01Who we are
Lucy Loves Me (“we”, “us”, “our”) runs www.lucylovesme.co.uk (the “Site”). We are the data controller for the personal information described in this policy. You can contact us about privacy at any time by emailing lucy@lucylovesme.co.uk.
We handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
02Information we collect
We only collect the information we need. Depending on how you use the Site, this may include:
- Newsletter sign-ups: your email address, and when and how you signed up.
- Emails to us: your name, email address and anything you include in your message, for example when you contact us, pitch an article or ask about advertising.
- Comments: if comments are open, the name, email address and comment you submit, plus your IP address and browser details to help us detect spam.
- Usage information: we do not collect this ourselves. If you allow analytics and advertising cookies, Google collects information such as the pages you visit, the device and browser you use, your approximate location and how you arrived on the Site, and gives us anonymous, combined reports. See “Cookies and your choices” below.
- Security information: IP addresses and request details recorded by our security and hosting systems to protect the Site from attacks and abuse.
We do not sell products on the Site and do not collect payment details.
03How and why we use it
We use your information for the following purposes, relying on the lawful bases shown:
- To send you our newsletter, if you have signed up (consent). You can unsubscribe at any time using the link in every email.
- To reply to your emails and manage pitches, partnerships and enquiries (legitimate interests).
- To publish and moderate comments (legitimate interests).
- To see combined, anonymous reports from Google Analytics about how the Site is used, so we can improve it (consent).
- To show advertising that funds the Site, including personalised advertising where you allow it (consent).
- To keep the Site secure and prevent spam and abuse (legitimate interests).
- To comply with our legal obligations (legal obligation).
04Cookies and your choices
Cookies are small files stored on your device. We use strictly necessary cookies to make the Site work, and, only with your consent, cookies for analytics and advertising.
When you first visit, a consent message from Google lets you accept or reject non-essential cookies, or choose which purposes you allow. You can change your choices at any time using the privacy or cookie settings link shown on the Site, or by clearing cookies in your browser.
The main third-party cookies we use are:
- Google Analytics, which Google uses to measure visits and how the Site is used, and to give us combined reports. Read how Google uses this information.
- Google AdSense, to show ads and, if you consent, personalise them. Google and its partners may use cookies to serve ads based on your visits to this and other websites. You can manage personalised ads in Google’s Ad Settings, and read how Google uses information from sites that use its services.
05Who we share it with
We do not sell your personal information. We share it only with trusted service providers who help us run the Site, under contracts that require them to protect it:
- Kit (ConvertKit), which sends our newsletter.
- Google, for analytics (Google Analytics) and advertising (Google AdSense).
- Hostinger, our website host.
- Security and site tools, including Wordfence and Jetpack, which help protect and monitor the Site.
- Email and professional service providers we use to run the business.
We may also share information if required by law, or to protect our rights, our readers or others.
06International transfers
Some of our providers, such as Google and Kit, process information outside the UK, including in the United States. Where this happens, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum, standard contractual clauses or the UK Extension to the EU–US Data Privacy Framework.
07How long we keep it
Newsletter details are kept until you unsubscribe. Emails and enquiries are kept for as long as needed to deal with them and for up to two years afterwards. Published comments are kept until the article or comment is removed. Analytics data is held by Google in line with the retention setting in our Google Analytics account. Security logs are kept for a short period, usually no more than 90 days.
08Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete your information.
- Object to, or ask us to restrict, how we use your information.
- Ask for your information in a portable format.
- Withdraw your consent at any time, for example by unsubscribing or changing your cookie choices.
To use any of these rights, email lucy@lucylovesme.co.uk. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, but we would appreciate the chance to put things right first.
09Children
The Site is written for adults and is not intended for children under 13. We do not knowingly collect personal information from children.
10Keeping your information safe
The Site uses HTTPS encryption, and we use security software and access controls to protect the information we hold. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.
11Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.
12Contact us
If you have any questions about this policy or your personal information, email lucy@lucylovesme.co.uk.
Questions? Email lucy@lucylovesme.co.uk.
