Privacy policy

Last updated: 27 October 2026

Who I am

This website is run by Yvonne Hemmings, trading as Yvonne Hemmings Online ("I", "me"). I'm the data controller for the personal information collected through this website. I'm registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, under registration number C2069200.

If you have any questions about this policy or your information, email me at yvonne@yvonneonline.com.

What I collect and why

• Contact form. When you send an enquiry, I collect your name, email address, any subject and your message. I use this to reply to you and, if you'd like, to arrange a discovery call. My lawful basis is legitimate interests (answering your enquiry) or taking steps to enter into a contract with you.
• Booking a call. Discovery calls are booked through Calendly. Calendly collects the details you enter when booking and shares them with me so we can meet. Calendly's own privacy notice also applies.
• Emails. If you email me directly, I keep our correspondence so I can help you and keep a record of what we agreed.
• Clients. If you become a client, I'll hold the information needed to deliver my services and invoice you. Where I handle personal data on your behalf, I act as your data processor under the terms of our agreement.

I don't sell your information, and I won't add you to a mailing list without your consent.

Who I share it with

I only share your information with the trusted services I use to run my business, and only as much as they need:

• IONOS, who host this website and my email
• WPForms, the plugin that runs the contact form on this website
• Calendly, for booking calls
• My accountant, and HMRC where the law requires it

Some of these providers may process data outside the UK. Where they do, they use appropriate safeguards such as the UK's approved data transfer agreements.

Cookies

This website uses only the cookies it needs to work and stay secure. I don't use advertising cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers. If I add analytics in the future, I'll update this policy and ask for your consent first.

How long I keep it

Enquiries that don't go any further are deleted within 12 months. Client records are kept for six years after our work ends, because UK tax law requires it.

How I keep it safe

I use secure, password-protected systems with two-factor authentication where available, and I only keep what I actually need. I'm also fully insured with Hiscox.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information I hold about you
• ask me to correct or delete it
• object to, or ask me to restrict, how I use it
• ask me to transfer it to someone else
• withdraw your consent at any time, where I rely on consent

To use any of these rights, email yvonne@yvonneonline.com. I'll reply within one month.

Complaints

If you're unhappy with how I've handled your information, please talk to me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.