Privacy Notice
Last updated: 5 September 2026
This privacy notice explains how Salty Pebbles Creative collects, uses and protects your personal information when you visit this website, contact me or use my services.
Contact Details
Salty Pebbles Creative
Salty Pebbles Creative is a trading name of Sarah Lucas.
Email: saltypebblescreative@gmail.com
ICO Registration Number: ZC098404
If you have any questions about this privacy notice or how your information is handled, please contact me using the details above.
What Information I Collect
The personal information I collect depends on how you interact with Salty Pebbles Creative.
Enquiries
If you contact me through the website, by email or by another method, I may collect:
- Your name
- Your email address
- Your website address
- Information you include in your message or correspondence
If you use the website contact form, your submission is emailed to my business email address and is also temporarily stored in the website database. Website form submissions are automatically deleted from the database after 28 days.
Clients and Projects
If you decide to work with me, I may also collect and use information needed to provide the agreed services, including:
- Your name and contact details
- Your business or practice name
- Your website address and information relating to your website
- Project requirements and correspondence
- Information, documents or content you provide for the project
- Login or access information where this is necessary to carry out agreed website work
- Records of meetings and project decisions
- Invoices, payments and transaction information
Where you provide login or access details for a website or third-party service, these will only be used as necessary to carry out the work you have asked me to complete.
Please avoid sending passwords or other sensitive login information through the website contact form.
Website Usage Information
When you visit this website, information about how the website is used may be collected through analytics technologies.
This may include information such as:
- Pages visited
- Approximate location
- Device and browser information
- How you arrived at the website
- How you interact with the website
Google Analytics is used to help me understand how visitors use the website and improve its content and performance.
Non-essential analytics technologies are subject to your cookie choices. More information can be found in the Cookie Policy.
Etsy Purchases
Salty Pebbles Creative also sells digital products through Etsy.
If you purchase a product through Etsy, Etsy collects and processes information necessary to manage your order and payment. I may receive information from Etsy that is necessary to fulfil your order, provide customer support and maintain appropriate business records.
Etsy also processes personal information for its own purposes under its own privacy arrangements.
Why I Use Your Information
Personal information may be used to:
- Respond to enquiries
- Discuss potential work and provide quotes or proposals
- Provide services you have purchased or commissioned
- Communicate with you about a project
- Arrange and hold online meetings
- Manage invoices and payments
- Maintain financial and accounting records
- Provide customer support
- Manage complaints or disputes
- Protect and secure the website and business
- Understand how the website is being used and improve its content and performance
- Comply with legal and regulatory obligations
I do not sell your personal information.
Lawful Bases for Processing
Under UK data protection law, I rely on different lawful bases depending on why your information is being used.
Contract
Processing may be necessary to take steps at your request before entering into a contract, such as responding to a request for a quote, or to provide services you have agreed to purchase.
Legal obligation
Some information must be processed or retained to comply with legal requirements, including tax and accounting obligations.
Legitimate interests
Information may be processed where necessary for the legitimate interests of running and protecting Salty Pebbles Creative, provided those interests are not overridden by your rights and freedoms.
These interests may include:
- Responding to general enquiries
- Managing client relationships and business correspondence
- Protecting the security of the website and business
- Managing or defending complaints and legal claims
- Understanding and improving the website and services
Where consent is required for non-essential cookies or similar technologies, these will only be used in accordance with your choices.
Where Personal Information Comes From
Most personal information is provided directly by you when you:
- Complete the website contact form
- Email me
- Arrange a meeting
- Ask for a quote or purchase a service
- Provide information during a project
I may also receive relevant information through services you use to interact with Salty Pebbles Creative, such as Etsy or payment and accounting services.
Website analytics information may be collected automatically when you use this website, subject to your cookie choices.
Who Information Is Shared With
I only share personal information where this is necessary to run the business, provide a service you have requested or comply with a legal obligation.
Third-party services used by Salty Pebbles Creative may include:
- Hostinger – website hosting
- Google – business email, calendar, website analytics and related services
- Zoom – online meetings
- Mettle – business banking and payment records
- FreeAgent – accounting and financial record keeping
- Etsy – digital product sales, orders and customer communication
Other professional advisers or service providers, such as accountants, insurers or legal advisers, may receive relevant information where reasonably necessary.
Information may also be disclosed where required by law.
Website Forms
The contact form on this website is provided using Forminator.
When you submit the form, the information you provide is sent to my business email address. A copy is also temporarily stored within the website database hosted by Hostinger.
Stored form submissions are automatically deleted from the website database after 28 days.
Information contained in subsequent email correspondence may be retained for longer where necessary to deal with your enquiry, provide services or maintain appropriate business records.
How Long Information Is Kept
Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected and to meet legal or business requirements.
Generally:
- Website contact-form submissions stored in the website database are deleted automatically after 28 days.
- Enquiry correspondence that does not lead to work will normally be deleted when it is no longer reasonably required.
- Client and project correspondence and records may be retained for up to 6 years after the project or business relationship ends, where necessary for business, contractual or legal purposes.
- Financial and accounting records are generally retained for 6 years in accordance with applicable tax and accounting requirements.
- Login details or access provided for project work will not be deliberately retained longer than necessary to complete the agreed work.
Information may occasionally need to be retained for longer where there is an ongoing dispute, legal claim or other legal requirement.
Security
Reasonable technical and organisational measures are used to protect personal information against loss, misuse, unauthorised access or disclosure.
These measures include password-protected accounts, secure website connections, access controls and appropriate security measures provided by the third-party services used to operate the business.
If you provide access to your website or another online account for the purpose of carrying out agreed work, that access will only be used for the work you have authorised.
International Transfers
Some third-party services used by Salty Pebbles Creative may process or store personal information outside the UK.
Where personal information is transferred internationally, the relevant provider is responsible for using appropriate safeguards where required by UK data protection law.
Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you rights including the right to:
- Request access to your personal information
- Request correction of inaccurate or incomplete information
- Request deletion of your information in certain circumstances
- Request restriction of processing in certain circumstances
- Object to certain uses of your information
- Request transfer of information in certain circumstances
- Withdraw consent where processing is based on consent
Not all rights apply in every situation.
If you would like to exercise any of these rights, email saltypebblescreative@gmail.com.
Requests will normally be responded to within one month, subject to the circumstances permitted under data protection law.
How to Complain
If you have concerns about how your personal information has been handled, please contact me first so that I have an opportunity to investigate and respond.
Email: saltypebblescreative@gmail.com
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113