This privacy notice tells you what personal information I collect, where I get it from, how I store it and how I use it. 

A little bit about me

I’m Mandy Huntley and I’m a sole trader. You can contact me by email or by phone using the details below:

Telephone

07540224596

Email

mandy@mandyhuntley.co.uk

I am the data controller for all data collected, stored and used in relation to my business interests and activities.

What information I collect and use, and why

When you first make contact with me via my website, email or telephone (including SMS and WhatsApp) I collect and use information about you and your business to enable me to understand your query and provide a quote for products or services, if applicable. 

Initially the information I collect and use will be limited to:

• Names and contact details
• Occupation and/or type of business
• Records of meetings, conversations and decisions
• Marketing preferences

When you accept a quote or commission work from me you will be known by me as a “client”. 

I collect and use information about clients and their businesses to enable me to provide you with high quality products and services. I will also use the information I collect to improve my products and services, manage client accounts, fulfil my legal obligations such as taxation and to market my business.

I will collect and use the following information relating to clients:

• Names and contact details
• Occupation and/or type of business
• Records of meetings, conversations and decisions
• Addresses
• Purchase or service history
• Transaction data (including details about payments to and from you and details of products and services you have purchased)
• Information relating to compliments or complaints
• Website user information
• Marketing preferences
• Correspondence

Lawful bases and data protection rights

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. www.ico.org.uk 

Which lawful basis I rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access - You have the right to ask me for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
• Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
• Your right to erasure - You have the right to ask me to delete your personal information. You can read more about this right here.
• Your right to restriction of processing - You have the right to ask me to limit how I can use your personal information. You can read more about this right here.
• Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
• Your right to data portability - You have the right to ask that I transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
• Your right to withdraw consent – When I use consent as my lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, I must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.

My lawful bases for the collection and use of your data

My lawful bases for collecting or using personal information to provide and improve products and services for clients are:

• Consent – Once I have provided you with information about what data I will collect and use and how I intend to do that I will ask for your consent. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

My lawful bases for collecting or using personal information for the operation of client or customer accounts are:

• Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

My lawful bases for collecting or using personal information for information updates or marketing purposes are:

• Legitimate interests – I’m collecting or using your information because it benefits you, my organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. My legitimate interests are:
  • to make you aware of products or services which may be of interest to you
• to promote repeat business

My lawful bases for collecting or using personal information to comply with legal requirements:

• Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

My lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Legitimate interests – I’m collecting or using your information because it benefits you, my business or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. My legitimate interests are:
  • to investigate complaints or claims to further enhance the business and learn from experiences and mistakes.
• Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Where I get personal information from

• Directly from you
• Publicly available sources (such as your website)
• if you attend one of my workshops I may receive information such as your name and job title from your employer if the workshop was booked or commissioned by them. I may also receive information about adjustments that you may need in order to make my workshop fully accessible and inclusive.

How long I keep information

When you are a potential client I will store your data for 12 months from the date of your most recent contact with me. After 12 months have passed I will delete the data from my systems unless you have become a client.

When you become a client I will store your data for the lifetime of the business relationship plus 7 years from the date of the contract’s termination.

A note on cookies

You may have noticed that my website doesn't have a cookie banner that pops up when you first found the site. This is because my website doesn't use any features which need cookies, therefore I don't collect this data, hence there's nothing for you to consent to or decline.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to me using the contact details at the top of this privacy notice.

If you remain unhappy with how I’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

11 March 2025