Privacy Policy

I value your privacy, and I aim to keep things transparent and respectful.

Contact details

I am committed to protecting your personal data. If anything is unclear, or you’d like to discuss how your data is handled, please contact me at louise@louiseduckling.com.

The purpose of this privacy policy

This policy notice will explain the personal information I collect about you, how I use it, and how your data is protected. It also outlines your legal rights relating to your personal data.

The personal information I collect

I may collect the following information about you:

Identity data: Your first and last name;
Contact data: your contact details, postal address including billing and delivery addresses, telephone numbers, and email addresses;
Financial data: your payment details - should you engage my services;
Your web browsing activities on my website (but you can choose to opt out by rejecting cookies);
Your communication and marketing preferences;
Your interests, preferences, feedback and survey responses;
Your corresondence and communication with me;
Publicly available personal data including information shared on social media platforms such as personal websites, Twitter, Instagram, and Facebook.

I will not collect any sensitive data about you.

Most of the data is collected directly from you, i.e. volunteered by you when registering for information or buying services from me.

How I use your data

I may collect or use your personal data for the following purposes:

providing my products and services to you;
improving and personalising my products and services to you;
the operation of client or customer accounts;
internal record keeping;
promotional and marketing activities, with your agreement (to contact you about relevant offers, products, and events which I think may interest you, and informing you of any changes to my website, services, and products);
client insight and market research purposes, to help me better understand your needs;
dealing with queries, complaints or claims.

Marketing

I may use your personal data for electronic marketing purposes and for providing updates on products and services which may be of interest to you. You have the right to opt out of receiving promotional communications at any time by:

Clicking the “unsubscribe” link at the bottom of emails;
Contacting me directly via the contact details provided at the top of this policy.

Lawful bases and data protection rights

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website.

Which lawful basis I rely on may affect your data protection rights which are set out in brief below.

Your right of access - You have the right to ask me for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete.
Your right to erasure - You have the right to ask me to delete your personal information.
Your right to restriction of processing - You have the right to ask me to limit how I can use your personal information.
Your right to object to processing - You have the right to object to the processing of your personal data.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you.
Your right to withdraw consent – When I use consent as my lawful basis you have the right to withdraw your consent at any time.

If you make a request, I must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy policy.

My lawful bases for the collection and use of your data

I am required to set out the legal basis for my processing of your personal data.

I collect and use your personal data as it is necessary:

to pursue my legitimate interests;
for the purposes of complying with my duties and exercising my rights under a contract for the sale of services to a client;
to comply with my legal obligations; or
where you have consented to the use.

You have the right to withdraw your consent at any time. Where consent is the only legal basis for processing, I will cease to process data after consent is withdrawn.

Where I get personal information from

I will only store your personal information if you have signed up for a service (e.g. booked projects) or have given consent (e.g. signed up for my newsletter)

How I protect your data

I am committed to keeping your personal data safe and secure. I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

Strong passwords;
Anti-virus software;
Access to personal data is limited to only those people who have a business need to know.

I will strive to protect your data in all means reasonably required by me to do so. However, no internet site can be 100% secure and so I cannot be held responsible for unauthorised or unintended access that is beyond my control. I have appropriate measures in place to deal with any personal data breaches and will notify you and any applicable regulator of a breach where I am legally required to do so.

How you can help me protect your data

I will never ask you to confirm any bank account or credit details via email. If you receive an email claiming to be from me asking you to do the same, please ignore it and do not respond.

How long I keep your information

I will only retain your data for as long as necessary for the purpose I collected it for. The longest I will normally hold any personal data is 7 years.

If you no longer wish for me to hold your information, you can contact me using the contact details at the top of this privacy policy. However, please note I have a legal requirement to keep some of your personal data even after you have asked me to delete it to ensure I can meet my legal or regulatory requirements, resolve disputes, prevent fraud, or enforce my contract with you.

It is important that the personal data I hold about you is accurate and current. Please keep me informed if your personal data changes during your relationship with me.

Who I share information with

To make certain services available to you, I may need to share your personal data with third parties. These include delivery and marketing service providers. I will never sell or rent your data to other organisations.

Your information may be stored on some or all of the following platforms:

Mailerlite (for newsletters), Gmail or Outlook (for email correspondence), Dropbox (for file storage), Google Drive (for documents), and Pandle + Stripe (for invoices and payments)
Government bodies, regulators, law enforcement agencies, courts/tribunals, and insurers where I am required to do so.

My website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. I do not control these third-party websites, and I am not responsible for their privacy arrangements. When you leave my website, I encourage you to read the privacy policy or notice of every website you visit.

Cookies

I use cookies on my website, but you can disable these when you enter my site using the pop-up controls provided. You can also set your browser to refuse or block all or some of these cookies. Please note that if you disable or refuse cookies, some parts of my website may become inaccessible or not function properly.

How to complain

If you have any concerns about my use of your personal data, please get in touch with me using the contact details at the top of this privacy notice. If you remain unhappy with how I’ve used your data after raising a complaint with me, you can also complain to the ICO. Website: https://www.ico.org.uk/make-a-complaint