).
Benefit vs risk: Customers expect to hear from us about similar products or creative updates. We limit communications to relevant content, provide clear opt-out options, and only use imagery in a respectful and transparent way to protect your privacy and preferences.
Happy Barnet
We use business contact details and correspondence history to provide updates, insights, and marketing tips relevant to our clients and partners. We may also use photographs or visual examples of completed work or satisfied clients (with appropriate consent where individuals are identifiable) to demonstrate the quality of our services.
Benefit vs risk: Sharing practical information and examples helps small businesses succeed and builds trust in our expertise. We ensure marketing remains proportionate, professional, and never intrusive. Individuals can unsubscribe or withdraw consent for photo use at any time.
The Secret Book Swap (attendees)
We use participant details to share event updates, ticket information, and future event invitations. We may also capture and share photographs or short videos from events to promote future gatherings and celebrate community involvement. Where individuals are clearly identifiable, we will obtain consent or provide clear opportunities to opt out of being photographed or featured.
Benefit vs risk: Promoting our events helps sustain a vibrant community and enables more people to enjoy them. We take care to respect attendees’ comfort and privacy, limiting use of identifiable images and ensuring all communications are relevant and unobtrusive.
The Secret Book Swap (guest writers)
We process guest author information for our legitimate interests in promoting The Secret Book Swap events and showcasing participating authors. This may include sharing your name, bio, and photos in event marketing, on our website, or in social media posts before and after the event. We may also include mentions or links to your professional pages, books, or other work in blog posts and newsletters that celebrate the event.
Benefit vs risk: This use of information provides visibility for our guest authors and helps attract readers and attendees, which supports both the event and your own promotional goals. We limit the information used to what is relevant for publicity, seek your approval for images or personal details where appropriate, and avoid using any content in ways that might cause unfair impact or surprise.
Across all three ventures, we have a legitimate interest in communicating with people who have purchased from us, attended our events, or worked with us in a professional capacity. These communications allow us to maintain relationships, provide service updates, and share relevant opportunities. We always balance our marketing activities against your privacy rights, ensuring communications are proportionate, respectful, and easy to opt out of at any time.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
byBarnet
We use this information to answer product questions, resolve delivery or order issues, handle refund or return requests, and ensure the quality of our handcrafted goods and customer service.
Benefit vs risk: Customers reasonably expect us to use their information to respond to enquiries and resolve problems. The impact on privacy is minimal, and the benefit of clear and fair issue resolution outweighs any potential risk.
Happy Barnet
We process client correspondence, project information, and relevant documentation to handle service-related queries, concerns about project delivery, or disputes. This may also include maintaining records needed to protect our legal rights or respond to claims.
Benefit vs risk: This ensures professional accountability and enables us to provide transparent, reliable support to our clients. We only retain information that is necessary for the issue at hand, and all communications are stored securely.
The Secret Book Swap (attendees)
We use contact and booking information to manage participant questions, ticketing issues, event feedback, or any complaints that arise.
Benefit vs risk: Responding to participants’ concerns helps us maintain safe, enjoyable events and trust within the community. The personal information used is limited to what is required for communication and issue resolution.
The Secret Book Swap (guest writers)
We may retain guest author contact details, correspondence, and event-related information as necessary to handle queries, feedback, or issues arising before or after participation in The Secret Book Swap. This allows us to resolve questions, address any concerns about promotional use or event logistics, and maintain accurate records of communication.
Benefit vs risk: Keeping this information ensures clarity and accountability for both parties. It supports fair handling of any issues and helps maintain positive professional relationships. The personal information used is limited to what is necessary for communication and resolution, and is stored securely and retained only as long as needed.
Across all three ventures, this processing enables us to manage relationships responsibly, improve our services, and protect both you and us from potential misunderstandings or legal issues. We keep such information only for as long as necessary to resolve the matter and ensure it is handled sensitively, securely, and fairly.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Where we get personal information from
Directly from you
Publicly available sources (guest writers at The Secret Book Swap only)
Automated Decisions
We do not make any automated decisions, or use profiling, that would have a legal or similarly significant effect on you.
