Privacy Policy

Last updated: 17 September 2026
 

1. About this policy

This privacy policy explains what personal information I collect, why I use it, how long I keep it, who I may share it with and the rights available to you.

It applies when you visit this website, make an enquiry, communicate with me or become a client.

2. Who is responsible for your information

Craig Skellern, trading as Craig Skellern Marketing, is the controller of personal information used for the purposes described in this policy.

Contact email: hello@craigskellernmarketing.com

3. Personal information I collect

Depending on how you interact with me, I may collect:

• Identity and contact information, including your name, business name, email address, telephone number and job role.

• Enquiry and correspondence information, including messages, meeting notes and details you provide about your business and marketing needs.

• Client and transaction information, including proposals, contracts, services supplied, invoices, payments and account records.

• Marketing preferences, including whether you have asked to receive or stop receiving updates.

• Website and device information, such as your IP address, browser, device, pages viewed, referral source and interactions with the website, where collected through cookies or similar technology.

• Content supplied for a project, which may include photographs, video, advertising material, mailing data or customer communications provided by a client.

Please do not send special category information, such as health, biometric, political or religious information, unless it is genuinely necessary and we have agreed in advance how it will be handled.

4. How I collect information

I may collect personal information:

• Directly from you through the website contact form, email, telephone, video call, social media or in person.

• During the provision of services and normal client administration.

• From a referral, your employer, a client or a publicly available business source where this is appropriate and lawful.

• Automatically when you use the website, through essential cookies and, where you consent, analytics or advertising technology.

5. How and why I use personal information

UK data protection law requires a lawful basis for each use of personal information. The main ways I use information and the lawful bases I rely upon are explained below.

Responding to enquiries and discussing possible work

I use contact details, enquiry information and correspondence to respond to you and discuss how I may be able to help.

My lawful bases are taking steps at your request before entering a contract and my legitimate interest in responding to business enquiries.

Preparing proposals and providing agreed services

I use contact, client, project and transaction information to prepare proposals and deliver agreed services.

My lawful bases are performing a contract and taking steps requested before entering a contract.

Managing invoices, payments, tax and business records

I use identity, contact and transaction information to administer invoices and payments and maintain the records required for tax and accounting purposes.

My lawful bases are performing a contract and complying with legal obligations.

Managing client relationships and improving services

I use correspondence, feedback and service records to manage client relationships and improve the support I provide.

My lawful bases are performing a contract and my legitimate interest in running and improving my business.

Operating and protecting the website

I use technical, device, security and usage information to maintain the security and reliable operation of the website.

My lawful basis is my legitimate interest in operating and protecting the website.

Measuring website and advertising performance

Where you have given the required consent, I may use cookie, device and usage information to understand website activity and measure advertising performance.

My lawful basis is consent where required for non-essential cookies or similar technology.

Sending relevant marketing communications

I may use contact details and marketing preferences to send relevant marketing communications.

My lawful basis is consent or legitimate interests where electronic marketing law permits.

Protecting legal rights

I may use relevant contact, correspondence, client and transaction records to establish, exercise or defend legal rights.

My lawful bases are compliance with legal obligations and my legitimate interest in protecting my legal rights.

6. Marketing communications

I may send occasional marketing communications where you have asked to receive them or where the law otherwise permits.

Every marketing email will provide a clear way to unsubscribe. You can also object at any time by emailing hello@craigskellernmarketing.com.

I may keep a minimal suppression record so that I can respect your request and avoid contacting you again for marketing purposes.

Your right to object to direct marketing

You have an absolute right to object to the use of your personal information for direct marketing. If you object, I will stop using your information for that purpose.

7. Sharing personal information

I do not sell personal information.

I may share personal information where necessary with:

• Wix and other website hosting, security and contact form providers.

• Email, cloud storage, customer relationship, project management, invoicing and accounting providers.

• Google, Meta or other analytics and advertising providers where those tools are enabled and the required consent has been obtained.

• Professional advisers, insurers, contractors or carefully selected service providers who need the information to support my business or deliver an agreed service.

• HM Revenue and Customs, regulators, law enforcement agencies, courts or other authorities where disclosure is required or permitted by law.

• A buyer or adviser involved in a genuine sale, transfer or reorganisation of the business, subject to appropriate confidentiality and data protection safeguards.

Service providers are expected to protect personal information and use it only for the agreed purpose.

8. Client controlled information

Some services may require me to handle personal information on a client’s behalf, for example when managing customer messages and reviews, advertising audiences or email campaigns.

In those circumstances, the client will usually be the controller and I will act as its processor. The work will be governed by the client’s instructions and appropriate data processing terms.

People whose information belongs to a client should normally contact that client first and consult the client’s privacy notice.

9. International transfers

Some technology providers may store or process information outside the United Kingdom.

Where this happens, I will use a lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another safeguard permitted by data protection law.

Further information about relevant safeguards can be requested by emailing hello@craigskellernmarketing.com.

10. How long I keep information

I keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting and dispute requirements.

My usual retention periods are explained below.

Enquiries that do not become client work

I normally retain these for up to 24 months after the last meaningful contact.

Client contracts, invoices, payments and core service records

I normally retain these for six years after the end of the client relationship or relevant accounting period.

Routine project working files

These are reviewed after the project and deleted or anonymised when they are no longer required.

This will normally be within 24 months unless the contract or another legitimate requirement means they need to be kept longer.

Marketing records

These are retained until consent is withdrawn or an objection is made.

I may keep a minimal suppression record to ensure that the person is not contacted again.

Website analytics and advertising data

This information is kept according to the configured retention period of the relevant service and the visitor’s cookie choices.

Complaints and legal claims

Relevant information is retained for as long as reasonably required to resolve the matter and protect legal rights.

11. Security

I use reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

Access is limited to people and providers who need the information for a legitimate purpose.

No internet or storage system can be guaranteed to be completely secure.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information.

• Ask for inaccurate or incomplete information to be corrected.

• Ask for your information to be erased.

• Ask for the use of your information to be restricted.

• Object to processing based on legitimate interests.

• Object at any time to the use of your information for direct marketing.

• Receive certain information in a portable format.

• Withdraw consent at any time where consent is the lawful basis, without affecting earlier lawful use.

These rights are not absolute and may depend on the lawful basis and circumstances.

To make a request, email hello@craigskellernmarketing.com with Data Protection Request in the subject line. I may need to verify your identity before responding.

13. Complaints

Please contact me first if you have a concern so that I can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office.

Website: ico.org.uk/make-a-complaint

Telephone: 0303 123 1113

14. Children

This website and these services are intended for businesses and adults.

I do not knowingly collect personal information from children through this website.

15. Changes to this policy

I may update this policy when the website, services, technology providers or legal requirements change.

The date at the top of this page will show when it was last updated.