Privacy Policy
Last updated: 7 May 2025
This Privacy Policy explains how Suzanne Barry ("I", "me", "my") collects, uses, and protects personal information you provide through suzannebarry.com (the "Site").
I am the data controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact: Please refer to contact form.
1. Information I Collect
The only personal information I collect is what you voluntarily provide through the contact form on this Site:
First name and last name
Email address
The content of your message
I do not collect payment information, location data, or any other personal details through this Site.
2. How I Use Your Information
I use the information you submit through the contact form solely to:
Respond to your enquiry
Communicate with you about the matter you have raised
Maintain a record of our correspondence
I do not use your information for marketing, do not add you to mailing lists without your explicit consent, and do not sell or share your information with third parties for commercial purposes.
3. Legal Basis for Processing
Under UK GDPR, my legal basis for processing your information is:
Legitimate interests — to respond to enquiries you have initiated
Consent — by submitting the contact form, you consent to me using your details to reply
You may withdraw consent at any time by contacting me via my contact form.
4. Where Your Information Is Stored
Contact form submissions are stored on Squarespace, the platform that hosts this Site. Squarespace acts as a data processor on my behalf. Squarespace's privacy practices are governed by their own policy, available at squarespace.com/privacy.
Squarespace may store data on servers outside the UK, including in the United States. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information in accordance with UK GDPR.
5. How Long I Keep Your Information
I retain contact form submissions for as long as necessary to address your enquiry and for a reasonable period afterwards in case of follow-up. Typically this means up to 24 months, after which I delete the correspondence unless an ongoing professional relationship requires otherwise.
6. Your Rights
Under UK GDPR, you have the right to:
Request access to the personal information I hold about you
Request correction of inaccurate information
Request deletion of your information
Object to processing of your information
Request restriction of processing
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact me via my contact form.
7. Security
I take reasonable steps to protect your information, including relying on Squarespace's encryption and security measures. However, no online transmission is completely secure, and I cannot guarantee absolute security.
8. Changes to This Policy
I may update this Privacy Policy from time to time. The "Last updated" date above will reflect the most recent version.