Privacy Policy

Last updated: 23 March 2026

This privacy policy explains how Jane Chappell ("we", "us", "our") collects, uses, and protects personal data submitted through janechappell.com ("the website"), in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The data controller for this website is Jane Chappell. If you have any questions about how your data is handled, please contact us at:

Email: [placeholder — insert contact email]

2. What Data We Collect

We only collect personal data that you voluntarily provide through forms on this website:

• Contact form: name, email address, subject, and message
• Event booking enquiry form: name, email address, organisation, event type, proposed date, and message
• Newsletter sign-up: email address and optionally your first name

We do not collect any personal data automatically unless you have consented to analytics cookies (see our Cookie Policy).

3. Why We Collect Your Data

We use your data for the following purposes:

• To respond to your contact form messages
• To respond to event booking enquiries
• To send you our newsletter (only with your explicit consent)

4. Legal Basis for Processing

We process your personal data based on your consent, which you give by checking the consent checkbox on each form. You may withdraw your consent at any time by contacting us or, for the newsletter, by using the unsubscribe link in any email.

5. How We Store Your Data

• Contact and event form data is delivered via email and/or a secure form processing service. We retain this information only as long as necessary to handle your enquiry, and no longer than 12 months.
• Newsletter subscriber data is stored by our email marketing provider (currently Mailchimp / MailerLite — [confirm which provider is used]). Your email is stored until you unsubscribe.

6. Third-Party Processors

We may share your data with the following third-party services, which act as data processors on our behalf:

• Email marketing platform (e.g. Mailchimp / MailerLite) — to manage newsletter subscribers and send emails
• Form processing service (e.g. Formspree) — to receive and deliver form submissions
• Website hosting provider (e.g. Vercel / Netlify) — to serve the website
• Analytics (e.g. Plausible / Fathom) — if analytics cookies are accepted; these services do not collect personally identifiable information

All third-party services we use are GDPR-compliant and have Data Processing Agreements (DPAs) in place.

7. Your Rights

Under the UK GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a portable format
• Right to object — you can object to us processing your data
• Right to withdraw consent — you can withdraw consent at any time

To exercise any of these rights, please email us at [placeholder — insert contact email]. We will respond within 30 days.

8. Cookies

Our use of cookies is described in our Cookie Policy. No non-essential cookies are placed on your device unless you have given your consent.

9. Children's Data

This website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our forms, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically.

11. Complaints

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113