Privacy Policy

Information We Collect

 

We may collect the following types of personal information:

 

Information you provide directly:

• Name and contact details (email, phone, address)

• Business information (company name, role, industry)

• Payment and billing information

• Project briefs, documents, and materials you share

• Communication records (emails, messages, meeting notes)

 

Information collected automatically:

• Website usage data (IP address, browser type, pages visited)

• Cookies and similar tracking technologies

 

How We Use Your Information

 

We use your personal information for the following purposes:

• Service Delivery: To provide virtual assistant services as agreed

• Communication: To respond to inquiries and provide updates

• Billing: To process payments and maintain financial records

• Legal Compliance: To comply with legal obligations and tax requirements

• Business Improvement: To improve our services and website functionality

 

Legal Basis for Processing:

• Performance of a contract

• Legitimate business interests

• Legal obligation

• Consent (where applicable, such as marketing communications)

 

How We Share Your Information

 

We do not sell your personal information. We may share your data with:

• Service Providers: Payment processors, accounting software, cloud storage providers (e.g., Google Workspace, Dropbox)

• Legal Authorities: When required by law or to protect our legal rights

• Professional Advisors: Accountants, lawyers, or insurers as necessary

 

All third parties are required to keep your information secure and use it only for specified purposes.

 

Data Security

 

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure password-protected systems

• Encrypted data transmission (SSL/TLS)

• Regular security assessments

• Limited access to personal data on a need-to-know basis

 

Data Retention

 

We retain your personal information only as long as necessary:

• Active Client Data: Duration of our business relationship

• Financial Records: 6 years (HMRC requirement)

• Marketing Data: Until you withdraw consent

• Website Analytics: [Specify period, e.g., 26 months]

 

Your Rights

 

Under UK GDPR, you have the following rights:

• Right to Access: Request copies of your personal data

• Right to Rectification: Correct inaccurate or incomplete data

• Right to Erasure: Request deletion of your data (subject to legal obligations)

• Right to Restrict Processing: Limit how we use your data

• Right to Data Portability: Receive your data in a structured format

• Right to Object: Object to processing based on legitimate interests

• Right to Withdraw Consent: For marketing or consent-based processing

 

To exercise any of these rights, please contact us at natalie@theunderstudy.co

 

Cookies

 

Our website uses cookies to enhance user experience.

 

Essential Cookies: Required for website functionality

Analytics Cookies: Help us understand website usage (e.g., Google Analytics)

Preference Cookies: Remember your settings and preferences

 

You can control cookies through your browser settings.

 

International Transfers

 

We primarily store and process data within the UK/EEA. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Binding Corporate Rules

 

Third-Party Links

 

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies separately.

 

Changes to This Policy

 

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated directly to you.

 

Contact Us

 

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: hello@theunderstudy.co

Phone: 07921 342580

 

Complaints

 

If you are unhappy with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

​

ICO Website: www.ico.org.uk

ICO Helpline: 0303 123 1113

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF