Debbie McLeod – Customer Privacy Notice
This Privacy Notice explains how Debbie McLeod collects, uses, stores, and protects personal information, and outlines your rights under UK data protection law.
Debbie McLeod is committed to safeguarding the privacy of children, parents, and carers and to handling personal data lawfully, fairly, and transparently.
1. Contact Details
Organisation: Debbie McLeod
Email: [email protected]
Debbie McLeod acts as the data controller for the personal information described in this notice.
2. What Information We Collect, Use, and Why
We collect and use personal information to provide services requested by a client.
This may include:
Names and contact details
Gender
Date of birth
Address
Payment details and financial transaction records
Photographs (where consent has been provided)
This information enables us to provide client with the requested services.
Some of the information we process is classified as special category data under UK GDPR.
3. Children’s Personal Data
We recognise the importance of protecting children’s personal data.
We only collect and process information relating to children where it is necessary to provide our services and where a parent or carer has provided appropriate consent or authority. Children’s personal information is handled with particular care and confidentiality at all times.
4. Lawful Bases and Your Data Protection Rights
Under UK data protection law (UK GDPR), we must have a lawful basis for processing personal data.
Your Rights
You have the right to:
Access your personal information
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Request restriction of how your data is used
Object to certain types of processing
Request data portability
Withdraw consent at any time, where consent is the lawful basis
We will respond to all valid requests without undue delay and within one month.
Requests should be made using the contact details provided above.
5. Our Lawful Bases for Processing
We process personal information in line with UK data protection law, based on the following lawful bases:
Consent
We rely on consent where required, particularly when processing sensitive personal data or special category information (for example, health-related details shared for grief support, or photographs taken during ceremonies).
Consent for special category data is obtained explicitly and, where relevant, from a parent or guardian for participants under 18.
You may withdraw your consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before consent was withdrawn.
Legitimate Interests
We may process certain personal information where it is necessary for our legitimate interests, provided that these do not override your rights or freedoms. Our legitimate interests include:
Planning, organising, and delivering bespoke ceremonies, rituals, and grief-support sessions
Communicating with clients about their bookings, ceremonies, or related services
Improving and developing our Services, website, and client experience
Ensuring the safety, wellbeing, and respect of all participants
Where sensitive or special category data is processed in connection with these activities, this is done with explicit consent to ensure your information is handled respectfully and securely.
6. Where We Get Personal Information From
We collect personal information:
Directly from you
7. How Long We Keep Information
Personal information is retained for the duration of our working relationship.
Once our work together has ended:
Information relating to you will be securely deleted within six months,
Or earlier, where you request deletion and this is legally permissible.
8. Who We Share Information With
We only share personal information when it is necessary and appropriate to provide our Services or comply with legal obligations.
This may include:
Clients, participants, or their authorised representatives (for example, parents or guardians where relevant) to ensure ceremonies, rituals, or support sessions are delivered safely and as requested
Trusted third-party service providers who help us run the Services, such as payment processors, booking platforms, or website hosting providers
Professional advisors where required by law or to protect your safety or wellbeing
We do not sell, trade, or share your personal information for marketing or commercial purposes with any third parties outside of these necessary purposes.
All third parties are required to handle your data securely and only for the purpose for which it was shared.
Data Processors
We may use trusted third-party service providers (data processors) to support the delivery of our services, such as secure email systems, invoicing or accounting software, and secure document storage platforms.
All data processors are required to process personal information only in accordance with our instructions and to implement appropriate security measures in line with UK data protection law.
We do not sell or share personal data for marketing purposes.
9. Data Security
We take appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, or destruction.
Access to personal data is limited to those who need it for legitimate purposes.
10. How to Complain
If you have any concerns about how we use your personal data, please contact us using the details above.
If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint
Copyright 2025 Debbie McLeod | Privacy Policy