Privacy Policy
Last updated: 26 September 2026
This website is operated by an individual based in the UK. Personal data is handled in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What data is collected
Only the following data may be collected:
Anonymous analytics data
Anonymous analytics cookies are used to understand how the site is used (for example, page views and traffic sources).
IP addresses are anonymised, and no data is collected unless consent is given via the cookie banner.
Email correspondence
If contact is made by email, the email address, name, and message content will be stored in the email inbox for the purpose of responding and ongoing communication.
No contact forms, accounts, or user profiles are used on this website.
Client and professional contact data
Where a business or professional relationship exists, contact and business details may be stored in a structured CRM system for relationship management, project delivery, and invoicing.
2. How data is used
Personal data is used only for:
- Understanding general website usage (analytics, with consent)
- Responding to enquiries
- Communicating with clients and maintaining professional relationships
- Invoicing and basic business administration for active or former clients
Data is not used for marketing lists, profiling, or automated decision-making.
3. Client & Contact data
For working clients, former clients, and professional contacts, business and contact information may be stored, including:
- Name
- Business name
- Email address
- Phone number
- Business address
This information is maintained in a structured CRM system used to manage client relationships, projects, invoicing, and professional networking. Client information is stored using tools such as Notion, Google Workspace, and Microsoft OneDrive, which act as GDPR-compliant data processors. Personal data is pseudonymised where possible and reviewed periodically, with deletion or anonymisation carried out once it is no longer required.
Project files are stored locally on encrypted hard drives and backed up to encrypted external drives. Finished projects are archived separately using encrypted storage.
4. Legal basis for processing
Data is processed on the following lawful bases:
- Consent — for analytics cookies
- Legitimate interests — to respond to enquiries, communicate with clients, and maintain professional relationships and
networking contacts
networking contacts
- Legal obligation — for invoicing and financial record-keeping where required
5. Data sharing
Personal data is not sold or shared with third parties.
Where third-party services are used to support business operations (such as analytics, cloud storage, or documentation tools), they are used solely for that purpose and are selected for GDPR compliance. These services act only as data processors and do not use the data for their own purposes.
6. Data retention
- Analytics data is retained in aggregated, anonymous form.
- Email correspondence and project records are retained for as long as they serve a legitimate business purpose, such
as ongoing client relationships, portfolio use, or reference for future work.
as ongoing client relationships, portfolio use, or reference for future work.
- Invoicing, income, and expense records are retained for a minimum of 6 years in line with HMRC requirements, and may
be retained longer to support ongoing business administration and performance tracking.
be retained longer to support ongoing business administration and performance tracking.
- Contact data for individuals with no ongoing or likely future business relationship is reviewed periodically and may be
deleted or anonymised where retention is no longer justified.
deleted or anonymised where retention is no longer justified.
7. Your rights
Under UK GDPR, the following rights apply:
- The right to access personal data
- The right to request correction or deletion
- The right to withdraw consent (for analytics cookies)
- The right to object to or restrict processing in certain circumstances
Requests can be made by email.
8. Contact details
For privacy-related queries or data requests, contact can be made via email at:
