Last updated: August 2026
1. Who we are
Christabel Creative is the trading name of Brigit Douglas.
Christabel Creative provides brand writing, copywriting, content strategy, social media and related creative services to founders, sole traders and small businesses.
For the purposes of UK data protection law, Brigit Douglas trading as Christabel Creative is the controller of the personal information described in this notice.
If you have a question about this privacy notice or how your personal information is used, please contact:
Email: brigit@christabelcreative.co.uk
2. What this notice covers
This privacy notice explains how Christabel Creative collects and uses personal information about people who:
- Visit this website
- Contact me about my services
- Book a call or meeting
- Subscribe to my email newsletter
- Become clients or represent client organisations
- Work with me as suppliers, collaborators or other business contacts.
Where I process personal information solely on behalf of a client as part of providing my services, that client is responsible for explaining how your information is used and I process it in accordance with their instructions.
3. Information I collect
Depending on how you interact with Christabel Creative, I may collect:
- Identity and contact information, such as your name, business or organisation, role, email address and telephone number.
- Enquiry and project information, including information you provide through the website contact form, email or other correspondence.
- Booking and meeting information, such as your contact details, appointment details and any information you choose to provide when arranging a meeting.
- Client and project information, including briefs, correspondence, notes, feedback, approvals, contracts and information needed to deliver agreed work.
- Financial and transaction information, such as invoices, payments and accounting records.
- Newsletter information, such as your name, email address, subscription preferences and unsubscribe status.
- Website and technical information, including privacy-friendly, aggregated information about how people find and use the website, along with technical or security information generated by the website and hosting provider.
- Any other information you choose to give me.
Please avoid sending sensitive personal information unless it is genuinely necessary for the work we are discussing and we have agreed how it will be handled. You do not generally have to provide personal information to me, but I may be unable to respond to an enquiry, arrange a meeting or provide my services if you do not provide information that is necessary for those purposes.
4. How and why I use your information
I only collect and use personal information where I have a reason to do so.
Enquiries and prospective clients
If you contact me about working together, I will use the information you provide to respond to your enquiry, understand what you need and, where appropriate, prepare a proposal or arrange a conversation.
The lawful basis will usually be taking steps at your request before entering into a contract, or my legitimate interests in responding to enquiries and developing my business.
Client work
If we work together, I use relevant contact, project, meeting and financial information to manage our relationship and deliver the agreed services.
The lawful basis will usually be performance of a contract where you are the client, or my legitimate interests in managing and delivering work where I am contracted by your organisation.
Bookings and meetings
If you use my booking system, I process the information needed to arrange, manage and follow up our meeting.
This is normally necessary to take steps before entering into a contract or for my legitimate interests in managing business relationships and appointments.
Email newsletter
If you choose to subscribe to my newsletter, I use your name, email address and subscription preferences to send it to you. I rely on your consent where required by law. You can withdraw your consent at any time by using the unsubscribe link in any newsletter or contacting me directly.
I will not sell your details to other organisations for marketing.
Running and improving the website
I use privacy-friendly analytics to understand, at an overall level, how people find and use the Christabel Creative website.
I deliberately aim to minimise unnecessary tracking and personal-data collection. Our analytics are used to understand things such as which pages are useful and how the website is performing, rather than to build profiles of individual visitors.
I may also process limited technical information where necessary to keep the website secure, diagnose problems and prevent misuse.
My lawful basis for necessary website operation, security and privacy-friendly measurement is generally my legitimate interests in operating, securing and improving my website. Consent will be requested where it is legally required for any non-essential cookies or similar technologies.
Administration and legal obligations
I use relevant information to manage invoices, accounting and tax records, keep appropriate business records, resolve disputes and comply with legal or regulatory requirements.
The lawful bases may include performance of a contract, legal obligation and my legitimate interests in running and protecting my business.
5. Who receives your information
I don't sell your personal information.
I use trusted third-party services to help operate Christabel Creative. Depending on how you interact with me, these may include:
- Cahillbrand Ltd for website hosting and related technical services.
- Plausible.io for privacy-friendly website analytics.
- Beehiiv for managing newsletter subscriptions and sending emails.
- Moxie for client management, bookings and related business administration.
- Google Workspace for email, calendar, meetings, cloud storage and related business administration.
- Xero for accounting and financial administration.
- Monzo for business banking
- Stripe for payment processing
- Professional advisers and trusted collaborators where they need information to carry out their role.
- Regulators, courts, public authorities or other parties where disclosure is required by law or necessary to protect legal rights.
I aim to share only the information necessary for each provider or collaborator to perform their role.
6. International transfers
Some technology providers may process or store information outside the United Kingdom.
Where UK data protection law treats this as a restricted international transfer, I will rely on applicable UK adequacy regulations or appropriate safeguards required under UK data protection law, such as approved contractual safeguards.
You can contact me using the details above if you would like more information about the safeguards used for international transfers.
7. How long I keep information
I keep personal information only for as long as I reasonably need it for the purpose for which it was collected, including legal, accounting and dispute-resolution requirements.
As a general guide:
- Unsuccessful enquiries will normally be kept for up to 24 months after our last meaningful contact.
- Client contracts, key project correspondence and related business records may be kept for up to 7 years after the client relationship ends where needed for legal or business-record purposes.
- Invoices, accounting and tax records will normally be kept for at least 6 years after the relevant financial year, or longer where required by law.
- Website enquiries that do not become client records will normally be deleted within 24 months.
- Newsletter subscription information will normally be kept while you remain subscribed, with limited suppression information retained where necessary to make sure I respect an unsubscribe request.
- Booking and routine meeting administration information will be kept only for as long as reasonably necessary for the business relationship or associated client record.
- Technical and security logs will normally be retained for a limited period determined by the website or hosting provider, unless they are needed to investigate a security incident.
These are working guidelines rather than a promise to retain every record for the full period. Information may be deleted sooner when it is no longer needed or retained for longer where there is a legal reason to do so.
8. Keeping your information secure
I take reasonable steps to protect the information I hold and choose reputable services to support the operation of my business.
Measures include access controls, strong passwords, multi-factor authentication where available, secure cloud services, software updates and limiting access to personal information to those who genuinely need it.
No website or online service can be guaranteed to be completely secure.
9. Your rights
Under UK data protection law, depending on the circumstances, you may have rights to:
- Ask for a copy of personal information I hold about you.
- Ask me to correct inaccurate or incomplete information.
- Ask me to delete your information.
- Ask me to restrict how your information is used.
- Object to certain uses of your information.
- Receive certain information in a portable format.
- Withdraw your consent where I rely on consent.
These rights are not absolute and legal exemptions may apply. You can object to direct marketing at any time.
To exercise your rights or ask a question about your information, email brigit@christabelcreative.co.uk. I may need to confirm your identity before fulfilling a request.
10. Complaints
If you are concerned about how I have handled your personal information, please contact me first so I have an opportunity to put things right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information about making a complaint is available from the ICO.
11. Links to other websites
This website may contain links to websites operated by other organisations. Christabel Creative is not responsible for how those websites collect or use personal information.
If you follow an external link, you should check the privacy information provided by that organisation.
12. Changes to this privacy notice
I may update this notice when my services, website, suppliers or legal obligations change.
The latest version will be published on this website together with the date it was last updated.