Privacy notice
1. Data Controller
The data controller for this website and associated communications is Ailsa Winton (independent professional services).
Contact: contact@ailsawinton.com
2. Personal Data Collected
Depending on how you interact with the website, I may collect:
• Contact details (e.g. name, email address, telephone number)
• Organisational or professional details (if provided in the message)
• Information contained in enquiries submitted via the contact form, email, or telephone
• Technical information such as IP address and browser type (if analytics are enabled)
3. Purpose of Processing
Personal data is used for:
• Responding to enquiries or service requests
• Communicating about potential or ongoing work
• Administrative and contractual purposes
• Maintaining professional correspondence
• Website functionality and, where enabled, analytics and performance insight
Data is not sold, rented, or shared for marketing purposes.
4. Legal Basis (UK GDPR)
Processing relies on one or more of the following lawful bases:
• Consent (when you voluntarily submit information)
• Contract (pre-contractual or contractual communications)
• Legitimate interests (professional correspondence, enquiry management, service delivery)
• Legal obligation (where required by applicable law)
5. Contact Form, Email, and Telephone
If you contact me via form, email, or telephone, any personal data you provide will be used solely for communication and professional purposes.
6. Analytics and Cookies
If analytics tools (such as Google Analytics or similar) or cookies are used on this website, they may collect technical usage data to understand website performance and improve user experience. Where required, consent will be obtained through a cookie banner or similar mechanism.
If no analytics are activated, this section does not apply.
7. Data Sharing
Personal data is not shared with third parties except:
• Service providers acting on my behalf (e.g. website hosting, email hosting)
• Where required by law
• With explicit consent
8. Data Retention
Enquiries and related correspondence are retained for administrative and professional purposes for a reasonable period. Certain information may be retained longer where required for contractual, accounting, or legal reasons. Data not needed is securely deleted.
9. Data Transfers
Where possible, data is stored within the UK or EEA. If transfers outside these jurisdictions are necessary, appropriate safeguards will be applied.
10. Your Rights (UK GDPR)
You have the right to request:
• Access to your personal data
• Correction or deletion
• Restriction or objection to processing
• Withdrawal of consent (where applicable)
• Complaint to a supervisory authority
Requests can be made using the contact details above.
11. Updates to This Notice
This notice may be updated periodically to reflect legal or operational changes. The latest version will always be available on this website.