Privacy Policy

I am committed to protecting your personal data and respecting your privacy. Personal data refers to any information relating to an identified or identifiable person. This Privacy Policy explains what information I collect, how it is used, and the rights you have under UK data protection law.

I operate as a sole trader under the name Charlotte Badger Consultancy & Support Services, based in the West Midlands.

If you have any questions about this policy, you can contact me at:

Email:charlotte@cbcss.co.uk

Address: Charlotte Badger Consultancy & Support Services
Office 1, Izabella House
24-26 Regent Place, City Centre
Birmingham
B1 3NJ GB

I am the data controller for all personal data collected through this website and in the course of providing my services.

How I collect your data:

I collect personal data directly from you when you contact me, complete a form on my website, or communicate with me by email. If you submit a contact form, the information you provide (such as your name, email address, and message) is sent securely to my email inbox and used only to respond to your enquiry. I may also collect limited technical data automatically through cookies or analytics tools when you use my website.

What data I collect:

Information you provide directly

  • Name

  • Email address

  • Phone number

  • Postal address (if relevant to the service)

  • Project details, instructions, or documents you share

  • Billing information (for invoicing)

Information collected automatically

If you use my website, I may collect:

  • IP address

  • Browser type

  • Cookie preferences

  • Basic analytics data*

* My website may use basic analytics tools (such as Squarespace Analytics) to understand website traffic and performance.

Special category data

I do not intentionally collect special category data. If you share it with me voluntarily, I will only process it where strictly necessary and with your clear consent.

‍How I use your data:

‍ ‍I use your personal data to:

  • Respond to enquiries

  • ‍Provide services you have requested

  • ‍Manage requests, projects, and communication

  • Issue invoices and manage payments

  • Maintain business records

  • Improve my website and services

  • Meet legal or regulatory obligations

I do not use your data for automated decision‑making or profiling.

Lawful basis for processing:

‍ ‍Under UK GDPR, I rely on the following lawful bases:

  • Contract: to provide the services you have requested

  • Legitimate interests: for business administration, responding to enquiries, and improving services

  • ‍Legal obligation: for tax, accounting, and record‑keeping

  • Consent: for optional cookies or marketing communications, however I do not currently send marketing emails.

Sharing your data:

‍ ‍I only share your data when necessary and with trusted third parties, such as:

  • Cloud storage providers

  • Email and communication platforms

  • Accounting or invoicing software

  • Website hosting and analytics tools

All third‑party providers are required to keep your data secure and compliant.

I do not sell or trade your personal data.

International Transfers

‍ ‍Some service providers may store data outside the UK. Where this happens, I ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations

  • Standard Contractual Clauses (SCCs)

Data Retention

I keep personal data only for as long as necessary:

  • Client records: up to 7 years (for tax and accounting)

  • Enquiry emails: up to 12 months

  • Project files: typically 12–24 months unless agreed otherwise

You can request deletion sooner where legally permitted.

Your rights:

You have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion

  • Restrict or object to processing

  • Withdraw consent (where used)

  • Request data portability

To exercise any of these rights, email me at charlotte@cbcss.co.uk.

If you have concerns about how your data is handled, please contact me first so I can resolve the issue. If you are still unhappy with how your data is handled, you can complain to the ICO: www.ico.org.uk

Cookies

If my website uses cookies, a separate Cookie Policy explains:

  • What cookies are used

  • Why they are used

  • How you can manage your preferences

‍Non‑essential cookies will only run with your consent.

Security

I take reasonable steps to protect your data, including:

  • Secure devices and password protection

  • Encrypted storage where appropriate

  • Limited access to client information

  • Regular review of data handling practices

However, no online system is completely risk‑free.

‍ Updates to this policy

I may update this Privacy Policy from time to time. The latest version will always be available on my website.

‍ ‍
‍ ‍

‍ ‍