Privacy notice

Who I am

I am Jill Irving, a sole-trader virtual assistant working from Broadstone in Dorset and Portimão in Portugal. For the purposes of UK GDPR, the data controller is me, contactable at [email protected].

What I collect

Information you give me

When you use the contact form, you provide your name, email, optional company name, the service you are interested in, and your message. I use this to respond to your enquiry, scope your project, and (if we work together) deliver the work. I do not sell or share applicant or client information with third parties.

Information collected automatically

With your consent, I use Google Analytics 4 to understand how visitors use the site. This includes page views, time on page, referring website, approximate location at city or country level, and the type of device and browser used. Google Analytics is not configured for advertising and Google Signals is not enabled.

Cloudflare, my hosting provider, processes basic request information (IP address, request headers) for security and to deliver the site. This is operationally necessary and not subject to consent under UK PECR.

Cookies

The only non-essential cookies on this site are those set by Google Analytics 4 when you accept analytics:

• _ga: distinguishes unique visitors. Stored for up to 2 years.
• _ga_V7B9SMVB6J: Google Analytics session cookie. Stored for up to 2 years.

If you reject analytics, no cookies are dropped on your device by me. You can change your choice at any time using the "Analytics" toggle in the footer of every page.

Legal basis for processing

• Contact form data: legitimate interest in responding to enquiries; contract once a project is agreed.
• Analytics cookies: your explicit consent (UK PECR / UK GDPR Article 6(1)(a)).

How long I keep your data

• Contact form messages: 24 months from receipt, then deleted unless we have an active working relationship.
• Client project records (invoices, contracts, deliverables): 7 years after the last invoice, in line with HMRC requirements.
• Analytics data in Google Analytics 4: 14 months (the GA4 default I have configured).

Where your data is stored

Contact and operational data is held in services based in the UK and EU. Analytics data is processed by Google in the EU and US under standard contractual clauses.

Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal data I hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw your consent to analytics at any time using the footer toggle
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk

For any of the above, email [email protected]. I will respond within 30 days.

Changes to this notice

If I make material changes to this notice I will update the "Last updated" date at the top. Routine clarifications may be made without notice.