Privacy Policy

This privacy policy applies to the Messy Little Empire website and everything I sell through it. For the purposes of UK data protection law, the data controller is Messy Little Empire, a small business operated by Gill in the United Kingdom.

My business address is Office 7297, 58 Peregrine Road, Hainault, Ilford, Essex, IG6 3SZ.

If you have any questions about this policy or how I handle your data, you can reach me at Gill@MessyLittleEmpire.com.

I only collect the data I genuinely need to run this small business and help you. Depending on how you use the site, that may include:

• Email sign-up data: your first name (if you give it) and your email address when you request a free guide, subscribe to updates or join a waitlist.
• Order information: your name, email address, billing details and a record of what you bought when you purchase a digital product or a service. Card details are handled directly by my checkout provider, Payhip, and are not stored by me.
• Service delivery data: if you buy a done-for-you service such as a Pinterest Audit or the Traffic Engine, the information you share with me to deliver it, which may include access to your Pinterest account, your branding, images and other business details you send over.
• Contact and email correspondence: the content of any message you send me and the details you include in it.
• Analytics and cookie data: information about how you use the site, such as pages visited, device and browser type and approximate location, collected via cookies and similar technologies. See my Cookie Policy.

Please do not send me sensitive personal information unless it is genuinely necessary. I will never ask you for things like bank card numbers by email.

Under UK GDPR I must have a lawful basis to process your personal data. I rely on the following:

• Consent: for sending marketing emails and newsletters, and for non-essential cookies. You can withdraw consent at any time.
• Contract: to process and deliver your purchases, provide your service and respond to order-related queries.
• Legitimate interests: to run, secure and improve my website and products, understand how the site is used, prevent fraud and respond to enquiries, provided this is not overridden by your rights.
• Legal obligation: where I must keep certain records, for example for tax and accounting purposes.

I use the data I collect to:

• deliver the free guides, digital products or services you have requested or bought;
• send you marketing emails and updates where you have consented, which you can opt out of at any time;
• process payments (via my checkout provider, Payhip), issue receipts and keep accurate financial records;
• respond to your messages and provide support;
• deliver done-for-you services and communicate with you while I do;
• understand and improve how the site and products perform;
• keep the site secure and prevent misuse.

I do not sell, rent or share your personal data with third parties for their own marketing purposes.

I use trusted third-party providers to run the business. These processors handle data on my behalf under appropriate agreements. They include:

Each provider has its own privacy policy explaining how it handles data. I only share what is necessary for these services to function.

I use cookies and similar technologies to make the site work, understand how it is used and, where you consent, for marketing. You can manage your choices through the cookie banner on the site. For full details, please read my Cookie Policy.

I keep your personal data only for as long as I need it for the purposes set out above, or for as long as the law requires.

• Marketing data: until you unsubscribe or ask me to remove it, after which it is deleted or anonymised within a reasonable period.
• Order and financial records: kept for 6 years to meet UK tax and accounting obligations.
• Service delivery data: kept while I am delivering your service and for a reasonable period afterwards, then deleted or returned on request.

Some of my providers may store or process data outside the UK. Where your information is transferred outside the UK, I rely on UK "adequacy" regulations where they apply, or on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, so your data stays protected to UK standards.

You have the following rights over your personal data:

• Access: request a copy of the data I hold about you.
• Rectification: ask me to correct inaccurate or incomplete data.
• Erasure: ask me to delete your data in certain circumstances.
• Restriction: ask me to limit how I use your data.
• Object: object to processing based on legitimate interests, and to direct marketing at any time.
• Portability: request your data in a portable format in certain circumstances.
• Withdraw consent: withdraw consent for marketing or non-essential cookies at any time.

To exercise any of these rights, email me at Gill@MessyLittleEmpire.com. I will respond within one calendar month. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113, though I would always rather you came to me first so I can put things right.

My products and services are intended for adults aged 18 and over. I do not knowingly collect data from children. If you believe a child has provided me with personal data, please contact me and I will investigate and take any appropriate action.

I may update this policy from time to time. When I do, I will change the "Last updated" date at the top of the page. Significant changes may also be shared by email where appropriate. Continued use of the site after any change means you accept the updated policy.

For any privacy questions, requests or complaints, contact me at Gill@MessyLittleEmpire.com.