Legal

Privacy policy

Last updated: 12 September 2026

Ledesmith is a trading name of Kirstie Wilson. I am committed to protecting your privacy and handling your personal data responsibly. This policy explains what data I collect, why I collect it, how I use it, and your rights under UK data protection law.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Kirstie Wilson, trading as Ledesmith
kirstie@ledesmith.co.uk

What data I collect

I collect personal data in the following ways:

  • Contact form and email enquiries: your name, email address, phone number (if provided), company name, and the content of your message.
  • Client work: contact details, company information, project briefs, and any other information you share with me in the course of our working relationship.
  • Website analytics: anonymised, aggregate data about how visitors use this website, collected via Google Analytics. This includes pages visited, time on site, approximate location (country/region level), device type, and referral source. See the cookie notice for details.

I process your personal data on the following lawful bases:

  • Legitimate interest: responding to enquiries submitted via the contact form or email, and understanding how visitors use the website so I can improve it.
  • Contract: processing data necessary to deliver services you have engaged me to provide.
  • Consent: where I ask for your explicit consent, for example if you sign up to receive email updates. You can withdraw consent at any time.

How I use your data

I use your personal data to:

  • respond to your enquiry
  • deliver the services you have engaged me for
  • send you information you have asked to receive
  • improve this website based on anonymised usage data

I will never sell your personal data to third parties. I will never use your data for purposes other than those described here without telling you first.

Who I share data with

I may share your data with the following types of third party, only where necessary:

  • Trusted freelance partners: if your project requires specialist support (for example, technical SEO), I may share relevant project information with a trusted freelance partner. This will always be discussed with you first.
  • Technology providers: I use tools such as Google Analytics (website analytics), email hosting, and cloud storage to run my business. These providers process data on my behalf and are bound by their own privacy policies and, where applicable, data processing agreements.

I do not transfer personal data outside the UK unless adequate safeguards are in place, in line with UK GDPR requirements.

How long I keep your data

I keep your data only as long as I need it:

  • Enquiries: if your enquiry does not lead to a working relationship, I will delete your data within 12 months.
  • Client data: I retain project records for up to six years after the end of our working relationship, in line with HMRC requirements and professional best practice.
  • Analytics data: Google Analytics data is retained for a maximum of two months before being automatically deleted.

Your rights

Under UK GDPR, you have the right to:

  • access the personal data I hold about you
  • ask me to correct inaccurate data
  • ask me to delete your data (where there is no legal reason for me to keep it)
  • object to my processing of your data
  • ask me to restrict how I process your data
  • request a copy of your data in a portable format

To exercise any of these rights, email me at kirstie@ledesmith.co.uk. I will respond within one month.

If you are not satisfied with how I have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

I may update this policy from time to time. Any changes will be posted on this page with an updated date. I encourage you to review this policy periodically.