Data Protection & GDPR
Your privacy matters
I take your privacy seriously and am committed to protecting your personal data.
This page explains what information is collected on this website, how it is used, and your rights under UK data protection law (UK GDPR).
Who I am
This website is operated by Gemma Gardner.
If you have any questions about how your data is handled, you can contact me via the contact page on this website.
What data is collected
Depending on how you use this website, I may collect:
Your name and email address (if you contact me or subscribe to the newsletter)
Any information you choose to include in a contact form message
Basic website usage data (such as pages visited), collected through analytics
You are never required to provide more information than you are comfortable sharing.
How your data is used
Your data is used only to:
Respond to messages or enquiries you send
Send newsletters or updates if you choose to subscribe
Understand how the website is used, so it can be improved
Your information is never sold and is not shared for marketing purposes.
Legal basis for processing data
Under UK GDPR, personal data is processed on the following lawful bases:
Consent – when you choose to submit a form or subscribe to the newsletter
Legitimate interest – to respond to enquiries and improve the website
Legal obligation – where required by law
You may withdraw consent at any time.
Email newsletters
If you subscribe to the newsletter, your email address is stored securely and used only to send occasional updates, blog posts, or reflections related to this work.
You can unsubscribe at any time using the link included in every email.
Cookies and analytics
This website may use cookies and basic analytics tools to understand how visitors use the site.
These help improve content, usability, and accessibility.
No personally identifiable information is used for tracking.
You can manage or disable cookies through your browser settings.
How your data is stored
Your data is stored securely using trusted third-party platforms such as:
Squarespace (website hosting and forms)
Email service providers (for newsletters, if you subscribe)
Reasonable steps are taken to protect personal data from loss, misuse, or unauthorised access.
How long data is kept
Personal data is kept only for as long as necessary to fulfil its purpose, or to meet legal or regulatory requirements.
You may request deletion of your data at any time.
Your rights under GDPR
Under UK GDPR, you have the right to:
Access the personal data held about you
Request correction of inaccurate or incomplete information
Request deletion of your data
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO)
You are always welcome to contact me directly first if you have any concerns.
Changes to this policy
This policy may be updated from time to time to reflect changes in law or how the website operates.
The most recent version will always be available on this page.
Contact
If you have any questions about this policy or how your data is handled, please contact me via the contact page.
