Privacy Policy

Emily Lester
Last updated: October 2026

1. Who I am

I am Emily Lester, a sole trader based in [town/county], England, offering Squarespace web design and branding services. I am the "data controller" for the personal information described in this policy, which means I decide how and why it is used. You can contact me at emily@emilylester.co.uk with any questions about your data.

2. What this policy covers

This policy explains what personal information I collect when you visit my website, contact me, book a call or work with me, and how I use, store and protect it. It applies to this website and to my dealings with enquirers and clients.

3. The information I collect

Information you give me

  • Enquiries and bookings: your name, email address, phone number (if you give it), business name, website address and the details of your project, including any answers you give to the booking questions.

  • Client projects: your contact and billing details, plus the content, images, brand assets and account details you share so I can do the work.

  • Payments: records of invoices and payments. Card and bank details are handled by the payment provider, and I do not store full card numbers.

  • Communications: emails and messages you send me, and notes I make about our calls and projects.

  • Testimonials and reviews: feedback you choose to give me, along with your name and business if you agree to be named.

Information collected automatically

  • Technical and usage data about how you use this website, such as your IP address, browser type, device, the pages you view and how you arrived at the site. This is collected through cookies and similar technologies. See my Cookie Policy at [link].

I do not knowingly collect information from children, and my services are intended for businesses and adults.

4. How and why I use your information

Under UK data protection law I need a lawful basis for using your information. These are mine:

Replying to enquiries and arranging intro calls
Lawful basis: Legitimate interests (responding to people who contact me), or steps taken at your request before entering into a contract

Providing quotes and delivering projects, Design Days and support
Lawful basis: Performance of a contract

Taking payment, invoicing and keeping financial records
Lawful basis: Performance of a contract and legal obligation (tax and accounting)

Keeping the website secure and understanding how it is used
Lawful basis: Legitimate interests, and consent where cookies require it

Featuring your project or testimonial in my portfolio
Lawful basis: Legitimate interests or your consent, depending on what you agree

Handling complaints, disputes or legal claims
Lawful basis: Legitimate interests and legal obligation

I do not sell your personal information, and I do not use it for automated decision-making or profiling.

5. Who I share it with

I only share your information with trusted services I use to run my business, and only as far as needed. These currently include:

  • Squarespace: hosts this website and handles forms, site analytics and, where used, billing.

  • Calendly: manages call bookings and the questions you answer when booking.

  • Squarespace Payments (powered by Stripe): processes invoice and payment link payments.

  • Google Workspace: hosts my email.

I may also share information where the law requires it, or to protect my legal rights. If my business were ever sold or transferred, your information may be passed to the new owner on the same terms.

These providers act on my behalf under their own data protection terms, and they are not allowed to use your information for their own purposes except as set out in their own privacy policies.

6. International transfers

Some of the services above, including Squarespace and Calendly, are based in or use servers in the United States and other countries outside the UK. Where your information is transferred outside the UK, I rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses, which the providers make available in their own terms.

7. How long I keep it

Enquiries that do not lead to a project
How long I keep it: Up to 12 months after our last contact

Client project files and correspondence
How long I keep it: Up to 6 years after the project ends, in case of queries or disputes

Invoices and financial records
How long I keep it: 6 years, as required for tax and accounting

Website analytics
How long I keep it: In line with the retention settings of the analytics provider

When information is no longer needed, I delete it or anonymise it.

8. Keeping your information safe

I use sensible measures to protect your information, including password-protected accounts, [two-factor authentication where available] and limiting access to myself. No method of storing or sending data is completely secure, but I take its protection seriously. If a data breach ever puts your rights at risk, I will tell you and the ICO as the law requires.

9. Your rights

Under UK data protection law you have the right to:

  • be informed about how your information is used (this policy does that);

  • access the personal information I hold about you;

  • correct information that is wrong or incomplete;

  • erase your information in certain circumstances;

  • restrict how I use your information in certain circumstances;

  • object to my use of your information where I rely on legitimate interests, and to direct marketing at any time;

  • data portability, meaning to receive some of your information in a reusable format; and

  • withdraw consent at any time where I rely on it, without affecting anything done before.

To use any of these rights, email me at [email address]. I will usually respond within one month. There is normally no charge, and I may ask for proof of identity to keep your information safe.

10. Cookies

This website uses cookies and similar technologies. You can read about them and manage your choices in my Cookie Policy at [link].

11. Links to other sites

This website may link to other sites, including social media platforms and client websites. I am not responsible for their privacy practices, so please read their policies.

12. Complaints

If you are unhappy with how I have handled your information, please contact me first at [email address] and I will do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

13. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed, and the latest version is always on this page.

14. Contact

Emily Lester
13 Castlegate, Tutbury
Staffordshire, DE13 9NT
emily@emilylester.co.uk