Privacy and Cookies Policy
1. About This Policy
1.1 I am committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.
1.2 This Privacy and Cookies Policy explains how I collect, use, store and protect personal information when you visit this website, contact HYC Marketing, enquire about my services, become a client or otherwise interact with me in a business capacity.
1.3 For the purposes of applicable UK data protection law, the data controller is Claire Newman, trading as HYC Marketing.
1.4 In this policy, “I”, “me” and “my” refer to Claire Newman trading as HYC Marketing.
1.5 I use cookies and similar technologies on this website. Where cookies are not strictly necessary for the operation of the website, they will only be used in accordance with your cookie preferences and where the required consent has been provided.
1.6 In some circumstances I may process personal data on behalf of a client rather than for my own purposes. Further information about this is provided in Section 13.
2. Personal Information I Collect
2.1 I may collect and process the following categories of personal information.
Contact and identity information
This may include:
(a) your name;
(b) your business or organisation name;
(c) your job title or role;
(d) your email address;
(e) your telephone number;
(f) your postal or business address, where relevant; and
(g) your social media account or profile details where you communicate with me through social media.
Client and service information
2.2 Where you enquire about or use my services, I may process information relating to:
(a) your business;
(b) your marketing requirements;
(c) the services you have requested or purchased;
(d) proposals, contracts and agreements;
(e) projects and work undertaken;
(f) approvals, feedback and instructions; and
(g) other information reasonably required to provide my services.
Communication information
2.3 I may process information contained in communications between you and me, including:
(a) emails;
(b) website contact-form enquiries;
(c) telephone and video calls;
(d) social media messages and comments;
(e) face-to-face business meetings; and
(f) other correspondence relating to our business relationship.
Transaction and financial information
2.4 Where you purchase services from me, I may process information relating to payments, invoices and transactions. This may include payment references and other information reasonably required to administer payments and maintain accounting records. I do not use this website to store customers' payment-card details.
Website and technical information
2.5 When you use this website, certain technical and usage information may be collected automatically. This may include:
(a) your IP address;
(b) browser type and version;
(c) device and operating-system information;
(d) approximate geographical location;
(e) referring website or source;
(f) pages visited;
(g) length and timing of visits; and
(h) information about how visitors navigate and interact with the website.
This information may be collected through Squarespace, Google Analytics and other cookies or technologies described later in this policy.
Marketing preferences
2.6 I may hold information about whether you have agreed to receive marketing communications from me or have asked not to receive them.
2.7 Most personal information I process is provided directly by you or your business. I may also receive information from:
(a) clients where necessary to provide contracted marketing services;
(b) publicly available business sources such as business websites, professional social media profiles and business directories, where appropriate and lawful; and
(c) service providers used in operating my website and business.
2.8 My website and services are intended for businesses and adults. They are not directed at children and I do not knowingly seek to collect personal information from children through this website.
2.9 Please do not provide me with another person's personal information unless you are authorised to do so and it is necessary for the relevant business purpose.
3. How and Why I Use Personal Information
3.1 I will only process personal information where I have a lawful basis for doing so.
Depending on the circumstances, the lawful basis may be:
(a) contract — where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you;
(b) legitimate interests — where processing is reasonably necessary for the operation and development of HYC Marketing and those interests are not overridden by your rights;
(c) consent — where you have given clear consent for a particular purpose;
(d) legal obligation — where processing is necessary to comply with a legal obligation; or
(e) vital interests — in the unlikely event that processing is necessary to protect someone's life.
Enquiries and client relationships
3.2 I may use your contact, communication and business information to:
(a) respond to enquiries;
(b) discuss your marketing requirements;
(c) prepare proposals and quotations;
(d) provide my services;
(e) manage projects and client relationships;
(f) provide support;
(g) deal with complaints; and
(h) maintain appropriate business records.
The lawful bases will normally be contract, steps taken before entering into a contract and/or my legitimate interests in operating and managing HYC Marketing.
Invoicing and administration
3.3 I may process personal information to administer contracts, issue invoices, record payments, maintain financial records and meet accounting and tax obligations. The lawful bases are contract, legitimate interests and/or compliance with legal obligations.
Website analytics and improvement
3.4 I may use website and usage information to understand how visitors use this website, monitor its performance and improve its content and usability.
Where non-essential cookies or tracking technologies are used for this purpose, they will be used subject to the cookie-consent requirements described in this policy.
Marketing
3.5 I may use personal information to send marketing communications about HYC Marketing where I am legally permitted to do so. Further information is set out in Section 4.
Security and legal matters
3.6 I may process personal information where reasonably necessary to:
(a) protect the security of my website, systems and business;
(b) prevent or investigate fraud or misuse;
(c) obtain or maintain insurance;
(d) obtain professional advice;
(e) establish, exercise or defend legal claims; or
(f) comply with legal or regulatory obligations.
The lawful basis will normally be legitimate interests or legal obligation.
