This policy explains what personal data Paul Myers collects, why, how it’s used and kept safe, and the rights you have over it. It’s written to be read, so if anything isn’t clear, get in touch and I’ll explain.
Last updated: [date]
Who’s responsible for your data
Paul Myers is a sole trader. For the purposes of UK data protection law, Paul Myers is the data controller for the personal data described in this policy.
- Address: Liverpool Innovation Park, 360 Edge Lane, Liverpool L7 9NJ
- Email: hello@paulmyers.co.uk
What data I collect
When you get in touch or request a free assessment: your name, email address, website, and anything you choose to tell me in the form, such as what you need help with, your goals, timing and budget range.
When you book a call: your name, email address, the time you choose and any notes you add.
When you message on WhatsApp: your phone number, name as shown in WhatsApp, and the messages you send.
When you sign up for the newsletter: your email address, and whether you open emails and click links.
When you use the free SEO checker: the page address you check. If you ask for the full report by email, your name and email address, and your consent to follow up.
When you visit the site: if you accept analytics cookies, information about how you use the site, such as pages viewed, the device and browser you use, your approximate location based on your IP address, and how you arrived. Details are in the cookie policy.
When you become a client: contact and billing details, and access to business data such as Google Search Console, Google Analytics and Google Ads. Client data is covered by the terms we agree, as well as this policy.
How I use your data, and the legal basis
| Purpose | Legal basis |
|---|---|
| Replying to enquiries, assessment requests and messages | Legitimate interests: responding to people who contact me |
| Arranging and holding calls | Legitimate interests, or steps before entering a contract |
| Delivering the free assessment or checker report | Legitimate interests, or consent where you’ve given it |
| Sending the newsletter | Consent, which you can withdraw at any time |
| Following up after a checker report | Consent |
| Providing services to clients, invoicing and record keeping | Contract, and legal obligation for financial records |
| Analytics to improve the site | Consent, given through the cookie banner |
| Preventing spam and abuse of forms and tools | Legitimate interests: keeping the site and tools secure |
I don’t sell your data, and I don’t use it for automated decisions that have legal or similarly significant effects on you.
Who I share data with
Personal data is only shared with service providers that help run the business, under contracts that require them to protect it. [PAUL TO ADD: confirm this list.]
- website hosting
- form handling and spam protection
- email and newsletter
- calendar booking
- WhatsApp (Meta), when you choose to message that way
- analytics (Google Analytics), only if you accept analytics cookies
- accounting and invoicing, for clients
Data may also be shared if the law requires it.
International transfers
Some service providers may process data outside the UK. Where that happens, transfers are protected by an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum. [PAUL TO ADD: confirm which providers and safeguards apply.]
How long data is kept
Data is kept only as long as it’s needed:
| Data | How long it’s kept |
|---|---|
| Enquiries that don’t lead to work | Up to 12 months after the last contact |
| Newsletter subscribers | Until you unsubscribe |
| Client project data and access to your tools | Up to three months after the work ends, with no personally identifiable data retained |
| Client records and invoices | Six years after the end of the tax year they relate to, for legal and tax reasons |
| Analytics data | Up to 14 months, in line with the analytics settings |
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data I hold about you
- ask for inaccurate data to be corrected
- ask for your data to be deleted
- object to processing based on legitimate interests
- ask for processing to be restricted
- withdraw consent at any time, where processing is based on consent
- ask for your data in a portable format, where that applies
To use any of these rights, email hello@paulmyers.co.uk. I’ll respond within one month. There’s no charge in most cases.
How your data is protected
Access to personal data is limited to what’s needed, accounts are protected with strong passwords and two-factor authentication where available, and data is held with reputable providers. Client platform access is read-only wherever that’s enough to do the work.
AI tools
Some work uses AI tools to help analyse data and draft documents. How that works, and what they never do, is set out in the AI use statement.
Complaints
If you’re unhappy with how your data has been handled, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If this policy changes, the updated version will be published here with a new date.