Privacy Policy

---

Last updated: March 2026

1. Introduction

This Privacy Policy explains how EMMA SMITH COMMUNICATIONS LTD (“we”, “us”, “our”) collects, uses and protects personal data when you visit our website or interact with us.

We are committed to handling personal data lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company Name: EMMA SMITH COMMUNICATIONS LTD
Company Number: 17065072
Registered Office: 55 Pantbach Road, Cardiff, CF14 1TW
Registered in: England and Wales

If you have any questions about this policy, you can contact us at:
Email: emma@emmasmithcommunications.co,uk

2. What personal data we collect

We may collect and process the following types of personal data:

• Contact information — name, email address, phone number, organisation, and any details you provide via our contact form or email.
• Website usage data — IP address, browser type, pages visited, time spent on the site, and other analytics data.
• Cookies and tracking technologies — used to improve website performance and understand how visitors use the site.
• Project‑related information — details you share when discussing potential or ongoing work.

We do not collect special category data unless explicitly provided by you for a specific purpose.

3. How we collect personal data

We collect data in the following ways:

• When you contact us via the website, email or phone
• When you engage us for consultancy services
• When you visit our website (via analytics and cookies)
• When you connect with us on social media

4. How we use your personal data

We use personal data for:

• Responding to enquiries and providing consultancy services
• Managing client relationships and project delivery
• Sending administrative information (e.g., proposals, invoices)
• Improving our website and understanding visitor behaviour
• Meeting legal, regulatory and financial obligations

We only process personal data where we have a lawful basis, such as:

• Contract — to deliver services you have requested
• Legitimate interests — to operate and improve our business
• Legal obligation — for accounting, tax or regulatory compliance
• Consent — where you have explicitly agreed (e.g., optional cookies)

5. Sharing your data

We do not sell or rent personal data. We may share data with:

• Professional service providers (e.g., accountants, IT support)
• Website hosting and analytics providers
• Legal or regulatory bodies where required by law

All third parties are required to keep your data secure and use it only for the purposes we specify.

6. International transfers

Some of our service providers (e.g., cloud or analytics tools) may store data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

7. How long we keep your data

We retain personal data only for as long as necessary:

• Client project records: typically 6 years for legal and tax purposes
• Enquiry emails: up to 12 months if no project proceeds
• Analytics data: according to the retention settings of our analytics provider

8. Your rights under UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent (where consent is the basis for processing)

To exercise any of these rights, contact us at the email above.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

9. Cookies

Our website uses cookies to:

• Improve site performance
• Understand visitor behaviour
• Enable essential website functions

You can control or disable cookies through your browser settings.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.