Privacy Policy
20 Pence Productions
Trading name of Claire Peacock (Sole Trader)
Last Updated: October 2025
Version: 3.0
1. Introduction
This Privacy Policy explains how I, Claire Peacock, trading as 20 Pence Productions, collect, use, store, and protect your personal information when you:
Visit my website
Enquire about or purchase my services
Purchase templates or digital products
Subscribe to my mailing list
Book appointments with me
I am committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Contact Details
Name: Claire Peacock
Trading as: 20 Pence Productions
Email: claire@20penceproductions.co.uk
Phone: 07724 151230
If you have any questions about this Privacy Policy or how I handle your data, please contact me using the details above.
3. What Personal Information We Collect
I collect and process the following types of personal information:
For Service Enquiries and Client Projects:
Full name
Email address
Phone number
Postal address (if needed for project delivery or invoicing)
Business name
Business address
Business email address
Business phone number
Project details and communications
Payment information (processed securely by third parties—see Section 5)
For Template and Digital Product Purchases:
Full name
Email address
Order details (products purchased, date, transaction ID)
Delivery address (if applicable)
Payment information (processed securely by third parties—see Section 5)
For Mailing List Subscribers:
Name (optional—first name only)
Email address
For Website Visitors:
IP address
Browser type and version
Device information
Pages visited and time spent on site
Referring website
Location data (city/country level)
Cookie data (see Section 11)
4. How We Collect Your Personal Information
Information You Provide Directly:
When you email me at claire@20penceproductions.co.uk
When you request a quotation for services
When you sign a proposal or contract
When you purchase templates or digital products through my website
When you subscribe to my mailing list
When you provide project assets, feedback, or communications
Information Collected Indirectly:
Through Calendly: When you book an appointment using my scheduling link, Calendly collects your name, email address, and appointment details on my behalf. See Calendly's Privacy Policy: https://calendly.com/privacy
Through Squarespace: My website is hosted by Squarespace, and payment processing is handled by Squarespace, Stripe, and/or PayPal. These services collect payment and transaction information on my behalf. I do not have access to or store your full payment card details. See their privacy policies:
Squarespace Privacy Policy: https://www.squarespace.com/privacy
Stripe Privacy Policy: https://stripe.com/gb/privacy
PayPal Privacy Policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
Through Google Analytics: I use Google Analytics to understand how visitors use my website. Google collects anonymised data about your visit. You can read more about how Google uses your data here: https://www.google.com/intl/en/policies/privacy
You can opt out of Google Analytics tracking here: https://tools.google.com/dlpage/gaoptout
5. Why We Collect Your Information and How We Use It
I use your personal information for the following purposes:
For Service Clients:
To communicate with you about your enquiry or project
To prepare and send proposals, quotations, and contracts
To deliver services you have commissioned (design work, branding, graphics, etc.)
To send project samples, proofs, and final approved files
To process invoices and payments
To provide customer support and answer queries
To maintain records for legal and accounting purposes
To resolve disputes or address complaints
For Template and Digital Product Customers:
To process and fulfil your order
To send you the download links and purchase confirmation
To provide customer support regarding your purchase
To send receipts and invoices
To maintain records for legal and accounting purposes
For Mailing List Subscribers:
To send occasional updates, news, and information about my services
To share helpful content, tips, and resources
To announce new products or special offers
For Website Analytics:
To understand how visitors use my website
To improve website functionality and user experience
To identify and fix technical issues
To analyse which content is most popular
6. Legal Basis for Processing Your Information
Under the UK General Data Protection Regulation (UK GDPR), I rely on the following lawful bases for processing your personal information:
a) Consent: You have given clear consent for me to process your personal data for a specific purpose (e.g., subscribing to the mailing list, booking an appointment).
You can withdraw your consent at any time by contacting claire@20penceproductions.co.uk
b) Contractual Obligation: Processing is necessary to fulfil a contract with you or to take steps before entering into a contract (e.g., providing services, delivering purchased products).
c) Legal Obligation: Processing is necessary to comply with legal obligations such as tax law, accounting requirements, or responding to lawful requests from authorities.
d) Legitimate Interests: Processing is necessary for my legitimate business interests, such as maintaining records, improving my services, or preventing fraud, provided this does not override your rights and interests.
7. Who We Share Your Information With
I do not sell, rent, or trade your personal information to third parties for marketing purposes.
