Privacy Policy

Last updated: 8 October 2026

This policy explains how Elaine Roselle Ltd (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit this website or use our services, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Elaine Roselle Ltd Company No. 16275681, registered in England & Wales Registered office: 128 City Road, London, EC1V 2NX Contact: hello@elaineroselle.com

What data we collect

• Contact/enquiry form data: name, email address, phone number, business name, and anything you write to us about your project.
• Newsletter/email list: email address, and engagement data (opens/clicks) if you subscribe.
• Website usage data: pages visited, approximate location (country/city level), device/browser type, collected via privacy-focused analytics (see Cookie Policy).
• Payment-related data: if you become a client, billing name and payment confirmation details. We do not store full card details ourselves; these are handled by our payment processor directly.
• Agreement record: when you send your kickoff brief, we keep a record that you ticked the box agreeing to our Client Services Agreement, in the brief email we receive.
• Website generator: the answers you type into the website generator stay in your browser and are never sent to us. If you choose to leave your email beside it, only that email address is sent, to Brevo, so we can send you the follow-up emails you asked for.

We do not knowingly collect data from anyone under 18. This site is intended for business owners and professionals.

Why we collect it, and our legal basis

Who we share it with

We don’t sell your data. We share it only with the service providers (“processors”) needed to run this business:

• Hosting/CDN: Cloudflare Pages
• Website CMS: GitHub (repository) + Decap CMS
• Email and contacts: Brevo, which stores enquiry and client contact details and sends our emails (including the website generator opt-in and any newsletter)
• Payment processing: Stripe, which takes card payments through Stripe Checkout. We never see or store full card details.
• Analytics: Cloudflare Web Analytics (cookie-free)
• Spam protection: Cloudflare Turnstile, which checks form submissions for bots

Some of these providers may process data outside the UK/EEA (e.g. the US). Where that happens, we rely on their standard contractual clauses or an equivalent approved transfer mechanism.

How long we keep it

• Enquiry data: up to 12 months if you don’t become a client, then deleted.
• Client project data: for the duration of the working relationship plus 6 years, to meet UK tax/accounting record-keeping obligations.
• Newsletter data: until you unsubscribe.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (for marketing emails, via the unsubscribe link)
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we’ve mishandled your data

To exercise any of these rights, email hello@elaineroselle.com.

Complaints

If you’re unhappy with how we’ve handled your personal data, please email hello@elaineroselle.com first. We’ll acknowledge your complaint, look into it, and tell you what we’ve found and what we’re doing about it. You can still complain to the ICO at any time.

Cookies

This site uses cookies. See our separate Cookie Policy for details on what we use and how to manage them.

Changes to this policy

We may update this policy as the business or its tools change. The “last updated” date at the top will always reflect the latest version.