Privacy Policy | Emma Brooks

For any questions about this Privacy Policy or how I handle your data:

Emma Brooks Design
Email: hello@emmabrooksdesign.com
Website: emmabrooksdesign.com

14. Contact

I may update this policy from time to time. If I make significant changes, I'll let you know by email or by posting a notice on my website. The effective date at the top of this page will always reflect the most recent version.

12. Changes to This Policy

Under UK data protection law, I must have a lawful basis for processing your personal information. The bases I rely on are:

Contract - to deliver services you've purchased or requested
Legitimate interests - to run and improve my business, provided this does not override your rights
Legal obligation - where required by law (e.g. tax records)
Consent - for marketing emails and analytics cookies (you can withdraw consent at any time)

11. Legal Basis for Processing

Some of the third-party tools I use may store or process data outside the UK. Where this happens, I ensure those providers offer an adequate level of data protection in line with UK GDPR requirements for example, through Standard Contractual Clauses or equivalent safeguards.

10. International Data Transfers

My services are not directed at anyone under the age of 18. I do not knowingly collect personal data from children. If you believe I have done so, please contact me at hello@emmabrooksdesign.com and I will delete it promptly.

9. Children's Privacy

I take reasonable technical and organisational steps to protect your information. This includes using secure platforms, access controls, and encrypted file storage.

No method of data transmission over the internet is completely secure. While I do my best to protect your information, I cannot guarantee absolute security.

8. Data Security

I keep your information for as long as necessary to deliver your services, meet legal obligations, and resolve any disputes. In practice:

Client project information - retained for 6 years in line with UK tax and accounting requirements
Email subscriber data - retained until you unsubscribe
Analytics data - retained in Google Analytics for 26 months (default setting)
Enquiry and contact data - retained for 2 years unless we enter into a working relationship

When data is no longer needed, I delete it.

7. Data Retention

I use two types of cookies:
Essential cookies — necessary for the website to function. These cannot be switched off.
Analytics cookies — I use Google Analytics to understand how visitors use my site (which pages they visit, how long they stay, where they come from). This data is aggregated and anonymous. Google Analytics may set the following cookies: `_ga`, `_gid`, `_gat`.

I do not use marketing cookies or advertising cookies.

What I Use

Cookies are small text files stored on your device when you visit a website. They help the site work properly and give me insight into how it's being used.

What Are Cookies

You can control or disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site.

You can also opt out of Google Analytics tracking at: tools.google.com/dlpage/gaoptout

Your Choices

6. Cookies

Under UK GDPR, you have the right to:

Access the personal information I hold about you
Correct any inaccurate information
Delete your information (where I have no legal obligation to retain it)
Restrict how I process your information
Object to processing based on legitimate interests
Data portability - receive your data in a usable format
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email me at hello@emmabrooksdesign.com I will respond within 30 days.

5. Your Rights

4.2 Legal Requirements

4.1 Service Providers

I share your information only in limited circumstances:

I will only share your information with anyone else if you have explicitly agreed to it, for example, if I showcase completed work in my portfolio (as agreed in your client contract).

4.4 With Your Consent

If Emma Brooks Design is ever transferred, merged, or restructured, your data may transfer as part of that process. I will notify you if this happens.

4.3 Business Changes

I may disclose your information where required by law, to protect my legal rights,
or to prevent fraud or harm.

I use trusted third-party tools to run my business. These include:

Kit.com — email marketing and product delivery
Notion — project management and client briefing forms
Google Analytics — website analytics
TidyCal — booking and scheduling
Dropbox — file storage and client asset delivery
Zoom — video calls, client sessions, and Zoom Clips
Senja— testimonial collection from clients
Payment processors — for handling transactions securely

These providers process your data only on my behalf and in accordance with their own privacy policies.

4. How I Share Your Information

I use your information to:

Deliver the services you've purchased or enquired about
Complete discovery audits, email builds, and strategy work
Process payments and send receipts
Respond to your questions and provide support
Send you emails you've signed up for (newsletters, sequences, updates)
Understand how my website is used and improve it
Comply with legal obligations

I do not sell your data. I do not use it for advertising.

3. How I Use Your Information

When you purchase a service, complete a briefing form, book a call, subscribe to Chatterbox, or get in touch, I may collect:

Your name and email address
Contact details (phone number, mailing address where relevant)
Payment information — note that payments are processed by third-party processors; I do not store card details
Project briefs, brand information, and business context you share with me
Messages, emails, and feedback you send

2.1 Information You Give Me

When you visit my website, I collect:

Device and browser information (IP address, browser type, operating system)
Pages visited, time spent, and how you navigate the site
General location derived from your IP address

This information is collected via Google Analytics. See Section 6 for more on cookies.

2.2 Information I Collect Automatically

I may receive information from:

Payment processors when you complete a transaction
Booking tools (such as TidyCal) when you schedule a call
Kit.com when you subscribe to my email list or purchase a product

2.3 Information from Third Parties

2. What Information I Collect

Emma Brooks, trading as Emma Brooks Design, is a sole trader operating as a relationship-first business strategy practice.

Data Controller: Emma Brooks (trading as Emma Brooks Design)
ICO Registration Number: C1918827

Email: hello@emmabrooksdesign.com
Website: emmabrooksdesign.com

Emma Brooks Design is registered with the Information Commissioner's Office (ICO) as a data controller under the Data Protection Act 2018.

1. Who I Am

This Privacy Policy explains how Emma Brooks Design ("I", "me", or "my") collects, uses, and protects your personal information when you use my website, services, products, and Chatterbox Substack publication (collectively, the "Services").

I take your privacy seriously. This policy is written to be read, not filed away.

Emma Brooks - Privacy Policy

Effective Date: 25 April 2026

If you have concerns about how I handle your data, please contact me first at hello@emmabrooksdesign.com and I'll do my best to resolve it.

If you remain unhappy, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

Emma Brooks Design ICO registration number: C1918827

Emma Brooks