Privacy Policy

1. Who I am

Sarah Durance is the data controller responsible for the personal information described in this Privacy Policy. I operate as a sole trader in the United Kingdom.

2. Information I collect

Depending on how you use this website, I may collect and use the following information:

• Newsletter information: your first name, email address, subscription status, consent record and information about how you interact with emails.
• Booking information: your name, email address, time zone, meeting details and any information you provide when arranging a discovery call.
• Correspondence: information you provide when you contact me by email or communicate with me about my services.
• Technical information: information such as your IP address, browser type, device type, date and time of access, requested pages and security or server log data.

I do not intentionally collect special-category information through this website. Please do not include sensitive personal information in an email or booking form unless it is necessary and we have agreed that it is appropriate.

3. How and why I use your information

Email sequence and marketing emails

When you sign up for my LinkedIn email sequence, I use your first name and email address to send the sequence and related emails. The lawful basis is your consent. A double opt-in process is used to confirm your subscription.

You can withdraw your consent at any time by clicking the unsubscribe link in an email or by contacting me. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Discovery calls and enquiries

I use booking and correspondence information to arrange and manage discovery calls, reply to enquiries, understand what you are looking for and discuss possible services. Depending on the context, the lawful basis is taking steps at your request before entering into a contract, performing a contract, or my legitimate interests in responding to enquiries and running my business.

Operating and securing the website

I use limited technical and server information to deliver the website, maintain security, prevent abuse, diagnose faults and keep the service reliable. The lawful basis is my legitimate interests in operating a secure and functional website.

Legal and administrative purposes

I may use information where necessary to comply with legal obligations, establish or defend legal claims, keep appropriate business records or protect my rights and the rights of others.

4. Service providers and data sharing

I use carefully selected service providers to operate this website and deliver my services. They may process personal information on my behalf or as independent controllers, depending on the service.

Hostinger

Hostinger provides website hosting and business email services. Technical data, server logs and email correspondence may therefore be processed through Hostinger's systems.

Kit

Kit is used to collect subscriptions and deliver the LinkedIn email sequence. When you submit the subscription form, Kit may process your first name, email address, IP address, consent information and email engagement data. Kit may also use technologies necessary to load and operate its embedded form.

Calendly

Calendly is used to arrange discovery calls. If you follow a Calendly link and make a booking, Calendly will process the details you enter and may collect technical information in accordance with its own privacy notice and cookie choices.

Google Calendar

Calendly is connected to Google Calendar to manage availability and scheduled appointments. Booking details may therefore be added to and processed through Google Calendar.

Professional and legal recipients

I may disclose information to professional advisers, insurers, regulators, law-enforcement bodies or other parties where this is reasonably necessary, legally required, or needed to establish, exercise or defend legal claims.

5. International data transfers

Some service providers used by this website are based in, or process information in, countries outside the United Kingdom. Where personal information is transferred internationally, I rely on appropriate safeguards required by data-protection law, such as adequacy regulations, approved contractual protections or another lawful transfer mechanism.

You may contact me for further information about the safeguards relevant to your personal information.

6. Cookies and similar technologies

This website does not currently use Google Analytics, Meta Pixel or another analytics or advertising service.

The website and its service providers may use strictly necessary storage, cookies or similar technologies to provide security and basic functionality. The embedded Kit subscription form may also make technical requests and use technologies required to display and operate the form.

Calendly is accessed through an external link. Calendly manages cookies and related choices on its own website. Social-media links are also external; LinkedIn or Instagram will receive information when you choose to visit their services.

If I introduce analytics, advertising tools or other non-essential cookies in the future, I will update this policy and, where required, ask for consent before those technologies are used.

7. LinkedIn and Instagram

This website may link to my LinkedIn and Instagram profiles. These are external services. Simply displaying a normal link does not send your information to those platforms, but they may collect information when you click the link or interact with my profile. Their own privacy policies govern that processing.

If you contact me through a social-media platform, I will use the information you provide to respond to you and manage the conversation. The platform may process the same information independently.

8. How long I keep your information

• Email subscribers: while you remain subscribed. If you unsubscribe, I may retain a minimal suppression record so that I can respect your request not to receive further marketing.
• Enquiries and discovery-call information: for as long as reasonably needed to manage the enquiry and any resulting relationship, generally no longer than 24 months where no client relationship follows, unless there is a legal or business reason to keep it longer.
• Client and transaction records: for the period required by tax, accounting, insurance and legal obligations.
• Technical and security records: for a limited period appropriate to security, troubleshooting and hosting operations.

I may keep information for longer where it is required for a legal claim, regulatory matter or other legal obligation.

9. Information security

I take reasonable technical and organisational measures to protect personal information from accidental loss, misuse, alteration, unauthorised access or disclosure. No online service can guarantee absolute security, but I limit access to personal information and use reputable providers and password-protected systems.

10. Your data-protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• ask for access to the personal information I hold about you;
• ask me to correct inaccurate or incomplete information;
• ask me to erase your information;
• ask me to restrict how your information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent at any time where processing is based on consent; and
• complain to the Information Commissioner's Office.

To exercise a right, email hello@sdurance.com. I may need to ask for information to verify your identity. There is usually no fee, and I will normally respond within one month.

11. Complaints

Please contact me first if you have a concern, so I have the opportunity to address it.

You also have the right to complain to the UK supervisory authority:

12. Children's information

This website and my services are intended for adults and business users. I do not knowingly collect personal information from children through this website.

13. Changes to this policy

I may update this Privacy Policy when my services, providers or legal obligations change. The latest version will be published on this page, and the date at the top will show when it was last updated.

14. Contact

For privacy questions or requests, please contact: