House of Opula Ltd

General privacy notice

For all clients across all brand pillars

Effective April 2026 · Version 1.1

Are you an advisory professional using Opula Client DNA or Predictive Risk Management? Your privacy notice is at houseofopula.com/privacy/advisors.

Not a client - but your data may have been researched?

If someone has used an Opula intelligence system to research your publicly available information, you have specific rights. Visit the link below to understand what was collected, how it was used, and how to request access or deletion.

Data & research privacy notice: houseofopula.com/data-subject-privacy

01

Who we are

House of Opula Ltd is a company registered in the United States. We operate a portfolio of luxury brands and experiences - Opula Systems, Opula Invites, Opula Gifting, Opula Atelier, and Opula Events - each operating independently under the House of Opula umbrella.

For all privacy matters, contact us at: privacy@houseofopula.com

02

Scope of this notice

This notice applies to all individuals who engage directly with House of Opula or any of its brand pillars - as clients, prospective clients, event guests, or enquiry contacts.

If you are an advisory professional using Opula Client DNA or Predictive Risk Management, a separate privacy notice governs your account and the data we hold about you as a user of those systems. It is available at houseofopula.com/privacy/advisors alongside this notice.

03

What we collect and why

Contact and identity information

Your name, email address, telephone number, and postal address. Collected when you make an enquiry, enter into a client relationship, or attend an event we manage. Used to deliver our services and communicate with you.

Event and service information

Details of the events, experiences, or services you engage with us for - including preferences, briefs, guest lists, and logistical requirements. Used to design and deliver your experience.

Correspondence

Emails, messages, and notes exchanged during our working relationship. Retained to maintain continuity of service and resolve any disputes.

Payment information

Billing details processed via our payment provider. We do not store card details directly. Used to process payments and maintain financial records as required by law.

Intelligence-assisted insight (where applicable)

Where you are an existing client of House of Opula, we may use our proprietary intelligence systems to better understand your preferences, professional context, and interests - solely to serve you more effectively. All data used is drawn from publicly available sources. You may request details of this processing at any time by contacting privacy@houseofopula.com.

04

Our lawful basis

We process your personal data on the basis of contract performance - to deliver the services you have engaged us for - and legitimate interests in operating, improving, and communicating about those services. Where we use intelligence tools to build a deeper understanding of your preferences, we do so on the basis of legitimate interests, with appropriate safeguards in place.

05

Who we share your data with

We do not sell your personal data. We share it only where necessary to deliver your experience - with trusted suppliers, venue partners, logistics providers, and technology systems that support our operations. All third parties are bound by appropriate data protection obligations.

We do not share your data across advisory accounts or with unrelated third parties for marketing purposes.

06

How long we keep your data

Client and event data is retained for the duration of our relationship and for five years following its conclusion. Payment and billing records are retained for seven years as required by law. Correspondence is retained for three years. Where intelligence profiles are used, data is retained only for the duration of the active client relationship and deleted permanently on request.

07

Your rights

You have the right to access, correct, or request deletion of personal data we hold about you. You may also object to certain types of processing, including profiling. To exercise any of these rights, contact privacy@houseofopula.com. We will respond within 30 days.

Deletion requests are actioned permanently. No residual data remains following a confirmed deletion.

08

Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Sensitive data held within our intelligence systems is encrypted and access-controlled.

09

Changes to this notice

Material changes to this notice will be communicated by email to active clients and posted at houseofopula.com/privacy with an updated effective date.

House of Opula Ltd · April 2026 · Review annually or when material changes occur · General Privacy Notice · v1.1