Legal
Privacy notice
Last updated 26 August 2026.
Who I am
This website is operated by Emma Critchley-Lloyd, a sole trader based in the United Kingdom. I am the data controller for the personal data described in this notice. You can contact me at hello@emmacritchleylloyd.com.
What I collect
I only collect what you type into a form on this site. Depending on the form, that is: your name, your email address, your organisation, your job role, and any free-text message you choose to send. I also record which form you used, whether you ticked each consent box, and the date and time you submitted it.
I do not use tracking or advertising cookies. I use Plausible Analytics to see how many people visit the site and which pages they read. It sets no cookies, does not track you across websites, and does not collect anything that identifies you — so there is nothing here you can be asked to consent to. I do not collect special category data, and I ask you not to send any.
Why I collect it, and my lawful basis
To send you what you asked for — a guide, a report, information about the book, or a reply to your enquiry. Lawful basis: consent, which you give by ticking the first box on the form.
To send you occasional updates, analysis, research and insights about my work. Lawful basis: consent, which you give by ticking the second box. This box is always optional and never pre-ticked. If you do not tick it, you will only receive the thing you asked for.
To keep a record of what you consented to and when. Lawful basis: legal obligation, because I am required to be able to demonstrate consent under UK GDPR.
Who else sees it
I use a small number of service providers who process data on my behalf under written terms. They may only act on my instructions:
- My website and database platform, which stores form submissions
- My email delivery provider, which sends the materials you request
- My email provider, which receives notifications and any reply you send
- My survey provider, if you choose to complete the research survey
- My analytics provider, which counts visits without identifying anyone
I do not sell your data. I do not share it with third parties for their own marketing. If I later use a customer relationship management system, this notice will be updated before your data is moved into it.
Where your data is held
I hold personal data on servers in the United Kingdom or the European Economic Area. Where a provider processes data outside those areas, I rely on the UK International Data Transfer Addendum or an adequacy decision. I will not transfer your data anywhere that does not have one of those protections in place.
How long I keep it
If you only asked for a document, I keep your details for up to twelve months and then delete them. If you consented to updates, I keep your details until you unsubscribe or ask me to delete them, and I review the list at least once a year. Records of consent are kept for as long as I hold the underlying data, plus one year.
Your rights
Under UK data protection law you have the right to ask me for a copy of your data, to correct it, to delete it, to restrict or object to how I use it, and to receive it in a portable format. Where I rely on consent, you can withdraw it at any time — that does not affect anything done before you withdrew it.
Every marketing email includes an unsubscribe link. You can also email me at hello@emmacritchleylloyd.com and I will action any request within one month.
Complaints
If you are unhappy with how I have handled your data, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
Changes
This notice is a short-form version and will be replaced with a fuller one shortly. If it changes materially, I will update the date at the top and, where the change affects how I use data you have already given me, I will tell you directly.