Privacy Policy
This Privacy Policy explains how Clare Layton ("I", "me", "my") collects, uses, and protects personal data when you visit this website or get in touch about my services. I am committed to handling your data with care and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller
Clare Layton
Trading as
Clare Layton (sole trader)
Website
www.clarelayton.co.uk
Contact email
clare@clarelayton.co.uk
Location
England, United Kingdom
1. What Personal Data I Collect
I only collect information that is necessary for the purposes described in this policy. The types of personal data I may collect include:
1.1 Information you give me directly
• Your name and email address when you submit an enquiry via my contact form or email me directly.
• Your business name, phone number, and any other details you include in your message.
• Information you provide when completing a client questionnaire or onboarding form.
• Business information, brand assets, and other content you share with me in the course of a project.
• Login credentials for third-party accounts you grant me access to for project purposes (e.g. Squarespace, domain registrar, Google account).
1.2 Information collected automatically
• Basic website analytics data collected by Squarespace, including approximate location (country/region), pages visited, time on site, and device type.
• IP address and browser type, as part of standard server logs.
I do not use Google Analytics or any third-party advertising or tracking tools on this website.
2. How I Use Your Data
I use the personal data I collect for the following purposes:
• To respond to your enquiry and discuss your project needs.
• To deliver the services you have commissioned, including building and designing your website.
• To send you invoices, contracts, and project-related communications.
• To access third-party accounts you have authorised me to use for the purpose of completing your project.
• To understand how visitors use my website and improve it over time (analytics only — no advertising).
• To comply with legal obligations.
I will not use your data for any purpose beyond what is described above, and I will not send you marketing emails without your explicit consent.
3. Legal Basis for Processing
Under UK GDPR, I rely on the following legal bases for processing your personal data:
• Contract: Processing is necessary to perform the services you have requested or to take steps at your request prior to entering into a contract.
• Legitimate interests: To respond to enquiries, improve my website, and manage my business — where these interests are not overridden by your rights.
• Legal obligation: Where I am required to retain certain records (for example, for tax purposes).
• Consent: Where you have given explicit consent, for example if you sign up to receive updates from me. You can withdraw consent at any time.
4. Cookies
This website uses cookies. Cookies are small text files placed on your device when you visit a website.
4.1 Essential cookies
Some cookies are strictly necessary for the website to function and cannot be switched off. These include cookies set by Squarespace to manage your session and ensure the site displays correctly.
4.2 Analytics cookies
This website uses Squarespace's built-in analytics, which sets cookies to help me understand how visitors use the site. These cookies collect information such as the pages you visit and how long you spend on them. No personally identifiable information is collected or shared with third parties for advertising purposes.
When you first visit this website, you will be asked for your consent to non-essential cookies via the cookie banner. You can change your preferences at any time.
4.3 Managing cookies
You can control cookies through your browser settings. Please note that disabling certain cookies may affect how the website functions. For more information on managing cookies, visit www.allaboutcookies.org.
5. Who I Share Your Data With
I do not sell, rent, or trade your personal data. I may share your data in limited circumstances:
• Squarespace Inc: This website is hosted on Squarespace, which processes data on my behalf. Squarespace is certified under the EU-US Data Privacy Framework and complies with UK data transfer requirements. You can view Squarespace's privacy policy at squarespace.com/privacy.
• Third-party platforms used in your project: For example, if I set up your email marketing platform or Google Search Console, I will access those services using credentials you have provided. Your data within those platforms is governed by their respective privacy policies.
• Professional advisers: Such as my accountant, where necessary for legal or financial compliance.
• Legal authorities: Where I am required to disclose information by law.
I do not use third-party advertising networks, social media tracking pixels, or behavioural analytics tools on this website.
6. How Long I Keep Your Data
I retain personal data only for as long as necessary for the purposes for which it was collected:
• Enquiry data (no project): I will keep your details for up to 12 months in case you get back in touch. After that, they will be securely deleted.
• Client project data: I retain project-related correspondence, invoices, and contracts for 7 years, in line with HMRC requirements for business records.
• Login credentials and account access: I will delete any login credentials you share with me once the project is complete and they are no longer needed.
• Analytics data: Aggregated analytics data held by Squarespace is subject to Squarespace's own retention policy.
7. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access
You can request a copy of the personal data I hold about you.
Right to rectification
You can ask me to correct any inaccurate or incomplete data.
Right to erasure
You can ask me to delete your data where there is no legitimate reason for me to continue holding it.
Right to restriction
You can ask me to restrict how I use your data in certain circumstances.
Right to portability
You can request your data in a structured, commonly used format.
Right to object
You can object to processing based on legitimate interests.
Right to withdraw consent
Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact me at clare@clarelayton.co.uk. I will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time if you believe your data has been handled incorrectly. The ICO can be contacted at ico.org.uk or by calling 0303 123 1113.
8. Data Security
I take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This includes:
• Using password-protected devices and accounts.
• Storing client files in password-protected cloud storage.
• Communicating via encrypted email.
• Deleting sensitive credentials (such as login details) once they are no longer needed.
No method of data transmission over the internet is 100% secure. While I take all reasonable steps to protect your data, I cannot guarantee absolute security.
9. International Data Transfers
Some of the third-party services I use (such as Squarespace) may process data outside the UK. Where this occurs, I ensure that appropriate safeguards are in place in line with UK GDPR requirements, such as adequacy decisions or Standard Contractual Clauses.
10. Links to Other Websites
My website may contain links to third-party websites. I am not responsible for the privacy practices or content of those sites. I encourage you to read the privacy policy of any website you visit.
11. Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. The most current version will always be available on this website, with the date it was last updated shown at the top. Please check back periodically.
12. Contact & Complaints
If you have any questions about this Privacy Policy or how I handle your data, please get in touch:
Email: clare@clarelayton.co.uk
Website: www.clarelayton.co.uk
If you are not satisfied with my response, you have the right to complain to the Information Commissioner's Office (ICO):
ICO website: ico.org.uk
ICO helpline: 0303 123 1113