Privacy Statement

Introduction

Rich Marketing Limited trading as Sarah Richards Social is a company registered in England and Wales (company number 10101450) with a registered address c/o SJE Accounting Services Limited, Warren Cottage, Worcester Road, WV6 7EG, Pattingham, Wolverhampton, United Kingdom (‘we’, ‘our’, ‘us’ ‘I’, ‘we’ in this privacy statement).

Any questions regarding the processing of personal data should be directed to me via contact us.

 

Data processing principles

I take protecting online privacy and data security seriously. Please read the whole of this statement carefully as it sets out my approach to processing personal data including what information I may collect from you, how I may use it, store it and protect it, and your rights as a data subject.

My Privacy Statement outlines my approach to any kind of data processing where I am acting as a data controller or co-controller (including collection, use, transfer, storage and deletion) of personally identifiable information (any information that may be used to identify a physical person, and any other information associated therewith) about natural persons. This statement applies to my processing of data collected through any means, actively as well as passively, from persons located anywhere in the world.

I am guided by the following principles when processing data:

1. I will only collect data for specific and specified purposes;
2. I will not collect data beyond what is necessary to accomplish those purposes;  I will minimise the amount of information I collect from you to what I need to deliver the services required;
3. I will collect and use your personal information only if I have sensible business reasons for doing so, such as making available to you my services and products;
4. I will not use your data for purposes other than those for which it was collected, accepted as stated within my policy, or with your prior consent;
5. I will seek to verify and/or update your data periodically and I will accept requests from you for amendment of the data held;
6. I will apply high technical standards to make my processing of data secure;
7. Except otherwise stated, I will not store data in identifiable form longer than is necessary to accomplish its purpose or as required by law.

 

What information I collect

In accordance with Data Protection Legislation I only collect and process information which I require to meet the specific purposes as stated above. The information I may collect about you could include, but is not limited to:

1. Contact details;
2. Personal details and identifiers;
3. Bank details and financial information;
4. Details about your occupation and business;
5. Details about your lifestyle and social circumstances;
6. Your aspirations and career ambitions;
7. Personal development goals and targets;
8. Details about how you use my website including technical data such as IP address.

Occasionally I may ask for special category data if necessary for delivery of a particular service or product. Any such special category data will only be collected with your express consent and will be handled in line with ICO best practice guidelines for special category data. As per my Data Processing Principles I will only ask for information that is necessary to deliver my services, and therefore I encourage you not to provide me with personal data or special category data which I do not ask for.

 

How I collect, use and share personal data

Most personal information is provided directly and voluntarily by you when you engage with me in order to enquire about, or purchase, my services or products.  I will collect information from you when:

1. You sign up to my newsletter or mailing list;
2. You download an opt-in;
3. You book onto a course, event or programme I am running;
4. You contact me for information via our website or social media channels, by phone or email;
5. You post on my social media channels, website or blog;
6. You work with me in a commercial capacity.

I may also collect personal information about you from third party sources, such as when you choose to connect your social media accounts with our site or log in through a social media platform such as Facebook or Instagram. However, I will only use this information where these third parties either have your consent or are otherwise legally permitted or required to share your personal information with me.

I collect this information in order to make available to you our services or products and to communicate with you in relation to our services or products. We may use the information collected to:

1. Allow me to process a booking for a product or service which you purchase from me;
2. Create a profile for you on my client database;
3. Send you my newsletters and/or provide you with information, products or services that you request from me or which we feel may interest you, where you have consented to be contacted for such purposes;
4. Respond to enquiries you make about my services or products;
5. Ask you to take part in surveys or quiz events;
6. Ensure that content from my site is presented to you in the most effective manner for you and your computer or device;
7. Allow you to access and utilise the service or product you have purchased from me;
8. Notify you about changes to me services or products;
9. Provide personalised content and advertising that is targeted to your interests;
10. Get feedback from you regarding the quality of my services or products.

I will not sell or lend your personal data to third parties, or share your personal data for marketing purposes without your express consent.  I will only share your personal data with third party service providers where it is necessary for the delivery of our products or services, and only where I am confident that such third party service providers has appropriate data protection systems and measures in place that are compliant with UK Data Protection Legislation.

I will not give consent to third party service providers or platforms to use your information, including audio and video recordings, for purposes other than those for which the information was collected and which are necessary for the delivery of our products and services.  I will not give consent for your information to be used by third party service providers for the training and development of AI modelling software, or similar purposes.

 

How I store and transfer your information

I have in place appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data we control. Your information is stored on my third party email marketing platform, Mailerlite or similar, my third party payment platform Stripe, and other authorised third party consultants e.g Calendly who support our business.  My third-party providers have their own privacy policies which you can view on their websites.

