Privacy Policy

Last updated: 17 August 2026

What is this Privacy Policy For?

Skittish Marketing respects your privacy and is committed to protecting your personal information.

This privacy policy explains what personal information I collect, why I collect it, how it is used and stored, and your rights under UK data protection law.

For the purposes of UK data protection law, Skittish Marketing is the data controller for the personal information described in this policy.

If you have any questions about this policy or how your information is used, please contact:

Skittish Marketing
Email: heather@skitti.sh

Information I collect

The information I collect depends on how you interact with me and may include:

  • your name;
  • email address and telephone number;
  • company name and job title;
  • information you provide when making an enquiry;
  • information you provide during meetings or correspondence;
  • billing and payment information;
  • information relating to services I provide to you;
  • website usage information, such as pages visited, device and browser information and interactions with the website; and
  • marketing preferences.

I only collect information that is relevant to providing my services, communicating with you, operating my website and running my business.

Enquiries and contact forms

If you contact me through the website, by email or by another method, I will use the information you provide to respond to your enquiry and, where relevant, discuss or provide my services.

The website contact form uses Contact Form 7. Form submissions are sent to me by email and are not stored in the website database.

The lawful basis for processing this information is normally my legitimate interest in responding to business enquiries and communicating with prospective clients. Where your enquiry relates to entering into a contract with me, processing may also be necessary to take steps at your request before entering into that contract.

I will normally retain enquiries and related correspondence for up to two years after our last meaningful contact, unless there is a reason to keep the information for longer.

Clients and providing my services

If you become a client, I will process information necessary to manage our working relationship and provide the services you have asked me to deliver.

This may include contact details, correspondence, contracts, project information, campaign and website information, meeting notes, reports and billing records.

The lawful basis for this processing is primarily the performance of our contract. I may also process information where necessary for my legitimate interests in managing my business, maintaining records and providing an effective service.

Some records may need to be retained after our working relationship ends for legal, tax, accounting or legitimate business purposes.

Client data accessed while providing services

As part of my digital marketing services, I may be given access to systems such as Google Ads, Google Analytics, websites, content management systems and other platforms belonging to my clients.

These systems may contain personal information relating to the client’s customers, prospects, employees or website users.

Where I process this information solely on a client’s instructions, the client remains the data controller and I act as a data processor. I only access and use this information as necessary to provide the agreed services and in accordance with the client’s instructions.

Online meetings and AI transcription

I use Fathom, an AI meeting assistant, for some online meetings. Fathom can record and transcribe meetings and generate notes and summaries.

Where Fathom is used, meeting participants are notified that recording is taking place and are asked for permission before the meeting is recorded.

Information processed may include your name and email address, audio and video from the meeting, a transcript of the conversation and notes or summaries generated from it.

I use this information to maintain accurate records of discussions, decisions and actions and to help me provide my services.

My lawful basis for this processing will normally be performance of a contract where the meeting relates to services I provide, or my legitimate interests in maintaining accurate records and providing an effective service.

Fathom acts as a data processor when processing meeting information on my behalf. Fathom stores data in the United States and uses appropriate safeguards for international transfers of personal data.

I have opted out of allowing anonymised meeting data to be used to train or improve Fathom’s proprietary AI models. Fathom also states that third-party AI providers are not authorised to use meeting content to train their models.

You can ask me not to record or transcribe a meeting using Fathom.

Meeting scheduling

I use zcal to allow clients and prospective clients to book meetings.

When you book a meeting, information such as your name, email address and details you provide about the meeting may be processed by zcal in order to arrange the appointment.

The lawful basis for this processing is my legitimate interest in managing appointments efficiently or, where appropriate, taking steps before entering into or performing a contract.

Email marketing

If you choose to join the Skittish Marketing mailing list, I will use your email address and any other information you provide when subscribing to send you marketing emails.

I use MailerLite to manage my mailing list and send email communications. Your subscriber information is therefore processed by MailerLite on my behalf.

The lawful basis for email marketing to individuals who have explicitly subscribed is consent.

You can withdraw your consent at any time by clicking the unsubscribe link included in marketing emails.

Unsubscribing will stop marketing communications, although I may retain a minimal suppression record to ensure that you are not accidentally added to the mailing list again.

