Privacy Policy (UK GDPR & DPA 2018 Compliant)

Last updated: 11/07/2025

At Sara Marshall Strategy, we are committed to protecting your privacy and ensuring your personal information is handled securely and responsibly. This policy outlines how we collect, use, and store your data in accordance with UK GDPR and the Data Protection Act 2018.

1. Who We Are

Sara Marshall Strategy
Website: https://saramarshallstrategy.co.uk
Email: sara@saramarshallstrategy.co.uk
Registered in the UK

2. What Information We Collect

We may collect and process the following data:
– Name and contact details (email, phone number, address)
– Details provided via contact or booking forms
– Technical data such as IP address, browser type, operating system (via cookies)
– Any other data you voluntarily provide

3. How We Use Your Information

We use your data to:
– Respond to enquiries
– Deliver services
– Manage and improve our website
– Comply with legal obligations

We do not sell or rent your data to third parties.

4. Lawful Basis for Processing

We process your personal data under one or more of the following bases:
– Consent
– Performance of a contract
– Legal obligation
– Legitimate interests (e.g. to provide services or respond to enquiries)

5. Data Retention

We retain your data only as long as necessary to fulfil the purpose for which it was collected. For most client data, this is up to 7 years.

6. Your Rights

Under UK data protection laws, you have rights including:
– Access to your data
– Correction of inaccurate data
– Erasure (“right to be forgotten”)
– Restriction or objection to processing
– Data portability

To exercise your rights, please contact us at sara@saramarshallstrategy.co.uk.

7. Data Security

We take appropriate steps to secure your personal data using technical and organisational measures.

8. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy policies or practices.