1. Who we are

The data controller responsible for your personal data is GABRIELLA LUCY PR LTD, Suite 1, The Courtyard, The Old Monastery, Windhill, Bishop's Stortford, Hertfordshire, England, CM23 2ND. If you have any questions about this policy or your data, contact us at gaby@gabriellalucypr.co.uk.

2. What personal data we collect

Depending on how you interact with us, we may collect:

• Contact details you submit — such as your name, email address, and any message you send us via our contact form or by email.

• Business details you choose to share when enquiring about our services.

• Technical and usage data — such as your IP address, browser type, device information, and how you use our site, collected via analytics and cookies.

3. How and why we use your data

We use your personal data for the following purposes, each with a lawful basis under UK GDPR:

• To respond to your enquiries and provide our services — lawful basis: legitimate interests / performance of a contract.

• To send marketing communications, where you have opted in — lawful basis: consent.

• To understand and improve how our website performs — lawful basis: legitimate interests (and consent for non-essential cookies).

• To comply with legal or regulatory obligations — lawful basis: legal obligation.

4. Cookies and analytics

Our website uses cookies and similar technologies. Essential cookies are needed for the site to function. Non-essential cookies (such as analytics) are only set with your consent, which you can give or withdraw via our cookie banner.

We use Google analytics, Framer analytics and Ahrefs to understand site usage. See our Cookie Notice for the full list of cookies, their purpose, and how to manage them.

Note: a separate cookie banner + cookie notice is required under PECR before non-essential cookies fire. Framer has a native cookie-banner component, or use Cookiebot. Confirm which analytics/embeds are actually live on the site.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted third parties who help us run our website and business, including:

• Our website platform and hosting provider (Framer).

• Analytics providers.

• Email and communication providers (Gmail, newsletter tools such as Mailchimp) 

• Professional advisers and authorities where required by law.

6. International transfers

Some of our providers (such as Framer and Google) are based outside the UK, including in the United States. Where your data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework. 

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above, or as required by law. 

Enquiry emails will be kept for 24 months after they were initially sent 

Marketing data will be kept until you unsubscribe 

8. Your rights

Under UK GDPR you have the right to access your data, request correction or deletion, object to or restrict processing, withdraw consent, and request data portability. To exercise any of these rights, contact us using the details in Section 1.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

10. Contact

For any privacy-related questions, contact gaby@lemontoppr.co.uk.