Your data stays
in the room.

01 About this notice

This notice tells you what to expect me to do with your personal information. Short version: your data stays in the room - like everything else on my table.

Contact: kat@bloodandwire.com

02 What I collect, use, and why

If you contact me or book a call, I collect your name and contact details, so I can reply to you and deliver the service you asked for.

If you complete the Bleed Report, I also collect the business information you choose to give me in the questionnaire - things like your revenue band, how many enquiries you get, your average project value, and how your current process works. I use it for one purpose: to write your report. I don't sell it, share it, or use it to build a profile of you.

If you simply visit the website, I use privacy-friendly analytics (Plausible) to count visits and see which pages people read and where they arrived from. It uses no cookies, collects no personal data, and cannot identify you or follow you around the internet. That is why this site has no cookie banner - there is nothing to consent to.

No tracking dossier, no resale, no shadowy third parties.

02b Who else touches your data

I use a small number of established providers to run the business. They process data on my behalf, under contract, and cannot use it for their own purposes:

• HubSpot - customer records and Bleed Report submissions (EU data centre)
• Make - moves your form submission from the website to my inbox and HubSpot
• Google Workspace - my email, which is how I reply to you
• Calendly - if you book a call with me
• Netlify - hosts this website
• Plausible - privacy-friendly visitor statistics (EU-hosted, no cookies, no personal data)

03 Lawful bases and your rights

Under UK data protection law, I must have a "lawful basis" for collecting and using your personal information. The full list lives in the UK GDPR, and you can read more about it on the ICO's website.

Which basis I rely on can affect your rights, set out briefly below. More detail, and the exemptions that may apply, is on the ICO's website:

• Your right of access - You can ask me for copies of your personal information. You can also ask where I got it from and who I share it with. Some exemptions apply, so you may not receive everything you ask for.
• Your right to rectification - You can ask me to correct or delete information you think is inaccurate or incomplete.
• Your right to erasure - You can ask me to delete your personal information.
• Your right to restriction of processing - You can ask me to limit how I use your personal information.
• Your right to object to processing - You can object to the processing of your personal data.
• Your right to data portability - You can ask me to transfer the information you gave me to another organisation, or to you.
• Your right to withdraw consent - Where I rely on consent, you can withdraw it at any time.

If you make a request, I'll respond without undue delay and within one month at the latest. To make a request, just email me using the address at the top.

04 My lawful basis

• Consent - I have your permission, given after I've shared all the relevant information. All of your rights may apply, except the right to object. You can withdraw your consent at any time.

05 Where I get it from

Directly from you. Nowhere else.

06 How long I keep it

I keep your details, and any Bleed Report answers you gave me, for as long as we have a working relationship. Otherwise I dispose of your information within 365 days.

For more on retention, or the criteria I use to decide, email me using the details above.

07 How to complain

If you're concerned about how I use your personal data, tell me first, using the contact details at the top.

If you're still unhappy after raising it with me, you can complain to the ICO.

The ICO's address:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint