Privacy Policy

Hatched is the data controller for the personal data described in this policy. You can reach us at Katie@planhatched.co.uk.

• Account data: your email address and, if you sign in with Google, the basic profile details Google shares (name, email, profile picture).
• Plan data: everything you enter into the Hatched builder — the hen's name, dates, destination, group size, budget, vibe, activities, accommodation, transport and any notes or special requirements.
• Messages: messages you or your organiser send us inside a plan, and proposal approvals.
• Technical data: limited log and security data (such as IP address and browser information) generated when you use the site.

Please only enter details about other people in your group (for example the hen) where you are comfortable doing so, and avoid including special category data such as health information unless it is genuinely needed to plan the trip.

• To provide your account and plans — performance of a contract with you.
• To plan and quote your hen do, and to communicate with you and your organiser — performance of a contract, or our legitimate interests in responding to enquiries.
• To send service emails (account confirmation, password resets, plan updates and alerts) — performance of a contract and our legitimate interests in running the service. We do not send marketing emails from this site.
• To keep the site secure and prevent misuse — our legitimate interests, and compliance with legal obligations.
• To meet accounting and legal duties — compliance with a legal obligation.

We use only strictly necessary cookies and local browser storage to keep you signed in and to keep the site secure. These do not require consent under the Privacy and Electronic Communications Regulations. We do not use advertising or tracking cookies.

We share personal data only with service providers who process it on our instructions: our hosting, database and authentication provider, our email delivery provider, and Google where you choose to sign in with a Google account. We may also disclose data where required by law. We never sell your personal data.

If you create a share link for a plan, anyone with that link can view the plan brief and itinerary. You can ask us to revoke a share link at any time.

Some of our providers may process data outside the UK. Where that happens, we rely on UK adequacy regulations or on the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards.

We keep account and plan data while your account is active and for up to 24 months after your last activity, then delete or anonymise it. Records needed for tax and accounting are kept for six years. You can ask us to delete your account and plans sooner.

Under UK data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing, including processing based on legitimate interests;
• data portability; and
• withdraw consent at any time where we rely on consent.

To exercise any of these rights, email Katie@planhatched.co.uk. We will respond within one month.

Data is stored on secured, access-controlled infrastructure, encrypted in transit, and protected by row-level security so that you can only see your own plans. Access by our team is limited to what is needed to plan your trip.

This service is intended for people aged 18 and over. We do not knowingly collect data from children.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The date at the top shows when it was last revised.