Privacy Policy

Introduction

Velvet Glimmer is committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your information.

By using our website or services, you acknowledge that you have read and understood this policy.

Information We Collect

Information You Provide Directly

When you contact us or book a consultation, we collect information you voluntarily provide, including:

• Your name and email address
• Details about your financial situation and goals, as shared in consultation questionnaires
• Any additional information you choose to provide during correspondence or sessions

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Pages visited and time spent on each page
• Referring website or search terms
• Device and operating system information

This data is collected through cookies and similar technologies. You can control cookie preferences through our cookie banner or browser settings.

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• To respond to your enquiries and schedule consultations
• To prepare for and conduct financial education sessions
• To provide personalised recommendations and follow-up materials
• To maintain records of our interactions for continuity of service

Communication

• To send appointment confirmations and reminders
• To share session summaries and educational resources
• To respond to questions or requests for additional support

Website Improvement

• To analyse how visitors use our website and identify areas for enhancement
• To understand which services generate the most interest
• To improve navigation and user experience

Legal Compliance

• To maintain records as required by applicable laws and regulations
• To comply with legal obligations or respond to lawful requests

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to deliver the services you have requested or to take steps at your request before entering into a contract.
• Legitimate Interests: We have a legitimate interest in improving our website, understanding client needs, and operating our business effectively, provided this does not override your rights.
• Consent: Where we rely on consent (such as for certain cookies), you have the right to withdraw consent at any time.
• Legal Obligation: We process data when required by law, such as maintaining financial records.

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We share your data only in the following limited circumstances:

Service Providers

We work with trusted third-party providers who assist with specific business functions, such as email delivery, website hosting, and analytics. These providers have access to personal information only as necessary to perform their services and are contractually obligated to protect your data.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Velvet Glimmer, our clients, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal requirements.

• Enquiry data is retained for two years from last contact
• Client consultation records are retained for seven years to comply with financial record-keeping obligations
• Website analytics data is retained for 26 months

After the retention period, we securely delete or anonymise your data.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with restricted access
• Regular security assessments and updates
• Staff training on data protection principles

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

Under UK data protection law, you have several rights regarding your personal information:

Right of Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete information.

Right to Erasure

You can request deletion of your personal data, subject to certain legal exceptions.

Right to Restrict Processing

You can ask us to limit how we use your data in certain circumstances.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

Cookies

Our website uses cookies to enhance functionality and improve user experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Third-Party Links

Our website may contain links to external sites not operated by Velvet Glimmer. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

International Data Transfers

Your personal data is stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure adequate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: Velvet Glimmer Financial Education, 42 Clifton Heights, Bristol BS8 4HJ, United Kingdom

Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately. More information is available at velvet-glimmer.com.