Privacy Policy

Last updated:

6 February 2026

This privacy policy explains how AskCatherine (“we”, “us”, “our”) collects and uses your personal data when you visit this website, contact us, or work with us.

We are committed to protecting your privacy and handling your data fairly, lawfully and transparently.

1. Who we are and how to contact us

Data controller:

AskCatherine (Catherine Downes, sole trader)

Email: info [at] askcatherine.co.uk

Website: [https://askcatherine.co.uk] (and any related sites such as [https://askcatherine.nz])

If you have any questions about this policy or how we use your data, you can contact us by email in the first instance.

We are based in the United Kingdom and our use of your personal data is governed by the UK GDPR and the Data Protection Act 2018.

2. What personal data we collect

The data we collect depends on how you interact with us. We may collect:

2.1 Information you provide directly

Contact details: name, email address, phone number, business name, job title.
Enquiry details: the information you include when you contact us (e.g. about your business, goals, current marketing/social media).
Booking details: information you provide when booking a call, consultation or service.
Billing details: invoicing contact, billing address (if provided), and payment-related information. We do not store your full card details – these are handled securely by our payment provider (Stripe).
Training / consulting records: notes from calls, workshops, audits or 1:1 sessions that relate to your business and social media activity.

2.2 Information collected automatically

When you visit our website, we may automatically collect:

Technical data: IP address, browser type and version, device type, time zone, operating system.
Usage data: which pages you visit, how long you stay, how you navigate the site, and how you interact with content.

This may be collected via cookies and similar technologies (for example, through Google Analytics or similar tools).

2.3 Information from third parties

We may receive personal data about you from:

Email marketing platforms such as Mailchimp (e.g. when you sign up to receive newsletters or download a resource).
Analytics tools such as Google Analytics (aggregated information about website use).
Payment platforms such as Stripe (limited information about payments and status, not full card details).
Social media platforms (e.g. if you contact us via Instagram, Facebook, LinkedIn or similar).

3. Why we use your data (purposes) and lawful bases

We only use your personal data when we have a lawful basis to do so. Under UK GDPR, these are typically:

3.1 To respond to enquiries and provide services

To respond when you contact us.
To provide proposals, quotes, or information about our services.
To deliver consulting, strategy, training, “done-for-you” services and digital products you have requested or purchased.

Lawful basis:

Contract – processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
Legitimate interests – where we need to respond to your enquiry in a way you would reasonably expect.

3.2 To manage bookings, payments and client relationships

To schedule calls and sessions.
To send invoices, process payments via Stripe, and manage accounts.
To keep records of our work together (e.g. notes, action lists, follow-up points).

Lawful basis:

Contract – to perform our agreement with you.
Legal obligation – to meet tax and accounting requirements.

3.3 To send you updates, newsletters and marketing

To send you emails about new services, content, resources, or events.
To share practical tips, guides and updates about social media and marketing.

We may use Mailchimp (or a similar provider) to manage email lists and send communications.

Lawful basis:

Consent – where you have actively opted in (e.g. sign-up form, lead magnet).
Legitimate interests – where you are an existing client or contact and you’d reasonably expect relevant updates (you can opt out at any time).

You can unsubscribe from marketing emails at any time by using the link in our emails, or by contacting us at info [at] askcatherine.co.uk.

3.4 To improve our website and services

To understand how visitors use our site (for example, using Google Analytics).
To troubleshoot, keep the site secure, and improve user experience.
To review which content is most useful and relevant.

Lawful basis:

Legitimate interests – to run, improve and protect our business and website.
Consent – for non-essential analytics cookies where required.

3.5 To comply with legal obligations and protect our rights

To keep records for tax and legal purposes.
To handle complaints, disputes or legal claims.
To protect our business from fraud or misuse.

Lawful basis:

Legal obligation – where the law requires us to keep or share certain information.
Legitimate interests – to establish, exercise or defend legal claims.

4. Who we share your data with

We do not sell your personal data. We may share it with:

4.1 Service providers

Third-party providers who help us run our business, such as:

Website hosting and maintenance providers – to host and secure the site.
Email and newsletter platforms – e.g. Mailchimp, which we use to manage mailing lists and send emails.
Payment processing providers – e.g. Stripe, which processes online payments securely on our behalf.
Analytics providers – e.g. Google Analytics, which helps us understand website usage.
Online storage and productivity tools – e.g. cloud storage for documents and client notes.

These providers only process your data on our instructions and must keep it secure.

4.2 Professional advisers

We may share data with:

Accountants (for bookkeeping, invoicing and tax).
Legal advisers where required.

4.3 Authorities and regulators

We may share information with:

Government bodies such as HM Revenue & Customs (HMRC), where required by law.
The Information Commissioner’s Office (ICO) or other regulators in connection with complaints or investigations.

If you’d like a current list of our main third-party processors, you can contact us at info [at] askcatherine.co.uk.

5. International transfers

Some of our service providers (for example, Mailchimp, Stripe or Google) may be based outside the UK, or may store data on servers located outside the UK.

Where your personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as:

An adequacy decision by the UK government; or
UK-approved standard contractual clauses or equivalent legal mechanisms.

You can contact us for more information about how we protect data when it is transferred internationally.

6. How long we keep your data

We only keep your personal data for as long as necessary for the purposes set out in this policy, including:

Enquiry data: normally up to 12–24 months after our last interaction, unless you become a client.
Client records: for the duration of our work together and then typically up to 6–7 years afterwards to meet tax, accounting and legal requirements.
Marketing data: until you unsubscribe or object, or we decide to delete it as part of list cleaning.

When we no longer need your data, we will delete it or anonymise it.

7. Cookies and similar technologies

Our website may use cookies and similar technologies to:

Make the site work properly.
Enable basic functions like page navigation.
Understand how visitors use the site (for example, through Google Analytics).

Some cookies are essential for the site to function. Non-essential cookies (including analytics and marketing cookies) may require your consent under UK law.

You can manage cookies through your browser settings, and – where implemented – through any cookie banner or preferences tool on the site.

If you’d like more detail on the cookies used, please contact us at info [at] askcatherine.co.uk.

8. Your data protection rights

Under UK data protection law, you have rights in relation to your personal data, including:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of any inaccurate or incomplete data.
Right to erasure – to ask us to delete your personal data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain circumstances.
Right to object – to object to processing based on our legitimate interests and to direct marketing.
Right to data portability – to request that we transfer your data to you or another organisation, where technically feasible and applicable.
Right to withdraw consent – where we rely on consent (for example, for marketing emails), you can withdraw it at any time.

To exercise any of these rights, please email info [at] askcatherine.co.uk. We may need to verify your identity before responding.

9. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue:

Email: info [at] askcatherine.co.uk

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

10. Third-party websites

Our website may contain links to other websites (for example, social media platforms, booking tools, payment pages, or resources). We are not responsible for the privacy practices of those third-party sites. You should read their privacy policies before providing personal data to them.

11. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page will be changed accordingly. We encourage you to review this page periodically so you remain informed about how we use your data.

If the changes are significant, we may also notify you by email (if appropriate) or by a notice on our website.