Privacy Policy

I am registered with the Information Commissioner's Office (ICO) under registration number ZB905432

2. What Personal Data We Collect

I may collect and process the following personal data about you:

• Information you give me:
  • When you fill in the contact form on my Website: Your name, email address, subject, and the content of your message.
  • When you sign up for a lead magnet (e.g., "Case Study," "Professional Insights Guide") via forms on my Website (which may be managed by my email marketing provider, MailerLite): Your name and email address.
  • When you schedule a discovery call via Calendly: Your name, email address, and any information you provide in response to scheduling questions.
  • If you subscribe to my newsletter (with your explicit consent): Your name and email address.
  • Any other information you voluntarily provide when you contact me by email or other means.
• Information I collect automatically:
  • My website is hosted on Vercel. Vercel Analytics is used by default and is designed to be privacy-respecting, providing insights into website traffic without using cookies or collecting detailed personal identifiers from visitors. It may collect aggregated and anonymized data about website visits.
  • If you interact with embedded third-party tools (like Calendly or forms from my email marketing provider), these services may collect technical information as per their own privacy policies.

3. How We Use Your Personal Data

I use the personal data I collect for the following purposes:

• To respond to your inquiries: When you contact me via the contact form or email (Lawful basis: Legitimate interest to respond to your query; or to take steps at your request prior to entering into a contract).
• To provide you with requested resources: To deliver lead magnets you have signed up for (Lawful basis: Consent, or performance of a contract if the resource is part of an agreed service).
• To send you my newsletter and marketing communications (where you have consented): To provide you with insights, articles, podcast updates, and information about my services (Lawful basis: Explicit Consent). You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting me.
• To manage scheduled calls: To facilitate discovery calls or other booked sessions via Calendly (Lawful basis: To take steps at your request prior to entering into a contract, or performance of a contract).
• To improve my Website and services: To understand how my Website is used (through aggregated analytics) and to enhance user experience (Lawful basis: Legitimate interest).
• To comply with legal and regulatory obligations.

4. Our Lawful Basis for Processing

I will only process your personal data where I have a lawful basis to do so. The lawful bases I rely on are:

• Consent: Where you have explicitly agreed to me processing your personal data for a specific purpose (e.g., signing up for a newsletter or a lead magnet where ongoing marketing is also offered with separate consent).
• Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (e.g., responding to a service inquiry, fulfilling a booked consultation).
• Legitimate Interests: Where processing is necessary for my legitimate interests (or those of a third party), provided these interests are not overridden by your rights and interests. This includes responding to your general inquiries, operating and improving my website, and for business administration.

5. Data Sharing and Third Parties

I value your privacy and will not sell your personal data to third parties. However, I may share your data with trusted third-party service providers who act as "data processors" on my behalf to help me operate my business and Website. These include:

• Website Hosting: Vercel (for hosting didianolue.co.uk).
• Email Marketing Platform: [Name of Email Marketing Platform, e.g., MailerLite or ConvertKit] (for managing email lists, delivering lead magnets, and sending newsletters).
• Form Processing: [If using a separate service like Formspree, name it here, or state it's handled by your Email Marketing Platform, e.g., "Handled by Mailerlite".
• Scheduling Tool: Calendly (for booking calls).
• Analytics Providers: Vercel Analytics (default, privacy-focused). Mailerlite.

I will only share data that is necessary for them to provide their services and I have agreements in place (such as Data Processing Agreements) to ensure they process your data securely and in accordance with UK GDPR. Some of these providers may be based outside the UK. Where data is transferred internationally, I ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses with the UK Addendum, or adequacy decisions).

6. Data Storage and Retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Data from contact form inquiries will be kept for as long as necessary to deal with the inquiry and for a reasonable period thereafter for record-keeping 5 years.
• Data collected for lead magnet delivery and newsletter subscriptions will be kept as long as you remain subscribed or until I no longer offer the service. If you unsubscribe, I will take steps to delete or anonymise your data within a reasonable timeframe, unless I need to keep it for legal reasons.

7. Data Security

I take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it against accidental loss, unauthorized access, alteration, or disclosure. This includes using secure services for data processing and limiting access to your data. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Your Data Protection Rights

Under UK GDPR, you have several rights regarding your personal data:

• Right of access: You can request a copy of the personal data I hold about you.
• Right to rectification: You can ask me to correct inaccurate or incomplete data.
• Right to erasure (to be forgotten): You can ask me to delete your personal data in certain circumstances.
• Right to restrict processing: You can ask me to restrict the processing of your personal data in certain circumstances.
• Right to data portability: You can ask for your data to be provided to you or another controller in a commonly used, machine-readable format (where processing is based on consent or contract and is automated).
• Right to object: You can object to the processing of your personal data in certain circumstances (e.g., for direct marketing).
• Rights related to automated decision making and profiling: I do not currently engage in automated decision-making or profiling with your personal data.