Privacy Policy — She's in the Attic

Who we are

She's in the Attic Ltd is an independent SEO consultancy registered in England and Wales (Company No. 16258691). References to "we", "us" or "our" in this policy refer to She's in the Attic Ltd.

For data protection enquiries, contact us at [email protected].

What data we collect

We collect personal data in the following ways:

Contact form — when you use the contact form on this site, we collect your name, email address, organisation name (optional) and the content of your message.
Analytics — we use Google Analytics 4 and Microsoft Clarity to understand how visitors use this site. This includes anonymised data such as pages visited, time on site, device type and approximate location. No personally identifiable information is collected through analytics.

We do not collect sensitive personal data, payment information or data from children.

How we use your data

To respond to your enquiry submitted via the contact form
To understand how visitors use this website and improve its content
To comply with legal obligations where required

We do not use your data for automated decision-making, profiling or marketing without your explicit consent. We do not sell your data to third parties.

Legal basis for processing

Contact form data — processed on the basis of legitimate interest (responding to a direct enquiry) and, where an engagement follows, contract performance.
Analytics data — processed on the basis of your consent, given via the cookie notice on first visit.

Third party processors

We use the following third party services to process data on our behalf:

Web3Forms — processes contact form submissions and delivers them to us by email. Privacy policy.
Google Analytics 4 — website analytics. Data is anonymised and processed by Google. Privacy policy.
Microsoft Clarity — website behaviour analytics including session recordings and heatmaps. Data is anonymised. Privacy policy.
Google Search Console — search performance data relating to this website. No personal visitor data is collected. Privacy policy.

Data retention

Contact form enquiries are retained for as long as necessary to manage the enquiry and any resulting engagement — typically no longer than three years. Analytics data is retained in accordance with the default retention settings of Google Analytics 4 and Microsoft Clarity.

Cookies

This site uses cookies for analytics purposes (Google Analytics 4 and Microsoft Clarity). A cookie notice is displayed on first visit allowing you to accept or decline analytics cookies. No cookies are set without consent except those strictly necessary for the site to function.

For full details see our Cookie Policy.

Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Withdraw consent at any time where processing is based on consent
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at [email protected].

Changes to this policy

We may update this policy from time to time. The date at the bottom of this page reflects when it was last revised. Continued use of the site after any changes constitutes acceptance of the updated policy.