
PRIVACY POLICY
Last updated: 8 May 2026
1. Introduction
This Privacy Policy explains how personal data submitted through princesshaya.net is collected, used, stored, and protected. The website is operated on behalf of Her Royal Highness Princess Haya Bint Al Hussein (“HRH Princess Haya”).
We are committed to handling your personal information in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003.
2. Data Controller
The data controller responsible for personal data collected through this website is The Office of HRH Princess Haya.
For any data protection enquiries, including requests to exercise your rights, please contact press@hrhprincesshaya.co.uk, or you may write to us at 2nd Floor, One The Esplanade, St Helier, Jersey JE2 3QA.
3. What Data We Collect
We collect personal data only when you actively submit it through the contact form on this website. The information collected is limited to: your name, your email address, and the content of the message you choose to send.
We do not use analytics services, advertising networks, profiling tools, or any form of visitor tracking. We do not collect IP addresses, device identifiers, or browsing data.
4. How We Use Your Data
The information you provide is used solely to receive and respond to your enquiry, and to maintain a record of correspondence in case follow-up is required.
We do not use your data for marketing, do not share it with third parties beyond what is strictly necessary for email delivery, and do not subject it to any automated decision-making.
5. Lawful Basis for Processing
Our processing of your personal data as described above is necessary for our legitimate interests. Article 6(1)(f) of the UK GDPR says that we may process your personal data where it “is necessary for the purposes of the legitimate interests pursued by [us] or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of [you] which require protection of personal data”.
It is necessary for us to process your personal data (submitted via the contact form on this website) in order to consider and respond to your enquiry. In so doing, we do not carry out any processing activities in respect of your personal data that would prejudice you. You have the right to object to us processing your personal data on this basis, in which case please contact press@hrhprincesshaya.co.uk. If you do object, then we must act on your objection by ceasing the activity in question unless we can show that we have compelling legitimate grounds for processing which overrides your interests or we are processing your personal data for the establishment, exercise or defence of a legal claim. Note that if you object to our processing your personal data on the basis of our legitimate interests, and we are obliged as a result to cease such processing, then we will not be able to consider and respond to any enquiry submitted by you via the contact form on the website.
6. Third-Party Processors
We use Resend (resend.com) as a data processor to deliver contact form submissions to our inbox. Resend acts only on our instructions and processes your data in accordance with applicable data protection law and its own privacy commitments.
The website itself is hosted on Vercel infrastructure. No personal data is stored on the website server beyond the brief period required to forward a contact form submission to our inbox.
7. Cookies
This website uses a single, strictly functional cookie. The cookie is named NEXT_LOCALE and is used solely to remember your preferred language (English or Arabic) so that the site loads in the correct language on subsequent visits.
The NEXT_LOCALE cookie has a lifespan of twelve months and contains no personal information beyond your language preference. We do not use any tracking, analytics, advertising, or third-party cookies.
8. Data Retention
We retain contact form submissions only for as long as is necessary to address your enquiry and any related follow-up correspondence. Once the matter is concluded, your message and personal details are deleted from our systems.
9. Your Rights
Under the UK General Data Protection Regulation, you have the right to: request a copy of the personal data we hold about you; ask us to correct any inaccurate information; ask us to delete your data; withdraw your consent at any time; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, please email press@hrhprincesshaya.co.uk. We will respond within one calendar month of receiving your request.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. The website is delivered exclusively over HTTPS, ensuring that all data transmitted between your browser and our servers is encrypted in transit.
While we take security seriously, no method of electronic transmission or storage is one hundred per cent secure. We cannot guarantee absolute security but we will notify you and the relevant authorities promptly in the event of a data breach affecting your personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date shown at the top of this page indicates when it was last revised.
We encourage you to review this page periodically to stay informed about how we protect your information.
12. Contact
For any questions about this Privacy Policy or how we handle your personal data, please contact us at press@hrhprincesshaya.co.uk, or you may write to us at 2nd Floor, One The Esplanade, St Helier, Jersey JE2 3QA.