Privacy.

Who is responsible

Paul Lonsdale, trading as Christmas Made Lovely, is responsible for this waiting list. Email hello@christmasmadelovely.com for questions or privacy requests.

Postal correspondence: Paul Lonsdale, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom.

What we collect

The simplified signup collects your email address. We record when you join, the wording you saw, your request for one 2026 readiness email, any unsubscribe and any introductory offer you earn. Joining does not verify ownership of your email address.

Earlier signups may also include a country and optional first name, and keep their original confirmation record. We do not infer a country for new signups. Basic technical information is used to protect the form and limit repeated requests. We do not use it to find your location.

Your browser’s language settings suggest A4 or US Letter for the checklist. You can change the paper size before joining. We keep that choice with the queued welcome email, without recording an inferred country.

Why we use it

We rely on legitimate interests to answer your request with one email when Christmas Made Lovely 2026 is ready. We also rely on legitimate interests to send your welcome email with its checklist attachment, recover a checklist on request, honour earlier confirmation requests, protect the form, handle delivery problems and honour an introductory offer you have earned. This helps us give you what you asked for and keep the waiting list secure. We do not use your request for planning-tip emails, later seasons or other products.

We use the minimum information needed to honour a marketing objection and answer privacy-rights requests under our legal obligations. We may keep limited delivery evidence under legitimate interests to prevent duplicate sends. We do not use those records to send marketing.

Who handles it

Microsoft Azure hosts the waiting list and Microsoft 365 sends its emails for us. Our application and database use Azure resources in UK South. Microsoft and its service providers may also process information outside the UK. Microsoft's data-protection terms describe its safeguards for international transfers. Email us if you would like details of the safeguards that apply to your information. We do not sell your details or use advertising trackers.

How long we keep it

Earlier signups still awaiting email confirmation become due for deletion after 30 days. When an earlier request is activated after removing the confirmation requirement, we record the original request and activation without marking the email verified. Contact details for active waiting-list members, including these activated requests, simplified signups and confirmed earlier signups, become due after 31 March 2027. We aim to delete due records promptly. A service outage, unresolved complaint or an email delivery still being resolved may delay deletion; we review those exceptions.

We keep a restricted, matchable objection record only while a 2026 readiness email could still be sent, or during a specific complaint and for three months after its resolution. Limited delivery reservations prevent duplicate welcome or readiness emails even if a contact record is removed. They and other choice evidence are reviewed for deletion 12 months after the 2026 programme closes. If you earned an introductory offer, a keyed record of that offer can remain after your contact details are deleted while the offer is valid. Later audit entries are reviewed 12 months after they are recorded. We do not use those retained records to send marketing. Database backups, sent email and limited operational records may remain longer for recovery, delivery problems, complaints or legal requests. Customer and transaction records follow a separate policy.

Your rights

You can ask for a copy of your personal information, ask us to correct or delete it, restrict its use, or object to its use. Email hello@christmasmadelovely.com. You can also complain to the Information Commissioner’s Office.

Cookies and secure links

We use necessary security cookies to protect forms and operator access. We do not use advertising or analytics cookies. Earlier confirmation and personal download links, recovery links and unsubscribe links are personal to you, so please do not share them. The generic checklist contains no subscriber information and can be shared.

Last updated 17 October 2026