Her Royal Highness Princess Haya Bint Al Hussein

PRIVACY POLICY

Last updated: 28 April 2026

1. Introduction

This Privacy Policy explains how personal data submitted through hrhprincesshaya.net is collected, used, stored, and protected. The website is operated on behalf of Her Royal Highness Princess Haya Bint Al Hussein.

We are committed to handling your personal information in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Data Controller

The data controller responsible for personal data collected through this website is The Office of HRH Princess Haya.

For any data protection enquiries, including requests to exercise your rights, please contact press@hrhprincesshaya.co.uk.

3. What Data We Collect

We collect personal data only when you actively submit it through the contact form on this website. The information collected is limited to: your name, your email address, and the content of the message you choose to send.

We do not use analytics services, advertising networks, profiling tools, or any form of visitor tracking. We do not collect IP addresses, device identifiers, or browsing data.

4. How We Use Your Data

The information you provide is used solely to receive and respond to your enquiry, and to maintain a record of correspondence in case follow-up is required.

We do not use your data for marketing, do not share it with third parties beyond what is strictly necessary for email delivery, and do not subject it to any automated decision-making.

5. Lawful Basis for Processing

Our lawful basis for processing your personal data is your consent, in accordance with Article 6(1)(a) of the UK GDPR. You provide this consent by ticking the consent checkbox on the contact form before submitting your message.

You may withdraw your consent at any time by contacting us at press@hrhprincesshaya.co.uk. Withdrawing consent will not affect the lawfulness of any processing that took place before the withdrawal.

6. Third-Party Processors

We use Resend (resend.com) as a data processor to deliver contact form submissions to our inbox. Resend acts only on our instructions and processes your data in accordance with applicable data protection law and its own privacy commitments.

The website itself is hosted on Vercel infrastructure. No personal data is stored on the website server beyond the brief period required to forward a contact form submission to our inbox.

7. Cookies

This website uses a single, strictly functional cookie. The cookie is named NEXT_LOCALE and is used solely to remember your preferred language (English or Arabic) so that the site loads in the correct language on subsequent visits.

The NEXT_LOCALE cookie has a lifespan of twelve months and contains no personal information beyond your language preference. We do not use any tracking, analytics, advertising, or third-party cookies.

8. Data Retention

We retain contact form submissions only for as long as is necessary to address your enquiry and any related follow-up correspondence. Once the matter is concluded, your message and personal details are deleted from our systems.

We do not retain personal data indefinitely or for any purpose beyond the original enquiry.

9. Your Rights

Under the UK General Data Protection Regulation, you have the right to: request a copy of the personal data we hold about you; ask us to correct any inaccurate information; ask us to delete your data; withdraw your consent at any time; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please email press@hrhprincesshaya.co.uk. We will respond within one calendar month of receiving your request.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. The website is delivered exclusively over HTTPS, ensuring that all data transmitted between your browser and our servers is encrypted in transit.

While we take security seriously, no method of electronic transmission or storage is one hundred per cent secure. We cannot guarantee absolute security but we will notify you and the relevant authorities promptly in the event of a data breach affecting your personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date shown at the top of this page indicates when it was last revised.

We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact

For any questions about this Privacy Policy or how we handle your personal data, please contact us at press@hrhprincesshaya.co.uk.