Privacy Policy

I process personal information under the following lawful bases, depending on the purpose:

- Contractual necessity: Where processing is necessary to provide agreed services or take steps towards entering into a contract.
- Legitimate interests: Where processing is necessary to respond to business enquiries, maintain professional relationships, manage my consultancy or protect my business, provided these interests do not override your rights and freedoms.
- Legal obligations: Where information must be retained or processed to comply with applicable laws, including tax and accounting requirements.
- Consent: Where consent is required, including for certain non-essential website cookies.

Where processing relies on consent, you may withdraw that consent at any time.

5. How is your information stored and shared?

I use trusted third-party service providers to support the operation of my business.

These include:

- Wix: Website hosting, website functionality and contact form services.
- Google Workspace: Business email, communications and related business services.
- Usercentrics: Website cookie consent management.

These providers may process personal information on my behalf in accordance with their applicable data protection terms.

I may also share information with professional advisers or other service providers where reasonably necessary for business operations or to meet legal obligations.

I do not sell your personal information to third parties.

6. International data transfers

Some of the third-party providers I use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards must be in place in accordance with applicable UK data protection law.

Depending on the destination and provider, these may include recognised adequacy arrangements or approved contractual safeguards.

You may contact me using the email address above to request further information about applicable international transfer safeguards.

7. How long do I keep your information?

I retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

My general retention periods are:

General enquiries and unsuccessful proposals

Information relating to enquiries that do not result in a working relationship is normally retained for up to 12 months following the last meaningful contact.

Client and consultancy records

Client contracts and relevant business correspondence may be retained for up to six years after the working relationship ends, where necessary for contractual, legitimate business or legal purposes.

Mentoring records

Detailed mentoring notes are normally deleted within 12 months of the final mentoring session unless there is a specific and justified reason to retain them longer.

Financial and accounting records

As a sole trader, I retain financial and accounting records in accordance with HMRC requirements, generally for at least five years after the 31 January Self Assessment submission deadline for the relevant tax year.

Information may be retained for longer where necessary to comply with legal obligations, respond to legal claims or resolve disputes.

Personal information that is no longer required will be securely deleted or anonymised.

8. Cookies and website functionality

This website is built using Wix and uses cookies and similar technologies to support its operation, security and functionality.

Some cookies are essential for the website to function correctly.

Other cookies, where enabled, may be used to understand website performance or improve the visitor experience.

Cookie preferences are managed through a consent banner provided by Usercentrics.

Where consent is required, non-essential cookies should not be activated until the visitor has provided that consent.

Visitors can accept or reject optional cookies and should be able to change their preferences subsequently through the website's cookie settings.

You can also manage cookies through your browser settings.

Additional analytics tools may be introduced in the future. This policy and the website's cookie information will be updated where necessary before those tools are activated.

9. Your data protection rights

Under UK data protection law, you may have the right to:

- Request access to the personal information I hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information in certain circumstances.
- Request restriction of certain processing activities.
- Object to processing based on legitimate interests.
- Request transfer of your information where applicable.
- Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact:
hello@hannahhetherton.com

If you have concerns about how your personal information is handled, please contact me so that I can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information is available at:
www.ico.org.uk

10. Changes to this Privacy Policy

I may update this Privacy Policy periodically to reflect changes in my services, business operations, website functionality or applicable legal requirements.

The date at the top of this page indicates when the policy was last updated.