I collect and process the following information:

• personal identifiers, contacts and characteristics – for example, your name, email address and phone number.
• and when supplied by you to carry out work, data might also include logins for social media accounts and content management systems.

You provide most of this personal information to me directly so I can carry out work for you.

Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:

1. Your consent. You can remove your consent at any time. You can do this by contacting me, Rebecca Thomas.
2. We have a contractual obligation.

I use the information you’ve given me to carry out agreed work for you. I will not share this information.

Storage
Your information is securely stored on a business system accessed from computers at my business address.

I keep personal identifiers, contacts and characteristics for one year after my work for you is finished. I will then dispose of your information by deletion and shredding of any paper copy.

I keep paper printouts of work in progress for no more than one month after each project has finished. All paper is securely shredded.

See your data protection rights at the Information Commissioner’s Office