Legal
Privacy.
This notice explains how Katerina Hayes ("we", "us") collects and uses personal data on katerinahayes.com in line with the UK GDPR and the Data Protection Act 2018. Plain English, no dark patterns.
What we collect
Only what you give us: name and email when you subscribe to the newsletter or complete an enquiry form, plus any message content you send. We also collect standard server logs (IP, user agent, timestamp) for security and to keep the site reliable.
Why we use it
To reply to your enquiry, to send the newsletter you opted into, and to keep the site safe. We do not sell, rent, or trade your data. We do not use it for profiling or automated decisions.
Legal basis
Consent for the newsletter (you asked, we send). Legitimate interests for replying to your direct enquiries and for basic site security. You can withdraw consent at any time.
Who sees it
A small set of processors we rely on to run the site and communicate with you (hosting, email delivery, database). Each is bound by contract and processes data on our instructions only. No transfers outside adequate jurisdictions without appropriate safeguards.
How long we keep it
Newsletter data: until you unsubscribe. Enquiry data: up to 24 months after our last exchange, then deleted or anonymised. Server logs: 30 days.
Your rights
Access, rectification, erasure, restriction, portability, objection. Email hello@katerinahayes.com and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
Contact
Data controller: Katerina Hayes, Scotland, United Kingdom. Email: hello@katerinahayes.com.
Last updated: 25 July 2026