Children’s data
We do not intentionally target or provide services directly to children. However, individuals under 18 may occasionally purchase products from byBarnet. Where this happens, we only collect the minimum personal information required to process and deliver the order.
We do not knowingly collect or store personal information about children for marketing or profiling purposes, and we do not offer services designed for minors through Happy Barnet or The Secret Book Swap. If we become aware that we have collected personal information from someone under 18 beyond what is necessary to provide a requested product or service, we will delete it promptly.
How long we keep information
For information on how long we keep personal information, see our retention schedule below:
| Category of personal data | Purpose of processing | Typical source / system | Retention period | Reason / lawful basis |
|---|---|---|---|---|
| Customer / client contact details, orders, and transaction records | To fulfil purchases or contracts, manage delivery, returns, or payments | Website (happybarnet.com), Etsy, Eventbrite | 6 years from date of transaction | Required for accounting and tax purposes (legal obligation); legitimate interest in record-keeping and dispute resolution |
| Event participant details | To manage attendance, ticketing, and communications | Website, Eventbrite | 2 years after event | Necessary for event management, post-event queries, and repeat event invitations |
| Guest author details, bios, and correspondence | To coordinate and promote event participation and maintain professional contact | Direct outreach, email, social media, data subject publicly listed information | 2 years after the most recent event involvement (unless consent given to retain longer for future collaboration) | Legitimate interest in event organisation and promotion; reasonable professional expectation |
| Photographs and marketing materials | To promote products, services, or events online or in print | Created or supplied by data subject, or at in person events | Until consent withdrawn or maximum 5 years after capture | Legitimate interest in marketing; consent (where identifiable individuals are featured) |
| Newsletter mailing list data | To send updates, news, and marketing communications | Website or in person signup | Until user unsubscribes or email bounces | Consent or legitimate interest (soft opt-in for existing customers) |
| Correspondence (emails, messages, DMs, WhatsApp, texts) | To respond to queries, provide customer service, or maintain project communication | Email, social media, WhatsApp, SMS | 2 years after last contact (unless legally required to retain longer) | Legitimate interest in customer support and record-keeping |
| Client project files and creative materials (Happy Barnet) | To deliver marketing, web, or design services | Provided by client (documents, images, videos, credentials) | 2 years after project completion | Legitimate interest in service delivery and reference for follow-up work; deleted sooner on client request |
| Account credentials (social media, Google Business, etc.) | Temporary access to manage accounts for clients | Provided by client | Deleted immediately after project completion | Legitimate interest in service provision; data minimisation and security obligation |
| Supplier and business contact information | To manage professional relationships and transactions | Direct contact, website, invoices | 6 years after last transaction | Legal and contractual obligations |
| Financial and invoicing records | To comply with HMRC and accounting requirements | Accounting system, invoices, payment processor | 6 years from end of financial year | Legal obligation (Companies Act, HMRC) |
| Complaint or claim records | To handle or defend legal claims | Internal correspondence and supporting documents | 6 years after resolution | Legitimate interest in defending legal rights; limitation period for civil claims |
Who we share information with
Publicly on our website, social media or other marketing and information media (Guest writers at The Secret Book Swap and clients of Happy Barnet only)
Sharing information outside the UK
Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.
Organisation name: Squarespace, Inc.
Category of recipient: Website hosting\/ecommerce platform (storage & processing provider)
Country the personal information is sent to: United States (and possibly other jurisdictions)
How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)
Organisation name: Etsy Ireland UC \/ Etsy, Inc.
Category of recipient: E-commerce marketplace platform (transaction & storage)
Country the personal information is sent to: United States, and other non-EEA jurisdictions
How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)
Organisation name: Eventbrite, Inc.
Category of recipient: Event ticketing\/registration platform (storage & processing)
Country the personal information is sent to: United States (and possibly other jurisdictions)
How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)
Organisation name: Google LLC
Category of recipient: Email, document storage, and cloud services provider
Country the personal information is sent to: United States (and other countries where Google maintains secure data centres)
How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (UK-US Data Bridge / Data Privacy Framework)
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: October 2025