The Freelance Life newsletter is operated separately and is not covered by this privacy policy.

Website analytics and advertising

I use Google Analytics 4 (GA4) to understand how people use the Skittish Marketing website. This can include information such as pages viewed, approximate location, device and browser information and how visitors arrived at the website.

I also use Google Ads to advertise my services and measure the effectiveness of advertising campaigns.

Google tags are implemented using Google Tag Manager.

Where required, analytics and advertising technologies are controlled through the website’s cookie consent system. Non-essential cookies and similar technologies will not be used until you have made the relevant consent choice.

Where processing relies on consent, you can withdraw or change your choice using the cookie settings available on the website.

More information about the cookies and tracking technologies used on this website is available in the cookie policy.

Accounting and payments

I use FreeAgent for accounting, invoicing and financial record keeping. Client information held within FreeAgent may include names, company details, contact information, invoices and payment records.

Payments are normally made by bank transfer or through GoCardless. If you pay using GoCardless, GoCardless will process information necessary to arrange and administer the payment.

I process this information because it is necessary to perform our contract and to comply with my legal and financial obligations.

Financial and accounting records will normally be retained for the period required by UK tax and accounting law.

File storage and business systems

I use third-party technology providers to operate my business and securely store information.

These include:

  • Microsoft 365 and OneDrive for email, documents and file storage;
  • Google Drive for some document and file storage;
  • FreeAgent for accounting and invoicing;
  • Fathom for meeting recording, transcription and summaries;
  • MailerLite for email marketing;
  • zcal for meeting scheduling;
  • GoCardless for payment collection;
  • Google services including Google Analytics, Google Ads and Google Tag Manager; and
  • Cloud Next for website hosting.

These providers may process personal information on my behalf or, in some circumstances, act as independent data controllers.

I only use providers where I consider their services appropriate for the information being processed.

International data transfers

Some of the services I use may process or store information outside the UK.

Where personal information is transferred internationally, I rely on the safeguards provided by the relevant service provider, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, approved contractual clauses or the UK International Data Transfer Addendum, where applicable.

You can contact me if you would like more information about the safeguards relevant to your personal information.

How long I keep your information

I do not keep personal information for longer than I reasonably need it.

The exact retention period depends on the type of information and why it was collected. In deciding how long information should be retained, I consider:

  • whether I still need it to provide my services;
  • whether there is an ongoing business relationship;
  • legal, tax and accounting requirements;
  • whether it may be needed to establish or defend a legal claim; and
  • the sensitivity of the information.

Where information is no longer required, it will be deleted or securely disposed of.

Sharing your information

I do not sell your personal information.

I may share information with service providers that help me operate my business, as described in this policy. They will only receive information necessary for the relevant service.

I may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.

Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Your rights

Under UK data protection law, depending on the circumstances, you may have the right to:

  • ask for a copy of the personal information I hold about you;
  • ask me to correct inaccurate or incomplete information;
  • ask me to delete your personal information;
  • ask me to restrict how your information is used;
  • object to certain uses of your personal information;
  • receive certain information in a portable format;
  • withdraw consent where processing is based on consent; and
  • complain about how your information has been handled.

You have the right to object to processing based on legitimate interests and to object at any time to the use of your personal information for direct marketing.

These rights are not absolute and may depend on the circumstances and the lawful basis on which your information is being processed.

To exercise your rights, contact me at heather@skitti.sh.

You will not normally be charged for exercising your data protection rights.

Complaints

If you have concerns about how I have handled your personal information, please contact me first so that I can investigate.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

You can find information about making a complaint on the ICO website.

Cookies

This website uses cookies and similar technologies for essential website functionality and, with your consent where required, analytics and advertising.

You can manage your choices through the cookie consent settings on the website.

For more detailed information about the cookies used on this website, please see the cookie policy.

Links to other websites

The Skittish Marketing website may contain links to websites operated by other organisations. This privacy policy applies only to Skittish Marketing.

If you follow a link to another website, that organisation’s own privacy policy will apply.

Changes to this privacy policy

I may update this privacy policy from time to time to reflect changes to my services, the technology I use or legal requirements.

The latest version will always be published on this page and the date at the top will show when it was last updated.