I may share your information with the following trusted third parties who help me run my business:
Essential Service Providers:
Squarespace: Website hosting and e-commerce platform
Stripe and/or PayPal: Payment processing
Google Workspace (Google Drive, Gmail): Secure storage and email communications
Calendly: Appointment scheduling
MailerLite: Email marketing and mailing list management (only if you subscribe)
Google Analytics: Website analytics (anonymised data)
These third parties are required to keep your information secure and only use it for the purposes I specify. They act as data processors on my behalf and are bound by their own privacy policies and UK GDPR requirements.
Other Circumstances:
I may disclose your information if:
Required by law, court order, or legal process
Necessary to protect my legal rights or defend against legal claims
Required to prevent fraud or illegal activity
You have given explicit permission to share your information
8. How We Store and Protect Your Personal Information
I take the security of your personal information seriously and implement appropriate measures to protect it from unauthorised access, loss, misuse, or disclosure.
Storage Location:
Your information is securely stored in:
Cloud-based storage: Google Drive (encrypted and password-protected)
Email communications: Google Workspace (Gmail)
Third-party platforms: Squarespace, MailerLite, Calendly (all UK GDPR compliant)
Security Measures:
Access to personal data is restricted to one password-protected computer with secure PIN login
All software is kept up to date with the latest security patches
Antivirus software is installed and regularly updated
Strong, unique passwords are used for all accounts
Two-factor authentication (2FA) is enabled where available
Additional security measures (such as facial recognition) may be used when working in shared or public environments
Regular backups are maintained to prevent data loss
Data Transfer:
Your data is stored and processed within the UK and EU. If any third-party service provider transfers data outside the UK/EU, they do so in compliance with UK GDPR using appropriate safeguards (such as Standard Contractual Clauses).
While I take all reasonable precautions to protect your data, please be aware that no method of transmission over the internet is 100% secure. I cannot guarantee absolute security, but I am committed to protecting your information to the best of my ability.
9. How Long We Keep Your Information
I retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal obligations.
For Service Clients:
Personal and business information is retained for the duration of our working relationship and for a reasonable period after project completion to:
Provide copies of work upon request
Support future projects, revisions, or amendments
Showcase completed work in my portfolio (with your permission)
Meet accounting and tax record-keeping requirements (currently 6 years under UK law)
For Template and Digital Product Customers:
Order information and contact details are retained for:
Customer support purposes
Legal and accounting requirements (currently 6 years under UK law)
To provide re-download links if requested
For Enquiries That Don't Result in Work:
If you enquire about services but do not proceed to become a client, your personal information will be retained for no longer than one (1) year from the date of last contact
This allows me to follow up if you decide to proceed later, but ensures your data isn't kept indefinitely
For Mailing List Subscribers:
Your information is retained until you unsubscribe or request deletion
If you unsubscribe, your email address may be retained in a suppression list to ensure you don't receive future emails
Deletion:
After the retention periods above, I securely and permanently delete personal data that is no longer needed.
You can request earlier deletion at any time by contacting claire@20penceproductions.co.uk. I will respond within 30 days. Some information may need to be retained for legal or accounting purposes even after your request.
10. Marketing and Mailing List
If you subscribe to my mailing list, I will collect and store your name (optional) and email address to send you:
Occasional updates and news about my services
Helpful tips, resources, and content related to design and branding
Information about new products or services
Special offers or promotions (occasionally)
How It Works:
Opt-in: I use a double opt-in process, meaning you must confirm your subscription by clicking a link in a confirmation email. This ensures you genuinely want to receive emails from me.
Frequency: I send emails occasionally—typically no more than once or twice per month. I will never spam you.
Unsubscribe: You can unsubscribe at any time by:
Clicking the "unsubscribe" link at the bottom of any email
Contacting me at claire@20penceproductions.co.uk
Third-party processor: I use MailerLite to manage email communications. MailerLite acts as a data processor and complies with UK GDPR. See their privacy policy: https://www.mailerlite.com/legal/privacy-policy
I do not share your mailing list information with any other third parties or use it for any purpose other than direct communications from 20 Pence Productions.
11. Cookies
This website uses cookies to improve your experience and help me understand how the site is used.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and provide analytics data.
What Cookies Do We Use?
Essential Cookies (Squarespace):
Required for the website to function properly
Enable shopping cart functionality and secure checkout
These cannot be disabled if you want to use the website
Analytics Cookies (Google Analytics):
Help me understand how visitors use my website
Collect anonymised data about pages visited, time on site, and user behaviour
Allow me to improve website performance and content
Managing Cookies:
You can control and manage cookies through your browser settings:
Google Chrome: Settings > Privacy and Security > Cookies
Safari: Preferences > Privacy > Cookies
Firefox: Settings > Privacy & Security > Cookies
Microsoft Edge: Settings > Privacy, search, and services > Cookies
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
For more information about cookies:
Google's Cookie Policy: https://policies.google.com/technologies/cookies
Squarespace Cookie Information: https://support.squarespace.com/hc/en-us/articles/360001264507
Please note that disabling certain cookies may affect website functionality and your user experience.
