In order to work as a freelance copywriter, I may collect various types of personal information that relate to you. These may include:
• your name
• your email address
• your phone number
• your gender
• your social media handle (for example, if you are active on Twitter or LinkedIn, particularly in a business capacity)
• your address (usually a business address)
• your financial information (for example, to pay you or be paid by you)
• recordings of phone calls if I interview you in the course of my writing business
How this data is collected
I typically collect this data from you when you:
• meet me in person
• email me
• fill out a form on my website
• agree to be interviewed for a piece of writing
I also collect personal data in other ways, for example:
• In order to find business partners or clients, I may gather data that is publicly available online – for example on your company website or on a social networking site to which we both subscribe – in a targeted way and in accordance with applicable laws.
• I may receive data about you that is passed to me by a client, for example if I am writing or editing a case study that mentions you in your place of work.
Why I collect data
I collect data for the following reasons, which I rely on as a legitimate basis for collecting the information:
• to market my business (including direct B2B marketing via email, post and phone) in accordance with the Privacy and Electronic Communications Regulations
• to identify, and keep records of, prospective or existing clients or partners
• to ensure the accuracy of anything I write or publish
• to check the accuracy of anything I have written or published.
What I do with the information
I keep data in the UK on encrypted devices, in accounts with reputable cloud services, and in offline formats. I may transfer the data between these formats.
I may store your data on email servers and with operators of reputable cloud software services. These may be outside the UK or the EU; where data is held outside the EU, I seek to use providers who comply with rules to ensure the adequacy of data protection measures.
I may share specific data with subcontractors (for example, if I have agreed to supply a case study about your organisation, mentioning your name, and I contract out this work to another writer).
In the course of my work, I may share personal data with other people at the same organisation from whom I received it in the first place.
I plan to keep your data for as long as I need it for a specified legitimate purpose. I may retain a piece of data indefinitely if I judge that there is a legitimate reason to do so, including the likelihood of the data being required as evidence in the event of a dispute.
Keeping data accurate and up to date
I make reasonable efforts to keep data accurate and up to date. See the section on ‘what I do with your data’ for more information.
I make reasonable efforts to secure the personal data I collect; these include both technical and physical measures. Measures include:
• using the HTTPS protocol
• encrypting computer data
• using a VPN (virtual private network) when appropriate
• using anti-malware software
• using reputable cloud storage services
• reviewing cloud services I use in order to be satisfied, as far as is reasonable, that they have effective security measures.
Exercising your rights
In order to exercise your rights under the EU General Data Protection Regulation, please contact me at the contact page of my website.
Specifically, if you don’t want me to contact you for marketing purposes, then please let me know by contacting me.