I may store or process your data on cloud based platforms or service providers whose servers are based outside of the UK/EEA which may constitute a transfer of data under GDPR.  I will only use such third party service providers where I am confident that appropriate safeguards are in place to ensure that any personal data transferred outside of the UK/EEA is subject to an equivalent level of security and protection as required under UK Data Protection Legislation, such as the UK Extension to the EU-U.S. Data Privacy Framework. To learn more about the EU-U.S. Data Privacy Framework, visit the U.S Department of Commerce’s website at: Home (dataprivacyframework.gov)

I also have in place appropriate procedures to handle any potential Personal Data Breaches, in accordance with Data Protection Legislation. Any such breaches will be reported to the relevant supervisory authority and notified to the affected data subjects where I am legally required to do so.

I will only keep your personal data for as long as is necessary to meet the requirements for which it was collected. This will vary depending on the nature of the requirements and the processing, but apart from in exceptional circumstances where longer retention is necessary I will only retain your personal data for 7 years. After this period of time I will delete your personal data unless there is a legitimate business reason to retain all or parts of the data I hold.

 

Legal basis for processing your data

The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies:

1. You have consented;
2. For the performance of a contract;
3. For compliance with a legal obligation which I must perform;
4. To protect the vital interests of your or another person;
5. It is in the public interest;
6. It is in the legitimate interests pursued by us or a third party.

I collect data for the purposes set out above. All personal data is managed to ensure that it is either erased from my system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.

Any special category data collected from you has special protection and is limited to that permissible by law. In all instances where special category data is collected I will obtain your express consent.

 

Your legal rights as a data subject

You have a number of legal rights in relation to the personal data that I hold about you and you can exercise your rights by contacting me using the details at the end of this statement. These rights include:

1. the right to obtain information regarding the processing of your personal data and access to the personal data which I hold about you. If you wish to access your personal data please email me at the address provided in this statement;
2. the right to withdraw your consent to my processing of your personal data at any time. Please note, however, that I may still be entitled to process your personal data if I have another legitimate reason (other than consent) to do so;
3. in some circumstances, the right to receive some personal data in a structured, commonly used and machine-readable format and/or request that I transmit those data to a third party where this is technically feasible. Please note that this right only applies to personal data that you have provided to me;
4. the right to request that I correct your personal data if it is inaccurate or incomplete;
5. the right to request that I erase your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal data but I must retain it;
6. the right to request that I restrict our processing of your personal data in certain circumstances. Again, there may be circumstances where you ask me to restrict my processing of your personal data but I must refuse that request;
7. the right to lodge a complaint with the applicable data protection regulator, in the UK this is the Information Commissioner’s Office (ICO).
8. when I am processing on the grounds of legitimate interest, you have the right to object to the processing and I must stop unless I have an overriding reason which will be communicated to you.

 

Links from our website

My site contains links to and from other websites which are operated by individuals and companies over which I have no direct control. If you follow a link to any of these websites, please note that these websites have their own privacy and terms of use policies. I do not accept any responsibility or liability for these policies. I advise you to check the policies for third party sites before you submit any personal data to the website.

 

Marketing emails

I may send you marketing emails and communications when you have opted in or otherwise given consent for me to do so.  I will make it as easy as I can for you to opt out of unwanted processing, providing it does not restrict my ability to provide you with the primary service you have requested.

Please note if you wish to unsubscribe from any marketing emails that you have signed up for, you can do so by emailing replying to the email or using the contact form or clicking onto the unsubscribe link on the marketing email that was sent to you. It may take 24 hours for this to become effective.

 

Cookies and website analytics

I use website analytics to provide the best user experience and service to you and to evaluate and improve my site. I utilise third party data analytics service providers to improve my visibility and to monitor website browser behaviour and navigation across the site.

These third-party data analytics service providers collect this information using cookies on my behalf in accordance with my instructions and in line with their own privacy policies. My service providers may collect the following data about the way you use my site, which will almost always be anonymised and aggregated before reporting back to me:

1. Number of visitors to my site;
2. Pages visited whilst using the site and time spent per page;
3. Page interaction information, such as scrolling, clicks and browsing methods;
4. Source location and details about where users go when they leave the site;
5. Page response times and any download errors;
6. Technical information relating to end user devices, such as IP address or browser plug-in

From time to time I may use the information collected about you to present you with targeted advertisements using platforms such as Facebook/Instagram/Threads, Pinterest, and/or Google.

If you wish to limit or reject cookies associated with my website you can do this in your browser settings. Please be aware that by choosing to limit or reject cookies from my website may you may not be able to use or benefit from certain features, particularly the features designed to personalise your experience.

 

Changes to my policy & future processing

This Privacy Policy was last updated on 20 May 2024 and is reviewed regularly, or upon changes to relevant Data Protection Legislation being published, whichever is sooner.

I do not intend to process your personal information except for the reasons stated within this privacy notice. I reserve the right to update this Privacy Notice from time to time. Where appropriate, I shall contact you to notify you of any material changes to the Privacy Notice. You should also refer to my website periodically so that you may access and view my updated Privacy Notice. This will ensure that you understand how I am using your personal data and your legal rights around my usage of such personal data.

If you have any questions or concerns regarding our data protection or privacy policies, please contact us at via the contact form and I will be happy to respond to any concerns.

Should you still have concerns about the way in which I manage your personal data then you should contact the relevant supervisory authority, which in the UK is the Information Commissioner’s Office: Contact us | ICO