Privacy Policy

Last updated March 2026

1. Who we are

This privacy policy explains how Davina Campbell (‘I’, ‘me’, ‘my’) collects, uses, and protects your personal data when you visit davinacampbell.com or use any of my services.

Data Controller

Davina Campbell (sole trader)First Floor, Swan Buildings, Manchester, United Kingdom davina@davinacampbell.comdavinacampbell.com

I am the data controller for personal data collected through this website. I am registered with and subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data I Collect

I collect personal data in the following ways.

2.1 Data you provide directly

  • Name and email address when you download the free website scorecard or sign up to receive emails.
  • Name, email address, and any information you share when you make an enquiry through the contact form.
  • Name, email address, and payment information when you book and pay for a Website Repositioning Audit.
  • Any information you share with me directly during a consultation or audit session.

2.2 Data collected automatically

  • Technical data including your IP address, browser type, device type, and pages visited, collected automatically when you visit this website.
  • Usage data including how you navigate the site, which pages you spend time on, and how you arrived at the site, collected via Google Analytics.

3. Why I collect your data and the legal basis

Under UK GDPR, I must have a lawful basis for processing your personal data. The table below sets out what I use your data for and the legal basis for doing so.

4. Third Parties Who Process Your Data

I use a small number of trusted third-party services to operate my business. Each of these acts as a data processor on my behalf and is contractually required to handle your data securely and in compliance with UK GDPR.

I do not sell your personal data to any third party. I do not share your data with anyone except the processors listed above and where required by law.

5. Cookies

This website uses cookies. A cookie is a small text file placed on your device when you visit a website. Cookies help the site function properly and allow me to understand how visitors use it.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of this website. For more information about managing cookies, visit allaboutcookies.org.

6. How Long I Keep Your Data

I do not keep your personal data for longer than necessary. The following retention periods apply.

7. Data security

I take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss, or disclosure.

 

  • This website is served over HTTPS with an SSL certificate.
  • Payment data is processed exclusively by Stripe and is never stored on this website.
  • Access to data held in MailerLite, and TidyCal is protected by strong passwords and two-factor authentication where available.
  • I regularly review the third-party tools I use to ensure they maintain appropriate security standards.

 

In the event of a data breach that is likely to result in a risk to your rights and freedoms, I will notify the ICO within 72 hours and inform affected individuals without undue delay.

8. International Data Transfers

Some of the third-party services I use may transfer your data outside the UK. Where this occurs, I ensure that appropriate safeguards are in place.

 

  • Google Analytics may transfer data to the United States. Google participates in the UK-US Data Bridge and provides Standard Contractual Clauses as a transfer mechanism.
  • Stripe may transfer data internationally as part of its global payment infrastructure. Stripe is certified under the UK-US Data Bridge.
  • MailerLite and Kit are headquartered in the EU and USA respectively and comply with applicable data transfer regulations.

 

9. Links to Other Websites

This website may contain links to other websites. I am not responsible for the privacy practices of those websites and this policy does not apply to them. I encourage you to read the privacy policy of any website you visit.

10. Children's Privacy

My services are not directed at children under the age of 13. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me at davina@davinacampbell.com and I will take steps to delete it.

11. Changes to This Policy

I may update this privacy policy from time to time to reflect changes in my practices or legal requirements. The date at the top of this page shows when it was last updated. Where changes are significant, I will notify active subscribers by email.

12. How to Contact Me

If you have any questions about this privacy policy or how I handle your personal data, please contact me.

Contact Details

Davina CampbellFirst Floor, Swan Buildings, Manchester, United Kingdom

davina@davinacampbell.comdavinacampbell.com