PRIVACY POLICY

How I look after your information

Plain-English details of what I collect, why, and the choices you have.

Last updated: 2 October 2026

This policy explains how Sharon Fyles, trading as Snappy Squid (“Snappy Squid”, “I”, “me”) collects and uses personal information when you visit snappysquid.co.uk, get in touch, or work with me. I’m the data controller for this information.

Who I am

What I collect

  • When you contact me (contact form, email or phone): your name, email address, phone number, business name and anything you include in your message.
  • When you become a client: contact and billing details, plus the information needed to deliver the work, such as website logins, Google Business Profile access, content and files you share.
  • When you browse the site: with your consent, Google Analytics collects information about how you use the site, such as pages viewed, approximate location, device and browser. See the Cookies Policy.
  • Security logs: my hosting and security tools record IP addresses and basic request details to protect the site from spam and attacks.

How I use it, and the legal basis

PurposeLegal basis
Replying to your enquiry and preparing quotesLegitimate interests (responding to people who contact me) or steps before entering a contract
Delivering services, invoicing and supporting youPerformance of a contract
Keeping business and tax recordsLegal obligation
Understanding how the website is used (Google Analytics)Consent, which you can withdraw at any time
Keeping the website secureLegitimate interests (protecting the site and its visitors)

I don’t sell your information, and I won’t add you to a mailing list without asking first.

Who I share it with

I only share personal information with trusted providers who help me run the business, and only as much as they need:

  • website hosting and security providers
  • Google (Analytics, and Google Workspace or email services)
  • CookieHub, which manages cookie consent on this site
  • my accountant and accounting software
  • other tools you agree to as part of a project, such as your own website or Google accounts

I may also share information if the law requires it.

Working with agencies

When I carry out white-label work for an agency, I usually act on the agency’s instructions as a data processor, and the agency’s own privacy terms apply to their clients’ data.

International transfers

Some providers, such as Google, may process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations (including the UK–US data bridge) or by approved contract clauses.

How long I keep it

  • Enquiries that don’t lead to work: up to 2 years.
  • Client and financial records: 6 years after the end of the tax year they relate to, as required by HMRC.
  • Google Analytics data: 14 months.
  • Website logins and access you give me for a project: removed when the work ends, or sooner if you ask.

Your rights

Under UK data protection law you can ask to:

  • see the personal information I hold about you
  • correct anything that’s wrong
  • have your information deleted
  • restrict or object to how I use it
  • receive your information in a portable format
  • withdraw consent at any time, for example for analytics cookies

To make a request, email hello@snappysquid.co.uk. I’ll reply within one month.

Complaints

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Keeping it safe

I use secure, password-protected systems, keep software up to date, and only keep the information I need.

Changes to this policy

I’ll update this page if anything changes. The date at the top shows when it was last updated.