Privacy & Cookie Policy

Last updated: 14 July 2026

1. Who we are

This website (nadiahm.co.uk) is operated by Nadia Henrique-Murray, trading as Nadia Henrique-Murray - Brand Growth Strategist ("we", "us", "our"), a sole trader operating from a home office in Cornwall, England. We are the data controller for the personal data described in this policy.

Trading name: Nadia Henrique-Murray - Brand Growth Strategist

Contact: hello@nadiahm.co.uk

2. What data we collect

We collect the following personal data, depending on how you interact with us:

Enquiries via our contact form: name, company name, email address, phone number (optional), and any details you share about yourself and the support you're looking for.

Email or social media contact: your name, contact details, and the content of any messages you send us via email, Instagram, or LinkedIn.

Website usage data: collected via Google Analytics; see our Cookie Policy in Section 7.

Client project data: if we work together, we collect information you provide via an online questionnaire (Google Form) or emailed documents, which may include financial data and confidential information about your business, operations, and competitors. This is provided directly by you and is necessary for us to deliver our services.

We do not knowingly collect any special category data (e.g. health, ethnicity, religion) and ask that you do not include this in any communication with us unless essential and relevant to our work together.

3. How and why we use your data

We use your data for the following purposes, and on the following lawful bases under UK GDPR:

  • To respond to your enquiry and correspond with you: legitimate interests (responding to people who contact us).
  • To deliver our services once you become a client, including analysing the business information you provide: performance of a contract.
  • To keep records for accounting, tax, and legal purposes: legal obligation.
  • To understand how our website is used and improve it: consent (via cookies; see Section 7).

We do not use your data for automated decision-making or profiling.

4. Sharing your data

We do not sell or rent your personal data, and we do not share client business data with third parties unless you have expressly authorised this in writing.

We do use a small number of service providers to help us run our business, who process data on our behalf:

  • Google (Google Analytics: website usage data; Google Drive: secure storage of enquiry and client data; Google Forms: client questionnaires).
  • Microsoft (Outlook: where enquiries submitted via our contact form, and other correspondence, are received and stored as email).

Currently, Google and Microsoft are the only third-party service providers we use in this way. If this changes, we will update this section, along with the "last updated" date at the top of this policy, so it stays accurate.

These providers are bound by their own data protection terms and, where required, appropriate safeguards for international transfers (see Section 5). We may also disclose data where required by law, or to professional advisers (e.g. an accountant) under confidentiality.

5. International data transfers

Google and Microsoft both run infrastructure located in the UK, EU, and other countries, including the US. Where your data is transferred outside the UK, this is done under those providers' Standard Contractual Clauses and the UK's International Data Transfer Addendum, which are recognised safeguards under UK GDPR.

6. How long we keep your data

Enquiries that don't lead to client work: kept for up to 24 months from your last contact with us, then deleted.

Client project data: kept for 6 years from the end of our engagement, in line with standard UK record-keeping and legal limitation periods, then securely deleted.

Where we're required to keep information for longer for legal or accounting reasons, we will do so.

7. Cookies

7.1 What cookies we use

Our website uses Google Analytics to understand how visitors use our site (e.g. pages visited, time on site, approximate location, device/browser type). This helps us improve the site and our content.

Google Analytics places the following cookies:

  • _ga: distinguishes users (expires after 2 years)
  • _gid: distinguishes users (expires after 24 hours)

We do not use any advertising, marketing, or social media cookies at this time.

7.2 Your consent

Analytics cookies are not essential to the site working, so we only set them with your consent. When you first visit our site, you'll see a cookie banner where you can accept or decline analytics cookies. You can change your choice at any time using the cookie preferences link available on our site (typically found in the footer or via a small icon that re-opens the banner).

You can also manage or delete cookies at any time through your browser settings. Disabling cookies won't stop the site working, but we won't be able to see anonymised usage data that helps us improve it.

Instructions for common browsers:

Google Chrome - Mozilla Firefox - Apple Safari - iOS Safari

8. Keeping your information accurate

It's important the information we hold about you is accurate. Please let us know if any of your details change by emailing hello@nadiahm.co.uk.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, where we have no continuing reason to keep it.
  • Object to our processing based on legitimate interests.
  • Restrict how we use your data in certain circumstances.
  • Receive your data in a portable format, or ask us to transfer it.
  • Withdraw consent at any time, where processing is based on consent (e.g. analytics cookies).

To exercise any of these rights, email hello@nadiahm.co.uk. We may ask you to verify your identity before responding, and we'll reply within one month.

If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, though we'd appreciate the chance to resolve any concerns directly first.

10. Security

We take reasonable steps to protect your personal data, including:

  • Our website uses HTTPS encryption, so data submitted through our contact form is encrypted in transit.
  • Contact form submissions are sent directly to our email and stored in Outlook, and other business data is stored in Google Drive, with access restricted to us and protected by password.

No method of transmission or storage is 100% secure, but we keep these measures under review as our business grows.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with an updated "last updated" date.

12. Contact us

If you have any questions about this policy or how we handle your data, please contact us at hello@nadiahm.co.uk.