Trust, Privacy & Security

Accounts are protected by email/password sign-in and Google sign-in. Sessions are managed by our authentication provider and stored in your browser; signing out clears the local session.

Admin tooling (such as supplier, inspiration, and case-study management) is gated to specific staff accounts via a server-side role check — a signed-in customer cannot reach those pages or APIs.

The application is hosted on Lovable Cloud. Network traffic to the app is served over HTTPS. Database access is mediated by row-level access rules, so each customer can only read and write their own projects, bookings, payments, and messages.

Lovable Cloud provides the underlying infrastructure (database, storage, edge runtime and auth). The features described here are configured by Holla Design — this page is not a Lovable-issued certification.

We store the information you give us to deliver the service: account profile (name, email, avatar), project details (room photos, briefs, style choices, generated design directions and shopping lists), bookings, designer conversations, and payment records from our payment provider.

Room photos you upload are kept in a private storage bucket and are not publicly listable. Generated design renders are stored so you can return to them inside your project. We do not sell your personal data.

We rely on a small set of trusted providers to run the service: Lovable Cloud (hosting, database, storage, auth), Stripe (payments), Resend (transactional email), and AI providers used to generate design directions and product suggestions. They only process the data needed for their part of the service.

You can update your profile from the Settings page. If you would like a copy of your data, want an account or project deleted, or need to report a security concern, email us and we will respond as quickly as we can.

Contact: info@holladesign.co.uk