Privacy policy

Effective Date: 1 July 2026

I am committed to protecting your privacy and looking after the personal data you share with me. This privacy policy explains how I collect, use, and protect your information when you visit my website, get in touch, or work with me.

1. Who I am (The Data Controller)

For the purpose of UK data protection laws, the data controller is Helen Crumley of Crumley Comms, based in Chelmsford, UK.

If you have any questions about this policy or how your data is handled, you can contact me directly at helen@crumleycomms.com.

2. The information I collect and why I use it

I only collect the minimum amount of information necessary to run my consultancy and respond to your enquiries. This includes:

  • Contact information: If you fill out a contact form or email me, I collect your name, email address, phone number, and any project details you provide.
    • Lawful Basis: Contract (to take steps to enter into a working relationship) or Legitimate Interests (to respond to your enquiry).
  • Website usage data: I use basic analytics to see how visitors find and interact with my website. This may include your IP address, general location, and which pages you visit.
    • Lawful Basis: Consent (via your choices on my website’s cookie banner).

3. How I share your data

I value your trust and never sell your personal data. I only share information with trusted third-party service providers who help me run my business, such as:

  • My website hosting and email providers.
  • Invoicing and project management tools.

All third-party providers are vetted to ensure they protect your data in line with UK privacy laws. If data is transferred outside the UK, I ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

4. How long I keep your data

I only hold onto your personal data for as long as necessary to fulfil the purposes I collected it for, including any legal, accounting, or reporting requirements.

  • Enquiries that don’t lead to a project: Deleted after [e.g., 6 months].
  • Client records and financial data: Kept for [e.g., 7 years] to comply with UK tax and legal obligations.

5. Security

I take data security seriously. I use appropriate technical and organizational measures—such as secure, password-protected systems and encrypted connections (HTTPS)—to protect your information from unauthorized access, loss, or misuse.

6. Your rights

Under UK data protection law, you have specific rights regarding your personal information. You can ask me to:

  • Provide a copy of the personal data I hold about you.
  • Correct any inaccuracies in your data.
  • Delete your personal data entirely (the “right to be forgotten”), provided there is no overriding legal reason for me to keep it.
  • Restrict or object to how I process your data.
  • Withdraw your consent at any time (where consent is the basis for processing).

To exercise any of these rights, please email me at helen@crumleycomms .com. I will respond within one month.

7. How to complain

If you have any concerns about how I handle your data, please contact me first so I can try to resolve it.

However, you always have the right to lodge a formal complaint with the UK’s data protection regulator:

Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: www.ico.org.uk