Privacy Policy

1. Introduction

Welcome to sarahluke.net (“we”, “our”, or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

By using sarahluke.net, you acknowledge and agree to this Privacy Policy. If you do not agree with its terms, please discontinue using our website.

2. Who We Are

Website: sarahluke.net
Data Controller: Sarah Luke (owner of sarahluke.net)
Registered location: London, United Kingdom
Contact email: sarah@87consult.co.uk

We determine how and why your personal data are processed. If you have any questions about this notice, please contact us using the details above.

3. Data We Collect

We may collect and process the following categories of personal data depending on how you interact with the website:

• Identity Data: name, title, and contact preferences
• Contact Data: email address, phone number, or postal address
• Technical Data: IP address, browser type and version, operating system, device identifiers, referral URLs
• Usage Data: details about how you use our website, pages visited, links clicked, session duration
• Communications Data: records of correspondence or messages sent to us
• Cookies and Tracking Data: cookies, analytics, and similar technologies (see our Cookie Policy)

We collect this data directly (through forms or communication) and automatically (via analytics tools).

4. How We Use Your Information

We will only use your personal data where permitted by law. Common uses include:

You can withdraw your consent at any time by contacting us or unsubscribing from emails.

5. Cookies and Analytics

Our site uses cookies and analytics tools (such as Google Analytics) to understand visitor behaviour, improve website performance, and deliver a better user experience.
You can manage or disable non-essential cookies in your browser settings or through our Cookie Policy.

We do not sell or rent personal data to third parties, and analytics data is anonymised wherever possible.

6. Sharing and Disclosure

We may share limited personal data with:

• Service providers: trusted vendors who support our website (hosting, analytics, or IT security)
• Regulators or authorities: when required by law or to protect legal rights
• Business transfers: in the event of merger, restructuring, or asset sale (with data protection safeguards)

All third parties are required to process your data securely and only for the specified purpose.

7. International Data Transfers

If your data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place — such as UK Addendum Standard Contractual Clauses or reliance on adequacy decisions — to maintain equivalent levels of protection.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.

Typical retention periods:

• Enquiries / correspondence: up to 6 years
• Marketing data: until you unsubscribe
• Technical / analytics data: typically ≤ 26 months

When data is no longer required, it is securely deleted or anonymised.

9. Data Security

We use appropriate technical and organisational measures to protect your data, including:

• Secure HTTPS encryption
• Restricted access controls
• Regular security audits and backups
• Anonymisation or pseudonymisation where appropriate

Despite these efforts, no online system is completely secure. In the unlikely event of a data breach, we will notify affected individuals and the Information Commissioner’s Office (ICO) as required by law.

10. Your Rights

Under UK data protection law, you have the following rights:

• Access – request a copy of your personal data
• Rectification – correct inaccurate or incomplete data
• Erasure (“Right to be forgotten”) – request deletion of your data
• Restriction – limit how your data is processed
• Objection – object to processing based on legitimate interests or for direct marketing
• Portability – request your data in a transferable format
• Withdraw consent – where processing relies on consent
• Lodge a complaint – with the ICO if you believe your rights are infringed

To exercise any of these rights, please contact us at [insert email].
We aim to respond within one month, as required under UK GDPR.

11. Children’s Privacy

Our website is not intended for individuals under 16 years of age, and we do not knowingly collect data from children.
If you believe a child has provided us with personal information, please contact us, and we will delete it.

12. Links to Other Websites

Our website may include links to external websites operated by third parties. We are not responsible for the privacy practices or content of such sites. Please read their privacy policies before submitting any personal information.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or in applicable law.
When updates are made:

• The “Last updated” date at the top will change;
• Significant updates will be highlighted on this page.

We encourage you to review this policy regularly to stay informed about how we protect your data.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact:

Email: sarah@87consult.co.uk
Address: London, UK.
Website: https://sarahluke.net

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO) via https://ico.org.uk.