PRIVACY POLICY

know where you are with your data

Your privacy is important to me, and in this statement I explain what personal data I collect from you and how I use it. I encourage you to read this statement and contact me if you have any queries regarding the data I hold about you.

This statement is divided between the different relationships I have with people engaging with my business, Josephine Brooks. If you are unsure which category you fall into, you can contact me to find out.

 Josephine Brooks is run by Josephine Brooks as a sole trader.

Sharing your data:

Under no circumstances is your data ever sold or rented to a third party. I may share your data in the following circumstances:

  • To service providers (Stripe, Dubsado, Flodesk) who assist in the payment processing, and delivery for my services.

  • To third parties if I believe that disclosure is advisable or necessary to comply with the law, to enforce or apply my terms and conditions, or to protect the rights, property or safety of myself or others. This may include exchanging information with other companies and organisations for fraud protection and credit risk reduction.

Access to your data:

You have the right to request a copy of the information I hold about you. If you would like a copy of the personal information I hold, please contact me. You also have the right to be forgotten, so you can contact me to request the data I hold, to be permanently deleted.

Clients & customers

What data I collect and where it’s kept:

  • If you engage in my services I collect your name, email address, business name, website and social media links. This data is held within Dubsado

  • If you purchase an online class, I collect your name and email address. This data is held within Thinkific

Why I need it and how I use it:

  • I need to know this basic personal data in order to contact you regarding your service and deliver the services agreed.

  • You will not be added to any other marketing lists unless you have opted in to those yourself. If you are also an email subscriber, please see the Email Subscriber section below to see how your data is used in that context.

How long I keep your data:

  • I am required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years. After this point your information will be kept until you notify me otherwise; you have the right to be forgotten so contact me if you would like your data to be permanently deleted.

Non-customer enquiries

What data I collect and where it’s kept:

  • If you have enquired about my services via the contact form on my website, I collect your name, website and email address. This information is held within Dubsado and my business email.

Why I need it and how I use it:

  • I need to know this basic personal data in order to contact you regarding your enquiry.

  • You will not be added to any other marketing lists unless you have opted in to those yourself. If you are also an email subscriber, please see the Email Subscriber section below to see how your data is used in that context.

How long I keep it:

  • Your information will be kept until you notify me otherwise; you have the right to be forgotten so contact me if you would like your data to be permanently deleted

Email subscribers

What data I collect and where it’s kept:

  • I collect your name and email address when you opt in to my email list. This data is held in flodesk.

Why I need it and how I use it:

  • I use this information to stay connected with you through my business - this means that I will send you my Ask Josephine emails each Monday, plus occasional additional letters to inform you about new resources, services, products, and offerings. 

How long I keep it:

  • Your information will be kept until you notify me otherwise; you have the right to be forgotten so contact me if you would like your data to be permanently deleted.

Site users

What data I collect and where it’s kept:

  • I use website analytics to provide the best user experience and service to you and to evaluate and improve our site. This data is kept within Google Analytics, Google Search Console and Squarespace.

  • I also have a meta pixel embedded on my website that collects data around website user behaviour, this data is stored within Meta business suite.

Why I need it and how I use it:

  • This allows me to analyse my web traffic. This analysis is about general trends rather than you as an individual, and your IP address is encoded and not visible to me.

  • From time to time I may use the information collected about you to present you with targeted advertisements across platforms such as Facebook, Instagram and/or Google.

How long I keep it:

  • Your information will be kept until you notify me otherwise; you have the right to be forgotten so contact me if you would like your data to be permanently deleted.

Targeted marketing

  • The user data I collect (detailed above) enables me to present you with targeted advertisements using platforms such as Facebook, Instagram and/or Google. As above, your information will be kept until you notify me otherwise; you have the right to be forgotten so contact me if you would like your data to be permanently deleted.

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to

  • Request access to your personal data;

  • Request correction of your personal data;

  • Request erasure of your personal data;

  • Object to processing of your personal data;

  • Request restriction of processing your personal data;

  • Request transfer of your personal data;

If you wish to exercise any of the rights set out above, please contact me.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, I may refuse to comply with your request in these circumstances.

I try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex, or you have made several requests. In this case, I will notify you and keep you updated.

If you are not satisfied with my response or believe I am processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).

Policy amendments

I may update this privacy policy from time to time by posting a new version on my website. You should check this page occasionally to ensure you are happy with any changes. I may also notify you of changes to our privacy policy by email, if you have elected to receive these.