We are Lottie. We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect will be processed by us. Please read this privacy policy carefully to understand our views and practices and your rights regarding your personal data. By visiting our website (our site) or by otherwise providing us with your personal information, it will be processed as described in this policy and as required by the Data Protection Act 2018 and UK GDPR (Data Protection legislation).

What information do we collect from you?

When we talk about personal data or information, we mean any information which we know relates to an identifiable person.

We will collect and process the following data about you:

With regard to your use of our site we will automatically collect the following information to help us understand our users and improve our service:

Why do we collect this information?

We process your personal information for the following reasons:

We will carry out analytics to improve our products and services as set out above.

You have the right to object to processing carried out for our legitimate interests. See the What are your rights? section below for more information.

How long do we keep hold of your information?

We only retain your personal data for as long as we need it or are required to keep it for legal reasons. If we no longer need your data, we will delete it. We treat data differently depending on what it’s used for, but generally it will not be retained any longer than 6 years after you last use our service.  As outlined below, you can also ask us to delete your personal data. 

Who might we share your information with?

We may need to share your personal data with third parties, some of whom we appoint to provide services, including:

These third parties are contractually required to only access personal data for the specific and limited purposes for which they are engaged and are subject to confidential undertakings. 

Additionally, we will disclose your personal information to the relevant third party:

How is your data stored and kept secure? 

We take your safety and security very seriously and we are committed to protecting your personal and health information. All information kept by us is encrypted and stored on our secure servers. We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us. 

Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. 

International Transfers

We store your data on secure servers located in the UK/ European Economic Area, where there are appropriate protection measures in place. 

We protect your data by using the approved model contractual clauses with our providers outside the United Kingdom if there is no adequacy decision in place. 

What are your rights?

Where processing of your personal data is based on consent, you can withdraw that consent at any time.

You have the certain rights under the Data Protection legislation when we are acting as a data controller in respect of your personal data.  You can exercise these rights at any time by contacting us at [insert email address]. You have the right:

Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, then please contact us. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/. We ask that you raise any concerns with us first so that we can seek to resolve any issues you may have.


Our site uses cookies as set out in our cookie policy.

Changes to our privacy policy

This policy may be updated from time to time. Please check back frequently to see any updates or changes to our privacy policy.

Contact us

Questions, comments and requests regarding this privacy policy are welcomed and should be emailed to hello@lottie.org or submitted through our website contact page.

For the purpose of data protection legislation, the data controller is Lottie Organisation Ltd, a registered company in England and Wales (Company No: 13084956). Address: 67 – 69 Great Portland Street, London W1W 5PE.  

Business information 

This section is for professional contacts only and does not apply to our site users. 

If you contact us, provide us with a business card or otherwise provide us with your contact details in a professional capacity then we will process your personal information for the purposes of pursuing a potential or actual business relationship with you. We will normally record your name, professional contact details, job and employer information. We may use this information to send you correspondence updating you on our site and services or offering business opportunities appropriate to your role. We do this in our legitimate interests to promote and grow our business