Privacy policy
Last updated: 17 July 2026 · Effective from: 17 July 2026
1. Introduction
Jessica May Design Limited ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information about visitors to our website at jessicamaydesign.co.uk, clients, and anyone who purchases our digital resources or advisory services.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Data Controller: Jessica May Design Limited
Registered office: Catherine House Station Road, Chinley, High Peak, England, SK23 6AR
Company registration number: 13436623
ICO registration number: ZC203057
Contact: enquiries@jessicamaydesign.co.uk
3. Personal Data We Collect
We collect and process the following categories of personal data.
3.1 Information you give us directly
Contact enquiries: name, email address, phone number, project details you share via our contact form or by email.
Advisory bookings: name, email address, phone number, and any pre-call context you provide when booking a call through our scheduling system.
Digital resource purchases: name, email address, billing address, and delivery email for downloads.
Correspondence: any information you provide when contacting us for support, enquiries, or feedback.
3.2 Information collected automatically
Technical data: IP address, browser type, device information, operating system, referring URL, and pages visited on our website.
Cookies and similar technologies: see Section 10 below.
3.3 Information from third parties
We may receive limited data from our payment processor (Stripe) confirming the status of a payment. We do not receive or store your full card details.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
To respond to enquiries and provide the services or information you request.
To fulfil orders for digital resources (delivering downloads and confirmations).
To administer advisory calls (scheduling, reminders, follow-up).
To process payments securely via our third-party payment processor.
To manage our client relationships and provide customer support.
To operate, maintain, and improve our website.
To comply with legal, regulatory, and accounting obligations.
5. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
Performance of a contract: to deliver digital resources, provide advisory calls, and manage bookings you have made.
Legitimate interests: to respond to your enquiries, improve our services, maintain website security, and prevent fraud.
Legal obligation: to retain financial records (e.g. invoices) as required by HMRC and other applicable law.
Consent: where required, for example for optional cookies. You can withdraw consent at any time.
6. Who We Share Your Data With
We do not sell your personal data. We share it only with trusted third-party service providers who process it on our behalf, under contracts that require them to protect your data:
Squarespace, Inc.: website hosting, digital commerce, and analytics.
Acuity Scheduling (a Squarespace product): management of advisory call bookings, reminders, and confirmations.
Stripe Payments UK Ltd: secure payment processing for digital resources and advisory services.
Google (Workspace): email correspondence and calendar (where used for scheduling).
Microsoft Teams: for advisory calls delivered by video, where clients elect that format.
Professional advisers: our accountants, insurers, or legal advisers, where necessary and under confidentiality.
Regulators and authorities: where required by law (e.g. HMRC, courts, law enforcement).
7. International Data Transfers
Some of our service providers (including Squarespace and Stripe) are based outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK GDPR — such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework — to ensure your data receives an equivalent level of protection.
8. Data Retention
We keep your personal data only for as long as necessary for the purposes set out in this policy:
Enquiry data: up to 24 months from your last contact, unless you become a client.
Client and booking records: for the duration of the engagement plus 7 years, to meet HMRC and legal record-keeping obligations.
Payment and transaction records: 7 years, as required by UK tax law.
Website analytics data: as configured by our analytics providers, typically 24 months or less.
9. Your Rights
Under UK GDPR you have the following rights:
Right of access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure: request deletion of your personal data in certain circumstances.
Right to restrict processing: ask us to limit how we use your data.
Right to data portability: receive your data in a structured, commonly used format.
Right to object: to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent.
To exercise any of these rights, please contact us at enquiries@jessicamaydesign.co.uk. We will respond within one month.
10. Cookies
Our website uses cookies and similar technologies provided by Squarespace to enable core functionality, remember your preferences, and understand how visitors use the site. You can control cookies through your browser settings; disabling cookies may affect the functionality of the site.
For details of the specific cookies used by our platform, see Squarespace's cookie policy at squarespace.com/cookie-preferences.
11. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Our service providers (Squarespace, Stripe, and others) maintain industry-standard security practices, including encryption in transit and at rest.
12. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when changes were made. We encourage you to review this policy periodically.
14. Contact Us
Jessica May Design Limited Email: enquiries@jessicamaydesign.co.uk Phone: 01663 434483 Website: jessicamaydesign.co.uk