DRAFT FOR NATASHA TO REVIEW - NOT APPROVED FOR PUBLICATION
DRAFT POLICY

Privacy Notice

This draft is written in plain English and is not legal advice. It has not been checked by a solicitor. Every highlighted prompt needs Natasha’s answer before this page can be finalised.

Who is responsible for this website

This website belongs to Poppy Parsnip Styles, the personal styling business of Natasha Tarozzi, based in St Albans. [Natasha to confirm: legal or trading name, for example whether Natasha trades as a sole trader under her own name or another trading name]

You can contact Poppy about anything in this notice by messaging @poppyparsnipstyles on Instagram. [Natasha to confirm: contact email for privacy questions]

What personal information is collected

The enquiry form on the contact page asks for your name, your email address, which service you are interested in and a short message. The form prepares your message for you to copy and paste into an Instagram message to Poppy. The website itself does not send, store or pass on anything you type.

If you book an intro session, the booking page belongs to Calendly. Anything you type there is collected by Calendly, not by this website.

Please do not include sensitive personal information (for example about your health) in an enquiry. It is not needed for a styling enquiry, and this notice does not cover handling it. [Natasha to confirm: whether any sensitive information is ever needed, and how it would be handled]

Why the information is used

If you send Poppy an enquiry, your details are used to reply to you and, if you go ahead, to arrange and provide your styling service. [Natasha to confirm: purposes and the lawful basis for each, for example legitimate interest in responding to enquiries, or consent]

Where your information goes

Enquiries currently reach Poppy through Instagram, because you paste your prepared message into an Instagram message yourself. Instagram (Meta) therefore handles that conversation under its own privacy terms. If you book an intro session, you are taken to Calendly, where Calendly collects the details you type into its booking form under its own privacy terms. [Natasha to confirm: whether enquiries will also be handled by email, and which providers]

The website is hosted by [Natasha to confirm: hosting provider]. The site does not currently use analytics or advertising trackers. [Natasha to confirm: any form, booking, email or analytics providers that handle visitor information]

How long information is kept

[Natasha to confirm: how long enquiry and client information is kept, for example how long after an enquiry or a completed service details are deleted]

Sharing and transfers outside the UK

Your information is not sold or shared with third parties for marketing. If you contact Poppy through Instagram, Meta may process that conversation outside the UK under its own arrangements. [Natasha to confirm: whether any other provider transfers information outside the UK, and under what safeguards]

Your rights

Under UK data protection law you have rights over your personal information, including the right to ask for a copy of it, to have it corrected or deleted, to object to or restrict how it is used, and in some cases to have it transferred. To use any of these rights, contact Poppy using the details above.

If you are unhappy with how your information has been handled, you can raise a concern with the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this notice

This notice may be updated as the website and services develop. The date of the latest version will be shown here. [Natasha to confirm: how Natasha wants to date and version this notice]