This privacy policy explains how I collect, use, store and protect your personal data when you visit my website or work with me. It is written to comply with UK GDPR and the Data (Use and Access) Act 2025.
I am Jenna Elizabeth (“I”, “me”, “my”), a sole trader. I am the data controller responsible for your personal data.
You can contact me about anything in this policy, including data protection matters, at [email protected].
Depending on how you interact with me, I may collect:
Under UK GDPR I must have a lawful basis for using your personal data. The bases I rely on are:
If you have signed up to my email list, I may send you content, updates and offers relevant to my services. Every email includes an unsubscribe link, and you can opt out at any time by clicking it or emailing me. I use GoHighLevel to manage my email marketing and contact records.
I do not sell your personal data. I share it only with trusted providers who help me run my business, and only as far as needed. These include:
Some providers may process data outside the UK. Where they do, I take steps to ensure your data is protected by appropriate safeguards, such as UK-approved data transfer agreements.
I keep your personal data only for as long as I need it for the purposes set out in this policy, or to meet legal obligations. Enquiry and client records are typically kept for the duration of our working relationship and for a reasonable period afterwards. Financial records are kept for at least six years as required by law. Marketing data is kept until you unsubscribe.
My website uses cookies and similar technologies to help it function, to understand how visitors use it, and to support my advertising (including the Meta Pixel). Some cookies are essential; others, such as analytics and advertising cookies, are only set with your consent.
You can manage your preferences through the cookie banner when you visit, or through your browser settings.
I take appropriate technical and organisational measures to keep your personal data safe and to protect it from accidental loss, unauthorised access, alteration or disclosure. The third-party platforms I use also maintain their own security measures.
Under UK GDPR you have the right to:
To exercise any of these rights, email me at [email protected]. I will respond within one month. I am permitted to carry out reasonable and proportionate searches when responding to a request.
If you are unhappy with how I have handled your personal data, you have the right to complain. Please contact me first so I have the chance to put things right.
How to complain to me: send your complaint by email to [email protected], with “Data Protection Complaint” in the subject line. Please include your name, contact details and a description of your concern.
What happens next: I will acknowledge your complaint within 30 days of receiving it. I will look into it, keep you updated, and aim to resolve it as quickly as I reasonably can.
If you are still not satisfied: you have the right to complain to the Information Commissioner’s Office (ICO). I would ask that you give me the opportunity to resolve your complaint first, but this does not affect your right to contact the ICO at any time.
ICO contact details:
I may update this privacy policy from time to time. Any changes will be posted on this page with a revised “last updated” date.
This is the public-facing privacy policy. Remember to keep your separate internal data protection complaints procedure on file as your accountability record under the DUAA.