Privacy Policy
Effective date: 01 January 2026
This website is operated by me, Kathryn Croft (“I”, “me”, “my”). I take your privacy seriously and I’m committed to protecting your personal data.
Who I am and how to contact me
I am the data controller for the personal data collected through this website. If you have questions about this policy or how I use your information, you can contact me at hello@inkandinsights.co.uk.
What information I collect
I may collect personal information you provide when you contact me, book a service, fill in a form, or submit materials for review. This can include your name, email address, booking details, questionnaire answers, and any messages you send.
If you book a critique or mentoring, I will also receive the writing materials you choose to submit (for example, manuscript pages, a synopsis, or a query letter), plus any notes you provide. If you upload a file or share a link, I will process and store that material so I can deliver the service you have requested.
Payments are processed through third-party payment providers (for example Wix Payments, Stripe, or PayPal, depending on what I use). I do not receive or store your full card details.
I also collect certain technical information automatically when you browse the site, such as your IP address, device type, browser type, and how you interact with the site. This is typically collected through cookies and similar technologies.
Sensitive information
I do not ask you to provide sensitive personal data (such as health information, political opinions, religious beliefs, or similar). Please avoid including sensitive personal data in your manuscript, notes, or messages unless it is necessary. If you choose to include it, I will only use it to the extent needed to provide the service and will treat it as confidential.
How I use your information and my legal basis
I use your personal data to provide the services you request, including confirming bookings, communicating with you, reviewing your materials, and delivering critiques or mentoring. This processing is necessary to perform my contract with you.
I may also use your information to respond to enquiries, administer and improve my services, keep appropriate records, and protect my business (for example to handle complaints or disputes). This is done on the basis of my legitimate interests.
I use information where required to meet legal obligations, including accounting and tax record keeping.
If you sign up to receive marketing emails or updates, I will use your contact details to send these communications. Where required, I will rely on your consent. You can unsubscribe at any time using the link in the email or by contacting me.
Cookies
I use cookies to make the site work properly and, if you allow, to understand how visitors use the site and to support marketing. You can manage your cookie preferences using the cookie banner and/or your browser settings. If you disable certain cookies, parts of the website may not function as intended.
Who I share your information with
I only share your personal data when it is necessary to run the website and provide services. This may include sharing data with Wix (my website hosting platform and associated tools such as booking and form features), payment providers to process payments, email/communication tools (if used), and analytics providers (if you accept analytics cookies). I may also share information with professional advisers such as accountants, and with law enforcement or regulators where I am legally required to do so.
I do not sell your personal data.
International transfers
Some of the providers I use may store or process information outside the UK. Where personal data is transferred internationally, I (and/or my providers) use appropriate safeguards designed to protect your information.
How long I keep your information
I keep your personal data only as long as necessary. As a general guide, I may keep enquiry messages for up to 12 months. Client project files (including manuscripts and feedback) are typically kept for up to 12 months after delivery, then deleted unless you ask me to keep them longer. Invoices and payment records are usually kept for 6 years for accounting and tax purposes. Marketing subscriptions are kept until you unsubscribe, and I periodically remove inactive contacts.
Security
I take reasonable steps to protect your information and restrict access to client materials to those who need it to provide the service. However, no method of online transmission or storage is completely secure, so please avoid sending highly sensitive information by email.
Your rights
You may have rights to access the personal data I hold about you, ask me to correct inaccurate information, request deletion, request restriction of processing, object to processing, and request data portability. Where I rely on consent (for example, for marketing), you can withdraw your consent at any time.
To exercise any of these rights, contact me at hello@inkandinsights.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Third-party links
My website may include links to third-party websites (such as social media). I am not responsible for their privacy practices and recommend reading their privacy policies.
Children
This website and services are not intended for children under 18, and I do not knowingly collect personal data from children.
Changes to this policy
I may update this privacy policy from time to time. The latest version will always be posted on this page, with the effective date shown at the top.