Legal
Privacy Notice
The short version
This website sets no cookies, runs no analytics, and contains no advertising or tracking pixels. Fonts and scripts are served from this domain rather than a third-party network, so simply reading these pages does not share your details with anyone.
The only personal data collected is what you choose to type into the enquiry form, or send us by email.
Who we are
Elizabeth Rossetti Consultancy ("we", "us") is the data controller for personal data collected through this website.
Contact: elizabeth@elizabethrossetti.co.uk
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name | To address you correctly in our reply | Legitimate interests |
| Email address | To reply to your enquiry | Legitimate interests |
| Business name (optional) | To understand your context before responding | Legitimate interests |
| Service of interest (optional) | To direct your enquiry appropriately | Legitimate interests |
| Your message | To understand and answer what you have asked | Legitimate interests |
The legitimate interest is responding to a business enquiry that you initiated. We do not use any of this for marketing, we do not add you to a mailing list, and we do not sell or share it.
How the enquiry form works
When you submit the form, the details you entered are sent directly to a secure database and stored there so we can read and respond to your enquiry. Nothing else about you is recorded. We do not attach your IP address, browser or location to the enquiry.
That database is provided by Supabase, who act as our data processor. It is hosted in the United Kingdom (London), so your enquiry does not leave the UK. See Supabase's privacy policy.
Only we can read submitted enquiries. The website itself has permission to add a new enquiry and nothing more. It cannot read, change or delete any enquiry, including your own, once submitted.
So that we notice your enquiry promptly, a copy is also emailed to us. That email is delivered by Resend, who act as our data processor for sending it. See Resend's privacy policy.
If the database is ever unreachable, the form falls back to opening your own email application with the message pre-filled, so your enquiry is not lost. In that case it reaches us as an ordinary email instead.
Server logs
This site is hosted by Vercel Inc. Like any web host, Vercel records technical request data — including IP addresses — in server logs for security and reliability. We do not use these logs to identify individuals. See Vercel's privacy policy.
Links to other sites
This site links to Instagram. If you follow that link, Instagram's own privacy policy applies to anything you do there. We have no control over it and receive nothing from it.
How long we keep it
Enquiries are kept for up to 24 months after our last contact with you, so we can pick up a conversation where it left off. After that they are deleted from the database. If we go on to work together, records relating to that engagement are kept for as long as required for tax and accounting purposes.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- object to our processing where we rely on legitimate interests;
- request your data in a portable format.
To exercise any of these, email elizabeth@elizabethrossetti.co.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to address it first.
Changes to this notice
If how we handle personal data changes, this page is updated and the "last updated" date at the top changes with it.
Back to the site