Privacy Policy for SarahCressall.com
Effective Date: 01/09/25
SarahCressall.com (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or interact with us.
1. Information We Collect
We may collect and process the following personal information:
-
Contact Information – such as your name, email address, phone number, and postal address (when provided through forms, sign-ups, or event registrations).
-
Professional Information – such as your role, organisation, and industry, if shared when connecting.
-
Technical Data – including IP address, browser type, device identifiers, and pages visited (via cookies/analytics).
-
Communications – records of your interactions with us (emails, messages, enquiries).
2. How We Use Your Information
We use personal data only where lawful, for purposes such as:
-
Responding to your enquiries and messages.
-
Providing access to resources, downloads, or newsletters you sign up for.
-
Managing bookings for talks, workshops, or events.
-
Sending relevant updates, news, and marketing (with your consent).
-
Improving our website, content, and services.
-
Meeting legal, regulatory, or contractual obligations.
3. Legal Basis for Processing
We rely on the following legal grounds under UK GDPR:
-
Consent – when you sign up to receive communications or provide details voluntarily.
-
Contractual Necessity – where processing is needed to provide a service you requested.
-
Legitimate Interests – such as analysing site usage to improve our website.
-
Legal Obligation – where processing is required by law.
4. Sharing Your Information
We do not sell your personal data. We may share it with:
-
Trusted service providers (e.g., email marketing platforms, website hosts).
-
Professional advisors, regulators, or legal bodies when required.
-
Event or collaboration partners, but only if clearly stated and with your consent.
All third parties must respect your data and comply with UK GDPR.
5. Data Retention
We keep personal data only for as long as necessary:
-
Enquiries: up to 12 months after final contact.
-
Mailing list subscribers: until you unsubscribe.
-
Contracts, invoices, or legal records: up to 7 years (per UK law).
6. Your Rights
Under UK GDPR, you have the right to:
-
Access the personal data we hold about you.
-
Request correction or deletion of your data.
-
Withdraw consent at any time.
-
Object to or restrict certain processing.
-
Data portability (transfer your data).
To exercise these rights, email us at: [Insert Contact Email, e.g. info@sarahcressall.com].
7. Cookies & Tracking
Our website may use cookies and similar technologies to improve user experience and analyse traffic. You can control cookies via your browser settings. See our [Cookie Policy] (if separate) for details.
8. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.
9. International Transfers
Where third-party providers transfer data outside the UK/EEA, we ensure appropriate safeguards are in place (such as standard contractual clauses).
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
11. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us:
Sarah Cressall
Email: sarah@sarahcressall.com
Website: www.sarahcressall.com
If you are not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.