12. Your Data Protection Rights
Under UK data protection law, you have the following rights regarding your personal information:
1. Right of Access
You have the right to request copies of your personal information. I will provide this free of charge, usually within one month.
2. Right to Rectification
You have the right to ask me to correct personal information you believe is inaccurate or incomplete.
3. Right to Erasure ("Right to be Forgotten")
You have the right to ask me to delete your personal information in certain circumstances, such as:
The information is no longer necessary for the purpose it was collected
You withdraw consent and there is no other legal basis for processing
You object to processing and there are no overriding legitimate grounds
Please note: I may need to retain some information for legal or accounting purposes even after your request.
4. Right to Restriction of Processing
You have the right to ask me to restrict how I use your personal information in certain circumstances, such as:
You contest the accuracy of the data
The processing is unlawful but you don't want the data deleted
I no longer need the data but you need it for a legal claim
5. Right to Object to Processing
You have the right to object to processing based on legitimate interests or for direct marketing purposes (including profiling).
6. Right to Data Portability
You have the right to request that I transfer your personal information to another organisation or directly to you in a structured, commonly used, and machine-readable format (e.g., CSV file).
7. Rights Related to Automated Decision-Making
I do not use automated decision-making or profiling that significantly affects you.
13. How to Exercise Your Rights
To exercise any of these rights, please contact me at:
Email: claire@20penceproductions.co.uk
Phone: 07724 151230
What I Need From You: To process your request, I may need to verify your identity to ensure I'm providing information to the correct person.
Response Time: I will respond to your request within one (1) month. If your request is complex, I may extend this by up to two additional months and will let you know.
No Charge: You will not be charged for exercising your rights unless your request is clearly unfounded, excessive, or repetitive, in which case I may charge a reasonable administrative fee or refuse the request.
14. How to Complain
If you have concerns about how I handle your personal information, please contact me first so I can try to resolve the issue:
Email: claire@20penceproductions.co.uk
Phone: 07724 151230
I will investigate your complaint and respond within 10 working days.
Escalating to the ICO:
If you are not satisfied with my response, or if you believe I am processing your data unlawfully, you have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk
15. Children's Privacy
My services are not directed at children under the age of 18. I do not knowingly collect personal information from children.
If I become aware that I have inadvertently collected personal information from a child, I will take steps to delete that information as soon as possible.
If you believe I have collected information from a child, please contact me immediately at claire@20penceproductions.co.uk.
16. Links to Other Websites
My website may contain links to third-party websites, services, or resources (e.g., social media platforms, supplier websites, or resources I recommend).
I am not responsible for:
The privacy practices of third-party websites
The content or accuracy of third-party websites
How third parties collect, use, or protect your personal information
Your Responsibility: I recommend reviewing the privacy policy of any website you visit. Clicking on third-party links is at your own risk.
17. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in:
How I process personal information
Legal or regulatory requirements
My business practices or services
How You'll Be Notified:
Any changes will be posted on this page with an updated "Last Updated" date and version number
For significant changes, I may notify you via email (if I have your email address) or display a notice on the website
Continued use of my services or website after changes are posted constitutes acceptance of the updated policy
Checking for Updates: I encourage you to review this Privacy Policy periodically to stay informed about how I protect your information.
18. International Data Transfers
My business operates within the UK, and your data is primarily stored and processed within the UK and European Economic Area (EEA).
Some of the third-party service providers I use may transfer or store data outside the UK/EEA. Where this occurs, they do so in compliance with UK GDPR using appropriate safeguards such as:
Standard Contractual Clauses (SCCs)
Adequacy decisions from the UK government
Other legally approved transfer mechanisms
I ensure that any international transfers meet the required legal standards to protect your data.
19. Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, I will:
Notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach (where required by law)
Notify you without undue delay if the breach is likely to result in a high risk to your personal data
Take immediate steps to contain and remedy the breach]
20. Contact Me
If you have any questions, concerns, or requests regarding this Privacy Policy or how I handle your personal information, please contact me:
Claire Peacock
Trading as: 20 Pence Productions
Email: claire@20penceproductions.co.uk
Phone: 07724 151230
I aim to respond to all enquiries within 2 working days.
End of Privacy Policy
By using my website, services, or products, you acknowledge that you have read and understood this Privacy Policy.