top of page

Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

 

Contact details

​

Telephone

07415404515

Email

bec@becbakerinstructionaldesign.co.uk

 

What information we collect, use, and why

​

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details

  • Addresses

  • Occupation

  • Payment details (including card or bank information for transfers and direct debits)

  • Transaction data (including details about payments to and from you and details of products and services you have purchased)

  • Usage data (including information about how you interact with and use our website, products and services)

  • Information relating to compliments or complaints

  • Records of meetings and decisions

  • Website user information

​

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details

  • Addresses

  • Purchase or service history

  • Marketing preferences

​

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details

  • Addresses

  • Marketing preferences

  • Website and app user journey information

  • IP addresses

​

We collect or use the following personal information to comply with legal requirements:

  • Name

  • Contact information

  • Client account information

  • Any other personal information required to comply with legal obligations

​

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details

  • Addresses

  • Payment details

  • Purchase or service history

  • Customer or client accounts and records

  • Financial transaction information

  • Correspondence

 

Lawful bases and data protection rights

​

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

  • Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

​

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

​

Our lawful bases for the collection and use of your data

​

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • I collect and use personal information such as names, contact details, and project information to communicate with clients, deliver instructional design services, and improve the quality and accessibility of my products. This processing is necessary for the effective management of client projects, ensuring that services are delivered accurately, efficiently, and to the agreed specification. The legitimate interest lies in maintaining smooth business operations, ensuring timely communication, and continually improving client experience and service quality. The benefit to clients is that I can offer responsive support, tailor materials to their needs, and uphold professional standards. The processing involves only basic personal and business information, kept securely and used solely for these legitimate business purposes. No special category or high-risk data is processed. The likelihood of any adverse impact on individuals is very low, and I believe the benefits to both clients and my business clearly outweigh any minimal risks.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • I use personal information such as names, contact details, and service history to manage client relationships and deliver agreed work efficiently. This includes maintaining accurate records of projects, communications, and invoices to ensure professional, consistent service and reliable follow-up. This processing is necessary for the smooth operation of client accounts, helping me provide timely support, keep clients informed, and maintain accurate financial and project records. The data used is limited to what is relevant for legitimate business purposes and is stored securely. The processing poses minimal risk to individuals as no sensitive or high-risk data is involved. The benefits of efficient service delivery, continuity of client relationships, and accurate record-keeping clearly outweigh any potential privacy impact.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • I use limited personal information such as names, contact details, and marketing preferences to send relevant updates about my instructional design services and professional resources that may be of interest to clients or potential clients. This helps maintain professional relationships, share useful information, and grow my small business in a way that benefits both existing and prospective clients. The processing is minimal and proportionate, involving only individuals who have shown interest in my services or who I have previously worked with. It supports effective communication and awareness of current offerings, while posing very low privacy risk. All marketing is conducted respectfully, with clear opt-out options, and personal information is never shared with third parties for marketing purposes. The benefits of keeping clients informed and connected outweigh any limited impact on individual privacy.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

 

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • I use personal information such as names, contact details, and relevant correspondence to respond to enquiries, resolve complaints, and manage any potential claims relating to my services. This is necessary to provide good customer service, maintain trust, and protect both client and business interests. The processing benefits clients by ensuring their queries and concerns are handled efficiently and fairly, while also helping me keep accurate records and meet professional standards. The information used is limited to what is necessary for this purpose and is stored securely. No special category data is processed, and the risk to individuals is minimal. The benefits of clear communication and effective issue resolution outweigh any limited privacy impact.

 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

​

Where we get personal information from

​

  • Directly from you

  • Publicly available sources

  • Suppliers and service providers

  • Third parties:

    • Recruiters or partner agencies who connect me with clients or contract opportunities.

 

How long we keep information

​

I only keep personal information for as long as it is needed for the purpose it was collected, including to meet legal, accounting, or reporting requirements. I review the information I hold regularly and securely delete or anonymise it when it is no longer required.

​

  • Enquiry emails and general correspondence:

Retained for up to 12 months after the last contact or completion of the enquiry, then securely deleted.

​

  • Client and project records (including names, contact details, and work files):

Retained for up to 6 years after the end of the contract or project. This ensures accurate record-keeping, supports potential follow-up work, and complies with legal and tax obligations.

​

  • Invoices and financial information:

Retained for 6 years in line with HMRC and statutory accounting requirements.

​

  • Marketing contact details (where consent has been given):

Retained until consent is withdrawn or the information is no longer needed for marketing or communication purposes.

​

  • Website analytics and usage data:

Collected and retained through Wix and Google Analytics for site performance monitoring and improvement. This data is typically stored for up to 26 months, in line with analytics platform retention policies.

 

All personal data is stored securely using password-protected systems and cloud services that comply with UK GDPR. Physical or digital records are deleted or destroyed in a secure manner once retention periods expire.For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

​

Who we share information with

​

Data processors

Wix

This data processor does the following activities for us: Hosts my website and processes limited visitor information (such as IP addresses and analytics data) to ensure the site functions correctly and securely.

​

123-Reg and Gmail

This data processor does the following activities for us: Provide email services and handle client correspondence securely via linked account.

​

UK bank

Processes payments and holds transaction information for invoicing and accounting purposes.

​

Recruiters or partner agencies

May share client or project details for freelance or contract opportunities.

 

Others we share personal information with

  • Professional or legal advisors

  • Organisations we’re legally obliged to share personal information with

  • Suppliers and service providers

  • Third parties:

    • Recruiters or partner agencies who connect me with clients or contract opportunities.

 

Sharing information outside the UK

​

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

 

Organisation name: Wix.com Ltd

Category of recipient: Website hosting and analytics provider

Country the personal information is sent to: Israel and other locations (including the EU and the US)

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)

 

Organisation name: Google LLC

Category of recipient: Email and cloud service provider

Country the personal information is sent to: United States and other global data centres

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

 

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

 

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

 

Organisation name: Wix.com Ltd

Category of recipient: Website hosting and analytics provider

Country the personal information is sent to: Israel and other locations (including the EU and the US)

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)

 

Organisation name: Google LLC

Category of recipient: Email and cloud service provider

Country the personal information is sent to: United States and other global data centres

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

 

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

​

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

​

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

​

​

Last updated 14th November 2025

bottom of page