3.7 I do not use personal information to make solely automated decisions about individuals that produce legal or similarly significant effects.
4. Direct Marketing
4.1 I may occasionally send information about HYC Marketing services, news, resources or other relevant marketing communications where permitted by law.
4.2 Where consent is required, I will only send marketing communications where you have given the required consent.
4.3 In appropriate circumstances I may rely on the existing-customer “soft opt-in” for marketing similar services, provided the legal requirements for doing so are met.
4.4 For electronic marketing purposes, sole traders and certain partnerships are treated in the same way as individual subscribers under the Privacy and Electronic Communications Regulations.
4.5 Where I send business-to-business marketing to corporate organisations, I may rely on legitimate interests where appropriate, while respecting any objection or request not to receive further communications.
4.6 You may unsubscribe from marketing communications at any time by:
(a) using the unsubscribe option provided in the communication, where available; or
(b) contacting me directly.
4.7 If you unsubscribe, I may retain limited information on a suppression list so that I can record your preference and avoid contacting you again for marketing purposes.
4.8 I do not sell your personal information to third parties.
5. Sharing Personal Information
5.1 I will not share personal information unnecessarily.
I may share information with trusted organisations or individuals where reasonably necessary for the purposes described in this policy.
These may include:
(a) Squarespace, which hosts and provides services connected with this website;
(b) UK2.net, in connection with email or related hosting services where applicable;
(c) Google, where Google Analytics or other Google services are used;
(d) Meta, where the Meta Pixel or related Facebook and Instagram advertising services are used;
(e) accountants, bookkeepers, insurers, solicitors and other professional advisers;
(f) IT, software, cloud-storage and other service providers used in running HYC Marketing;
(g) HM Revenue & Customs, regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law; and
(h) other suppliers or subcontractors where reasonably necessary to provide a service to you.
5.2 Where a third party processes personal information on my behalf, I will take reasonable steps to use providers that handle personal information appropriately and in accordance with applicable data protection requirements.
5.3 I may disclose information where necessary to establish, exercise or defend legal claims or protect my legal rights or those of another person.
6. International Transfers
6.1 Some of the technology and service providers I use may process or store personal information outside the United Kingdom.
6.2 Where personal information is transferred internationally and UK data protection law requires additional protection, I will rely on an appropriate lawful transfer mechanism.
Depending on the destination and provider, this may include:
(a) UK adequacy regulations;
(b) approved contractual safeguards, such as an International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses; or
(c) another transfer mechanism permitted by UK data protection law.
6.3 You may contact me if you would like further information about the safeguards applicable to an international transfer of your personal information.
7. How Long I Keep Personal Information
7.1 I will not keep personal information for longer than reasonably necessary for the purpose for which it was collected, unless a longer period is required by law or reasonably necessary to establish or defend legal claims.
7.2 As a general guide:
(a) enquiries that do not result in a client relationship may normally be retained for up to two years after the most recent meaningful contact;
(b) client, contract, service and relevant business correspondence may normally be retained for up to six years following the end of the client relationship, where reasonably necessary for business, contractual, insurance or legal purposes;
(c) financial, invoice and tax records will be kept for the period required by applicable tax and accounting law;
(d) marketing information will normally be retained until you withdraw your consent, unsubscribe or object to the processing, although limited suppression information may be retained afterwards to ensure your preference is respected; and
(e) website analytics and cookie information will be retained in accordance with the relevant cookie duration and the settings of the service concerned.
7.3 Information may be retained for longer where necessary because of an ongoing dispute, legal claim, regulatory requirement or other legal obligation.
7.4 When personal information is no longer required, I will take reasonable steps to delete, anonymise or securely dispose of it.
8. Security of Personal Information
8.1 I take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access.
8.2 These measures may include:
(a) password-protected systems and devices;
(b) appropriate access controls;
(c) secure and reputable website, email and cloud-service providers;
(d) software and security updates;
(e) secure backups where appropriate; and
(f) two-factor authentication where available and appropriate.
8.3 Access to personal information is limited to those who reasonably need access for business purposes.
8.4 While I take appropriate precautions, no transmission of information over the internet or electronic storage system can be guaranteed to be completely secure.
9. Your Data Protection Rights
9.1 Depending on the circumstances and the lawful basis being relied upon, you may have the following rights in relation to your personal information:
(a) the right of access — to ask for a copy of personal information held about you;
(b) the right to rectification — to ask for inaccurate or incomplete information to be corrected;
(c) the right to erasure — to ask for your personal information to be deleted in certain circumstances;
(d) the right to restrict processing — to ask for processing to be restricted in certain circumstances;
(e) the right to object — to object to certain processing, including processing for direct marketing;
(f) the right to data portability — in certain circumstances, to receive information in a portable format or have it transferred to another organisation;
(g) rights relating to automated decision-making — where applicable; and
(h) the right to withdraw consent — where processing is based on consent.
9.2 These rights are subject to exemptions and limitations under applicable data protection law and will not apply in every circumstance.
