Privacy policy

Last updated: 5 July 2026

Who I am. This website, sarahmcdonnell.com, is operated by Sarah McDonnell, trading as Your Creative Team® (“I”, “me”, “my”), a brand innovation consultancy based in London, United Kingdom. I’m the data controller for personal information collected through this site. You can reach me at sarah@yourcreative.team.

What this policy covers. This policy explains what personal information I collect when you visit this website or get in touch, how I use it, who I share it with and the rights you have over it. It applies to this website only. If you follow a link to another site (LinkedIn, Instagram or a client’s site), their privacy policy applies there, not mine.

Information I collect. I keep this deliberately minimal. When you contact me by email or through this site, I collect your name, email address, company and whatever you include in your message. When you browse the site, my hosting provider (Framer) automatically processes technical data such as your IP address, browser type and pages visited, which is needed to deliver the site securely and understand how it performs. I don’t buy data about you, and I don’t collect anything I don’t need.

How I use it. I use your information to respond to your enquiry, discuss and deliver projects, keep basic business records (including invoicing and accounting), and keep the website secure and working. If we work together, I’ll hold your contact details for the duration of our relationship and as long as the law requires afterwards (for example, HMRC requires business records to be kept for six years).

Legal bases. Under UK GDPR, I rely on: legitimate interests (responding to enquiries, running and securing the website, keeping in touch with business contacts), contract (when we’re working together or preparing to), and legal obligation (tax and accounting records). I don’t send marketing emails, so I don’t need your consent for that. If that ever changes, I’ll ask first.

Who I share it with. I don’t sell your data, full stop. I share it only with service providers who help me run the business: website hosting (Framer), email and file storage providers, and my accountant where invoicing requires it. Each processes data under their own contractual and legal obligations. Some providers may process data outside the UK; where they do, transfers are protected by recognised safeguards such as UK adequacy decisions or standard contractual clauses.

How long I keep it. Enquiries that don’t go anywhere: up to 12 months, then deleted. Client records: the length of our work together plus six years, for legal and accounting reasons. Website technical logs are retained per Framer’s hosting policies.

Your rights. You have the right to access the personal data I hold about you, correct it, ask me to delete it, restrict or object to how I use it, and receive a copy in a portable format. Email sarah@yourcreative.team and I’ll respond within one month. If you’re not happy with how I’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes. If I change this policy, I’ll update it here with a new date. No sneaky edits.