Privacy Policy
Last updated: 10/05/2026
1. Who we are
This privacy policy explains how Lisa Morgan Studios ("we", "us", "our") collects, uses, and protects your personal information when you visit our website at [www.lisamorganstudios.com] or interact with our services.
For the purposes of UK data protection law, the data controller is:
Lisa Morgan Studios Watford Road, Caerphilly CF83 1DS Email:lisamorganstudios@gmail.com
If you have any questions about this policy or how we handle your personal information, you can contact us at [email address].
2. Information we collect
We collect personal information in the following ways.
Information you give us directly. This includes any information you provide when you submit an enquiry through our contact form, discovery call form, or onboarding questionnaire, subscribe to our email list, purchase a service through our website, or communicate with us by email, phone, or social media. The information we collect may include your name, business name, email address, telephone number, postal address, social media handles, payment details (processed by our payment provider and not stored directly by us), and any other information you choose to share.
Information we collect automatically. When you use our website, we may automatically collect your IP address, browser type and version, the pages you visit, the time you spend on each page, the website that referred you, and your device type and operating system. This information is collected through cookies and similar technologies. See Section 8.
Information from third parties. We may receive information about you from third-party services we use, including:
Squarespace (our website host and e-commerce platform)
[Email marketing platform, e.g. Flodesk, Mailchimp, ConvertKit]
[Booking system, e.g. Calendly, Acuity]
[Analytics tools, e.g. Google Analytics, Squarespace Analytics]
[Payment processors, e.g. Stripe, PayPal]
3. How we use your information
We use your personal information to:
Respond to your enquiries and communicate with you
Provide the services you have booked
Process payments and issue invoices
Send you marketing emails, where you have opted in
Improve our website and services
Comply with our legal and regulatory obligations
4. Our legal basis for processing your information
Under UK data protection law, we must have a lawful basis for processing your personal information. We rely on the following:
Consent. Where you have given us clear consent, for example by subscribing to our newsletter.
Contract. Where processing is necessary to enter into or perform a contract with you.
Legitimate interests. Where processing is necessary for our legitimate interests as a business, such as responding to enquiries or improving our website. We balance these interests against your rights and freedoms.
Legal obligation. Where processing is necessary to comply with the law.
You have the right to withdraw consent at any time where we rely on consent as our legal basis.
5. Sharing your information
We do not sell your personal information. We may share it with trusted third parties in the following circumstances:
Service providers. Companies that help us run our business and website, including our website host, email platform, payment processors, and booking system.
Professional advisors. Such as accountants and legal advisors, where necessary.
Legal authorities. Where required by law or to protect our legal rights.
All third parties are required to handle your information in accordance with applicable data protection law.
6. Data retention
We will only keep your personal information for as long as necessary for the purposes set out in this policy.
Enquiry data: retained for up to 12 months from your last interaction.
Client data: retained for 7 years following the end of our working relationship, in line with HMRC requirements.
Marketing list data: retained until you unsubscribe.
7. International transfers
Some of our service providers may be based outside the United Kingdom. Where this is the case, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, to protect your information.
8. Cookies
Our website uses cookies and similar technologies to function correctly, analyse site traffic, and improve your experience. You can control cookies through your browser settings. For more information, please see our Cookie Policy.
9. Your rights
Under UK data protection law, you have the following rights:
The right to be informed about how your personal information is used.
The right of access to your personal information.
The right to rectification if your information is inaccurate or incomplete.
The right to erasure of your personal information in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability, allowing you to obtain and reuse your information.
The right to object to processing in certain circumstances.
The right to withdraw consent at any time, where consent is the basis for processing.
To exercise any of these rights, please contact us at lisamorganstudios@gmail.com. We will respond within one calendar month.
If you are unhappy with how we have handled your personal information, you also have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
10. Children's privacy
Our services are not intended for children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can remove it.
11. Changes to this policy
We may update this privacy policy from time to time. The most recent version will always be available on this page, with the date of the latest update shown at the top.
12. Contact us
If you have any questions about this privacy policy or how we handle your personal information, please contact:
Lisa Morgan Studios Email: Lisamorganstudios@gmail.com Address: Watford Road, Caerphilly CF83 1DS