Privacy Policy
Last updated: 11 September 2026
I take privacy seriously and aim to collect and use personal information only where it is genuinely needed.
This privacy policy explains what information I collect through this website and in the course of providing my services, why I use it, how long I keep it and what rights you have.
Who I am
I am Katie Gowers, an independent data specialist and consultant.
For data-protection purposes, I am the controller of personal information collected directly through this website and through my business relationships, unless otherwise agreed in writing.
If you have any questions about this policy or how I use your personal information, contact:
Katie Gowers
Email: hello@katiegowers.co.uk
Information I collect
The information I collect depends on how you interact with me.
If you use my contact form, I may collect:
your first and last name;
your organisation;
your email address;
your telephone number, if you choose to provide it; and
the information you include in the “How can I help?” field.
Please do not include confidential, sensitive or unnecessary personal information in an initial enquiry.
If you become a client, I may also process information needed to scope, manage and deliver the work, such as:
business contact details;
correspondence and meeting notes;
project requirements and documentation;
information needed for contracts, invoices and payments; and
data or files supplied for the agreed project.
Where project data contains personal information about other people, I ask clients to remove unnecessary identifying information before sharing it with me wherever possible.
If I introduce a mailing list or newsletter, I may collect your name and email address when you choose to subscribe.
Why I use personal information
I use personal information only where I have a valid reason to do so.
To respond to enquiries and discuss potential work
I use the information you provide to reply to you, understand your enquiry and decide whether I may be able to help.
My lawful basis is normally legitimate interests: it is in my legitimate business interests to communicate with people who contact me about my services.
Where our discussions are specifically about entering into a contract, processing may also be necessary to take steps at your request before entering into that contract.
To provide services to clients
I use client information to scope, manage and deliver agreed work, communicate about the project and meet my contractual commitments.
The lawful basis will normally be performance of a contract or taking steps before entering into a contract.
To meet legal and financial obligations
I may retain information where necessary for accounting, tax, insurance or other legal obligations.
The lawful basis is legal obligation.
To run and improve this website
I use Squarespace to host and operate this website. Squarespace may process technical information relating to website visits and provides website analytics.
Where non-essential analytics cookies or similar technologies require consent, they should only be used after you have chosen to accept them. Squarespace provides controls for disabling analytics cookies and displaying an opt-in cookie banner for UK and EU visitors.
To send marketing emails or newsletters
If I introduce a newsletter, I will only send marketing emails to people where I have an appropriate lawful basis to do so.
Where I ask you to actively subscribe, I will normally rely on consent. You will be able to unsubscribe at any time.
Who I share information with
I do not sell personal information.
I use trusted service providers where necessary to operate my business. These currently include:
Squarespace
My website is hosted and managed using Squarespace. Contact forms and website functionality may therefore involve processing by Squarespace.
Google Workspace
I use Google Workspace for business email and related business administration. Website enquiries submitted through Squarespace are emailed to my Google Workspace account.
I may also share information with professional advisers, insurers, accountants, legal advisers or public authorities where reasonably necessary or legally required.
If I introduce additional services, such as an email-marketing platform, I will update this policy where necessary.
International transfers
Some of the service providers I use are international organisations and personal information may be processed outside the UK.
Where personal information is transferred internationally, I take reasonable steps to ensure that an appropriate legal mechanism or safeguard is in place, such as UK adequacy regulations or approved contractual safeguards.
How long I keep information
I do not keep personal information indefinitely.
As a general guide:
Enquiries that do not become projects: normally retained for up to 12 months after the last meaningful contact, unless there is a good reason to retain them longer.
Client project data: normally deleted within 60 days after the project has ended, unless a different retention period is agreed in the Statement of Work or there is a legitimate reason to retain particular information.
Contracts, invoices and financial records: retained for as long as necessary to meet legal, accounting and tax requirements.
Marketing information: retained until you unsubscribe or withdraw your consent, subject to keeping minimal suppression information where necessary to make sure you are not contacted again.
I may retain information for longer where necessary to establish, exercise or defend legal claims.
Customer and project data
Some projects may involve datasets supplied by clients.
Clients are responsible for ensuring that they have the right to provide the data and for removing personal or sensitive information that is not necessary for the work.
I ask clients not to provide unnecessary personal information, passwords, login credentials or identifiable customer information unless it has been specifically agreed as necessary for the project.
For my Customer Review Analytics suitability check, identifiable customer information is not required.
Where I process personal data solely on a client’s instructions, additional data-processing terms may apply.
Cookies and website analytics
This website uses cookies and similar technologies, including Squarespace Analytics. Non-essential analytics cookies are only used where you choose to allow them. For more information, including how to manage your preferences, see my Cookie Policy.
Your rights
Depending on the circumstances and the lawful basis being relied upon, UK data-protection law gives you rights relating to your personal information.
These may include the right to:
ask for a copy of the personal information I hold about you;
ask me to correct inaccurate or incomplete information;
ask me to delete your information in certain circumstances;
ask me to restrict how your information is used;
object to certain uses of your information;
receive certain information in a portable format; and
withdraw your consent where processing is based on consent.
Not all rights apply in every situation.
You also have the right to object to processing based on legitimate interests.
To exercise your rights, email hello@katiegowers.co.uk.
Automated decision-making
I do not currently use personal information collected through this website to make solely automated decisions that have legal or similarly significant effects on individuals.
Complaints
If you have concerns about how I have handled your personal information, please contact me first at:
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Information Commissioner’s Office
Changes to this privacy policy
I may update this privacy policy when my services, systems or legal obligations change.
The latest version will always be published on this website with the date of the most recent update.