Image by Franck

Below is a summary of the updated General Data Protection Regulation (GDPR) and an explanation of how I use your data.


Customer: The person or organisation who is responsible for paying for my services

Consumer: The person or people who are the recipients of my services

As a sole trader, I am bound by law to ensure that any personal data I collect is:

  • processed lawfully, fairly and transparently

  • collected for specified, explicit and legitimate purposes such as the performance of our contract

  • adequate, relevant and limited to what is necessary

  • accurate and kept up to date where necessary

  • kept for no longer than is necessary where data subjects are identifiable

  • processed securely and protected against accidental loss, destruction or damage

Data subjects are inclusive of both the people who book and pay for my services, as well as those who are the consumers of my services. They will have the:

  • right to be informed about the processing of their personal data as necessary

  • right to rectification if their personal data is inaccurate or incomplete (requests to amend data will normally have to be processed within one month)

  • right of access to their personal data and supplementary information, and the right to confirmation that their personal data is being processed

  • right to be forgotten by having their personal data deleted or removed on request where there is no compelling reason for an organization to continue to process it (as an sole trader, I will have to respond without undue delay and within one month of the request)

  • right to restrict processing of their personal data, for example, if they consider that processing is unlawful, or the data is inaccurate

  • right to data portability of their personal data for their own purposes (they will be allowed to obtain and re-use their data)

  • right to object to the processing of their personal data for direct marketing, scientific or historical research, or statistical purposes

As a sole trader I will:

  • only collect personal data that is adequate, relevant and necessary

  • be open with customers and consumers about processing their data and allow them to monitor that processing as necessary

  • improve data security features

  • identify and limit any detrimental effects of data processing on individual privacy

Essential data held includes, but may not be limited to:

  • Name and address of customer and consumers

  • Email addresses and phone numbers of essential contacts related to the carrying out of an assignment

  • Email addresses and phone numbers of essential contacts related to submitting invoices and receiving payments

  • History of our working relationship for book keeping purposes only. I am required by law to make these available to the HMRC for up to seven years

Personal data will not be retained longer than necessary, unless there is a legal reason for extended retention. I will periodically review all of the data that I own and erase it from my systems when it no longer becomes necessary. 

If you believe that I hold data about you and would like to discuss it in more detail, please click the button below to get in touch.