Privacy policy

Effective date: [POLICY EFFECTIVE DATE]

Who is responsible

Sarah Wallace is the contact for Sarah Supernova. The responsible legal business is [LEGAL BUSINESS NAME AND ENTITY TYPE], at [BUSINESS MAILING ADDRESS AND COUNTRY]. Send privacy questions or requests to sarah@sarahsupernova.com.

Information received

When you email, information may include your name, email address, organization, message, and files you choose to send. An engagement may also involve contact, project, contract, invoice, and payment-status records. Please share only information needed for the work.

The hosting provider may process technical information such as IP address, browser details, requested pages, timestamps, and security logs to serve and protect the website.

How information is used

Information is used to respond to inquiries, prepare proposals, deliver and administer agreed services, maintain business records, address disputes, and protect the site. Where a legal basis is required, these purposes may rely on steps toward or performance of a contract, legal obligations, legitimate interests in operating a secure consulting business, or consent when required.

Service providers and disclosure

Information may be processed by hosting, email, meeting, document-storage, accounting, and payment providers as needed to operate the business and deliver your engagement. The site is prepared for hosting on 20i. If a Stripe payment link or invoice is provided for an engagement, payment details are handled by Stripe under its own privacy policy. This website itself has no payment form and does not collect card numbers.

Information may also be disclosed when legally required or to establish or defend legal rights. Personal information is not sold or shared for cross-context behavioral advertising.

Cookies and tracking

This website’s own code does not set cookies, use browser storage, or include analytics, advertising trackers, embedded media, or external font requests. Your email application and any third-party service you choose to visit operate under their own policies. If tracking or new integrations are added, this policy and any required consent controls must be updated before use.

Retention and security

Information is retained only as long as needed for the purpose for which it was received, the engagement, required business records, and any applicable legal or dispute obligations. The appropriate period depends on the record and applicable law. You may contact Sarah to ask about retention for your information or request deletion where permitted.

Reasonable measures are used to protect information, but no transmission or storage method can be guaranteed completely secure. Do not email passwords or payment-card details.

International processing

Service providers may process information outside your country. Where legally required, appropriate transfer safeguards must be in place. Contact Sarah for information about the providers and safeguards relevant to your engagement.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or obtain a copy of your personal information. Where processing relies on consent, you may withdraw it. Send requests to the email above; reasonable identity verification may be needed. You may also have the right to complain to your local data-protection authority.

Children

The site and consulting services are intended for business and organizational use, not for children. Contact Sarah if you believe a child has provided personal information.

Updates

Material changes will be reflected here with an updated effective date.