LEGAL POLICIES
Last updated: 20 October 2026Who I am
This website is run by Emily Hart, trading as Emily Hart Design. I'm a sole trader based in Ashtead, Surrey, and I design Squarespace websites, carry out website audits, and run Designer Hour and Designer for a Day sessions for coaches, therapists and wellness practitioners.
I am the data controller for the personal information described in this policy. This means I decide how and why it is used, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025. I am registered with the Information Commissioner's Office (ICO). My registration number is [ICO number].
If you have any questions about this policy or your information, please email me at hello@emilyhartdesign.com.
What this policy covers
This website is run by Emily Hart, trading as Emily Hart Design. I'm a sole trader based in Ashtead, Surrey, and I design Squarespace websites, carry out website audits, and run Designer Hour and Designer for a Day sessions for coaches, therapists and wellness practitioners.
I am the data controller for the personal information described in this policy. This means I decide how and why it is used, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025. I am registered with the Information Commissioner's Office (ICO). My registration number is [ICO number].
If you have any questions about this policy or your information, please email me at hello@emilyhartdesign.com.
Information I collect
When you contact me or fill in a form
Your name, email address, business name, website address and anything else you choose to tell me in your message or enquiry form.
When you book a call or a service
Your name, email address, phone number (if you give it), the date and time you choose, and your answers to any booking questions.
When you buy a website audit
Your name, email address, business name, website address and your answers to the audit questionnaire, including the areas you'd like me to focus on. I review your live website only. I don't need, or ask for, access to your account.
When you become a client
Your name, business name, email address, phone number, billing address, project details, the content you send me for your website (such as text, images and contributor access to your Squarespace site), and records of our emails and calls.
When you pay me
Payments are taken through Moxie invoices, using Stripe or PayPal. I do not see or store your full card details. I receive confirmation of payment, the amount, and your name and email address.
When you join my mailing list or download a free resource
Your name and email address, and whether you open or click my emails.
When you visit my website
Information about how you use the site, such as the pages you visit, how long you stay, the device and browser you use, and your approximate location (town or region, not your exact address). This is collected using cookies. See the Cookies section below.
How I use your information, and why
UK data protection law requires me to have a lawful reason for using your information. Here's what I use it for and the reason that applies.
Replying to your enquiry: legitimate interests, so I can respond to people who contact me
Booking and holding calls: taking steps at your request before we agree to work together
Delivering website design, audits and support: performing our contract
Sending invoices and keeping financial records: legal obligation (HMRC record keeping) and performing our contract
Sending my newsletter, free guides and occasional offers: your consent, which you can withdraw at any time
Understanding how people use my website so I can improve it: your consent, given through the cookie banner
Sharing your testimonial, name, business name and photo on my website: your consent, which I will always ask for first
Who I share your information with
I never sell your information. I only share it with trusted services that help me run my business, and only as much as they need. These include:
Squarespace: website hosting, forms, email newsletters and call scheduling (privacy policy)
Moxie: client management, booking, proposals, contracts, forms and invoicing (privacy policy)
Stripe and PayPal: payment processing (Stripe privacy policy, PayPal privacy policy)
Google: Google Analytics for website statistics, and Google Drive for storing project files (privacy policy)
Asana: project management (privacy policy)
Tella: screen recordings of your live website, used to deliver website audits (privacy policy)
Video call tools: discovery calls, Designer Hour and Designer for a Day sessions
I may also share information if the law requires it, or with my accountant for tax purposes.
International transfers
Some of these services are based outside the UK, mainly in the United States. Where your information is transferred outside the UK, it is protected by recognised safeguards. These include the UK Extension to the EU-US Data Privacy Framework, or contract terms approved by the UK government.
How long I keep your information
Enquiries that don't lead to work: up to 2 years after our last contact
Client records, contracts and invoices: 6 years after the end of the tax year they relate to, as HMRC requires
Website content and files for client projects: up to 12 months after the project ends, unless you ask me to delete them sooner or we have an ongoing support plan
Mailing list details: until you unsubscribe
Testimonials: until you ask me to remove them
Google Analytics data: up to 14 months, then automatically deleted
Your rights
You have the right to:
ask for a copy of the information I hold about you
ask me to correct information that is wrong or incomplete
ask me to delete your information
ask me to limit how I use your information
object to me using your information for legitimate interests
ask me to send your information to another organisation
withdraw your consent at any time, for example by unsubscribing from my emails
I don't make automated decisions about you, and I don't use profiling.
To use any of these rights, email me at hello@emilyhartdesign.com. I will reply within one month. There is no charge.
Cookies
Cookies are small files saved on your device when you visit a website.
My website uses:
Essential cookies from Squarespace, which the site needs to work properly and securely
Analytics cookies from Google Analytics and Squarespace, which tell me how visitors use the site
Analytics cookies are only set if you accept them in the cookie banner. You can change your choice at any time using the cookie settings link on the site, or by clearing cookies in your browser.
Fonts
This website displays its fonts using Google Fonts. To show the site correctly, Google may receive your IP address and basic information about your browser and device.
Blog comments and likes [delete this part if comments and likes are switched off on your blog]
If you comment on a blog post, I collect your name (shown with your comment), and optionally your email address and website. If you like a post, basic information about your browser, device and IP address is used to stop the same post being liked twice in one visit.
Keeping your information safe
I use secure, password-protected services with two-step verification where available. Where possible, I ask to be added as a contributor to your Squarespace site rather than being sent your password. You can remove my access at any time once the project is finished.
If you think your information may have been put at risk, please email me straight away at hello@emilyhartdesign.com.
Links to other websites
My website may link to other websites, including client websites in my portfolio. I'm not responsible for how other websites handle your information, so please read their privacy policies.
Children
My website and services are for business owners. I don't knowingly collect information from anyone under 18. If you think a child has sent me their details, please let me know and I'll delete them.
Changes to this policy
I may update this policy from time to time. The date at the top shows when it was last changed.
Making a complaint
If you're unhappy with how I've handled your information, please tell me first so I can put it right.
How to complain to me
Email me at hello@emilyhartdesign.com with the subject line "Data protection complaint".
I'll acknowledge your complaint within 30 days.
I'll look into it without undue delay and keep you updated.
I'll let you know the outcome and what I've done about it.
Complaining to the ICO
If you're not satisfied with my response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.