Privacy Policy

Last updated: [date to be confirmed on publication]

Who I am

This website is run by Jo Cox, a sole trader trading as Toodlepip Media, based in Chipping Sodbury, South Gloucestershire, and working with businesses across the UK. Toodlepip Media is not VAT registered. I'm the "controller" of the personal information described here, which means I decide how it's used.

You can contact me about anything in this policy by emailing jo@toodlepipmedia.co.uk or calling 01454 540015. Postal address: [to be confirmed].

I'm registered with the Information Commissioner's Office (ICO). Registration reference: ZB996815.

What I collect and why

When you use the contact form on the Let's Talk page: your name, business name, email address, and optionally your phone number, website, the service you're interested in, an indication of advertising budget and your message. I use this to reply to your enquiry and, if you'd like, to arrange a call (for example by Google Meet) to discuss working together.

Lawful basis: legitimate interests (replying to people who contact me) and, where you're asking about my services, steps prior to entering into a contract.

When you email or phone me directly: whatever details you choose to share, used in the same way and on the same basis.

If you become a client: contact, billing and business details needed to provide my services, invoice you and keep proper accounts. Lawful basis: contract and legal obligation (accounting and tax records).

Website analytics (only if you agree): Google Analytics collects information such as pages visited, approximate location (city or region), device and browser type, and how you arrived at the site. IP addresses are not stored by Google Analytics 4. Lawful basis: consent.

Advertising measurement (only if you agree): the Meta Pixel tells Meta (the company behind Facebook and Instagram) that a page on this site was viewed, along with technical information such as your browser, IP address and any Meta cookies already on your device. This helps me see whether my own adverts are working. Meta may link this with your Facebook or Instagram account under Meta's own privacy policy. Lawful basis: consent.

I don't sell your information, and I don't use it for automated decision-making that has legal or similarly significant effects on you.

Who I share it with

I only share personal information with service providers and people who help me run the website and my business, such as:

• Lovable, which hosts this website and processes contact-form enquiries, sending them to my business inbox through its email delivery service [underlying email delivery provider to be confirmed with Lovable];
• Namesco, which hosts my main business email inbox;
• Google, for Google Meet video calls where we arrange one, and Google Analytics only if you've accepted analytics cookies;
• Meta Platforms Ireland Ltd (Meta Pixel), only if you've accepted advertising cookies;
• Intuit QuickBooks, which I use for invoicing and bookkeeping;
• my virtual assistant, who provides authorised administrative support. She uses a separate business Gmail account (a Google service) and has authorised access to QuickBooks for invoicing and bookkeeping administration. She does not have access to my main business inbox, and only handles the information needed for those tasks;
• my external accountant, with whom relevant financial and business information may be shared for accounting and tax purposes;
• authorities, if the law requires it.

International transfers

Some of these providers, including Google, Meta and Intuit (QuickBooks), may process information outside the UK, for example in the United States. Where that happens, transfers are protected by safeguards recognised under UK law, such as the UK–US "Data Bridge" for certified companies or the UK International Data Transfer Addendum to standard contractual clauses. [Confirm with each provider which safeguard applies.]

How long I keep it

• Enquiries that don't lead to work: up to 12 months [draft — to be confirmed].
• Client records: up to six years, subject to applicable legal and business requirements [draft — to be confirmed].
• Google Analytics data: event-level data is kept for 2 months and user-level data for 14 months, after which Google deletes it automatically. The 14-month period restarts if the same visitor returns to the site. Summary reports (which don't identify anyone) may be kept longer.
• Meta Pixel data: kept by Meta in line with Meta's own policies.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information I hold about you;
• ask me to correct anything that's wrong;
• ask me to delete it;
• ask me to restrict how I use it;
• object to me using it on the basis of legitimate interests;
• ask for it to be transferred to someone else (data portability), where that applies;
• withdraw consent at any time — for cookies, use the "Cookie settings" link at the bottom of every page.

To use any of these rights, just email me. I'll reply within one month, and I'll make reasonable and proportionate searches for the information you ask for.

Complaints

If you're unhappy with how I've handled your information, please tell me first at jo@toodlepipmedia.co.uk. I'll acknowledge your complaint within 30 days and let you know what I'm doing about it without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Cookies

For details of the cookies used on this site and how to change your choices, see the Cookie Policy.

Changes to this policy

I'll update this page if anything changes. The date at the top shows when it was last updated.