9.3 You have an absolute right to object to the use of your personal information for direct marketing.
9.4 If you wish to exercise a data protection right, please contact me using the details in Section 14.
9.5 I may need to request appropriate information to verify your identity before responding to a request.
10. About Cookies
10.1 Cookies are small files or pieces of information stored on your device when you visit a website. They can help websites function properly, remember preferences and provide information about how visitors use a website.
10.2 Cookies may be:
(a) session cookies, which expire when you close your browser; or
(b) persistent cookies, which remain on your device for a specified period or until you delete them.
10.3 Some cookies are strictly necessary for the website to operate. These do not normally require consent.
10.4 Other cookies, including analytics, performance and marketing cookies, are not strictly necessary. Where required by law, these will not be placed or activated until you have made the relevant choice through the website's cookie controls.
11. Cookies and Tracking Technologies Used on This Website
11.1 Squarespace
This website is hosted using Squarespace.
Squarespace may place strictly necessary cookies that enable the website to operate correctly and may also place analytics or performance cookies where these are enabled and you have provided the required consent.
Examples of Squarespace cookies that may be used include:
Cookie Purpose Typical Duration
ss_performancecookiesAllowed Records your preference regarding 30 days
performance and analytics cookies
ss_marketingcookiesAllowed Records your preference regarding 30 days
marketing cookies
ss_cid Helps identify unique visitors and Up to 2 years
sessions for Squarespace analytics
ss_cvisit Supports Squarespace visitor analytics Around 30 minutes
ss_cvr Helps identify unique visitors and sessions Up to 2 years
ss_cvt Supports Squarespace visitor analytics Around 30 minutes
The precise Squarespace cookies present may vary according to the website features and integrations in use.
11.2 Google Analytics
I use Google Analytics to help understand how visitors find and use the website.
Google Analytics may collect information such as pages visited, approximate location, device and browser information, referral sources and interaction with the website.
Google Analytics cookies may include:
Cookie Purpose Typical Duration
_ga Distinguishes website users for analytics purposes Up to 2 years
ga<container-id> Maintains session information Up to 2 years
Google Analytics cookies are non-essential and will only be used subject to your cookie preferences where consent is required.
11.3 Meta Pixel
I use the Meta Pixel in connection with Facebook and Instagram advertising.
Where enabled with your consent, the Meta Pixel may help:
(a) measure the effectiveness of advertising;
(b) understand whether website visits result from Meta advertising;
(c) measure website actions following advertisements; and
(d) support relevant advertising and audience measurement.
Cookies associated with the Meta Pixel may include fbp and, where applicable following an advertising click, fbc. These cookies may remain for approximately three months.
Meta's own use of information is governed by its privacy and cookie policies.
11.4 Non-essential analytics and marketing technologies described above should only be activated in accordance with the choices made through the website's cookie controls.
12. Managing Your Cookie Preferences
12.1 When you first visit this website, you will be given the opportunity to manage your preferences for non-essential cookies.
12.2 You can change or withdraw your cookie preferences using the website's cookie-management controls where available.
12.3 You can also delete or block cookies through your browser settings.
12.4 Blocking strictly necessary cookies may affect the operation of the website. Declining analytics or marketing cookies should not prevent you from accessing the main content of the website, although some measurement or personalised functionality may be unavailable.
12.5 Because third-party services and website functionality can change, the cookies used on the website may also change from time to time. This policy will be updated where necessary to reflect material changes.
13. When I Act as a Data Processor
13.1 For most of the personal information described in this policy, I act as the data controller because I decide why and how that information is processed for HYC Marketing's own business purposes.
13.2 In some client work, I may process personal information solely on the instructions of a client.
For example, this may arise where I am given access to a client's:
(a) social media accounts;
(b) customer or audience communications;
(c) mailing lists;
(d) marketing databases; or
(e) other systems containing personal information,
for the purpose of providing contracted marketing services.
13.3 Where I process such information solely on the client's documented instructions, the client will normally be the data controller and I will act as a data processor.
13.4 In those circumstances, the processing will be governed by the applicable client agreement and any required data-processing terms, as well as the relevant requirements of data protection law.
14. Contact Details, Complaints and Changes to This Policy
14.1 The data controller for the purposes described in this policy is:
Claire Newman trading as HYC Marketing
Business address:
HYC Marketing
Lytchett House
13 Freeland Park
Wareham Road
Poole
BH16 6FA
14.2 You can contact me:
(a) by post using the business address above;
(b) through the contact form on this website; or
(c) by email using the email address published on this website.
14.3 Claire Newman is the data protection contact for HYC Marketing.
14.4 HYC Marketing is registered as a data controller with the UK Information Commissioner's Office.
14.5 If you have concerns about how I handle your personal information, please contact me so that I have an opportunity to address them.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
14.6 I may update this Privacy and Cookies Policy from time to time. Any revised version will take effect when it is published on this website, and the date of the latest update will be shown below.
Date Updated: 10 September 2026