Privacy policy
Last updated: 12th April 2026.
This policy explains what information is collected when you visit cleabroad.co.uk, how I use it, and your rights under UK data protection law.
Clea Broad is the data controller for the personal information collected through this website. Clea Broad is a sole trader trading from 38 Ticehurst Road, London, SE23 2TJ.
What information is collected
I collect different types of information depending on how you interact with me:
When you make a purchase:
Your name and email address
Billing address and payment information — processed securely by Stripe or PayPal on our behalf
Details of what you've ordered
When you get in touch:
Your name, email address, and anything you share in your message
When you visit the website:
Technical data such as your IP address, browser type, and how you arrived at our site — collected via Google Analytics and Squarespace's built-in analytics
Cookie data (see the Cookies section below)
How I use your information
I use the information I collect to:
Process and fulfil your orders
Send you your purchased files and any relevant follow-up information
Respond to your enquiries
Understand how people use my website so I can improve it
Meet my legal obligations
II will only contact you for marketing purposes (such as news, new templates, or offers) if you've given me your permission to do so. You can withdraw that permission at any time.
My legal basis for using your information
Under UK GDPR, I need a lawful basis for processing your personal data. We rely on:
Contract — to process your purchase and deliver what you've ordered
Legitimate interests — to understand how my website is used and to improve it
Legal obligation — where I’m required to keep records for tax or legal purposes
Consent — where I ask for your permission before sending marketing communications
Who I share your information with
I don't sell your personal data. I share it only where necessary to provide our services, with the following third parties:
Squarespace — my website platform, which hosts the site and processes orders. It is also the payment processor, who handles your payment information securely. It does not store your full card details. Squarespace's privacy policy is available at squarespace.com.
Google Analytics — I use this to understand how visitors use my site. Google Analytics collects anonymised usage data. You can opt out using Google's opt-out browser add-on. Google's privacy policy is available at google.com/privacy.
AI tools (Claude and ChatGPT) — I use AI tools to assist with research, writing, and the synthesis of project information. As part of this process, information from client intake questionnaires and project briefs — such as your business name, brand description, and goals — may be shared with these tools. I only share what is necessary for the task at hand, and I do not share sensitive personal information. Claude is operated by Anthropic (anthropic.com) and ChatGPT is operated by OpenAI (openai.com). Their respective privacy policies explain how they handle data.
All third parties are required to handle your data securely and only for the purpose it was shared.
Cookies
Cookies are small text files stored on your device when you visit a website. I use them to:
Keep the website working properly
Understand how visitors use my site (via Google Analytics)
Remember your preferences
When you first visit my website, you'll be asked to give your consent to non-essential cookies. You can change your cookie preferences at any time using the cookie settings link in the footer.
You can also control cookies through your browser settings. Please note that disabling some cookies may affect how parts of the site function.
How long I keep your information
I only keep your information for as long as I need it:
Purchase records and associated personal data are kept for 7 years to meet HMRC requirements
Enquiry emails and messages are kept for up to 2 years
Website analytics data is retained in line with Google Analytics' standard data retention settings
Once I no longer need your data, I delete it securely.
Your rights
Under UK data protection law, you have the right to:
Access the personal information I hold about you
Ask me to correct any inaccurate information
Ask me to delete your information (where I am not legally required to keep it)
Ask me to restrict how I use your information
Ask me to transfer your information to another provider
Object to how I use your information
Withdraw your consent at any time, where I rely on consent
To exercise any of these rights, please get in touch at hello@cleabroad.co.uk. I'll respond within one month.
How to raise a concern
If you have any concerns about how I handle your personal data, I'd always encourage you to contact me first so I can put things right.
You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.
Links to other websites
My website may contain links to external sites. This policy only covers cleabroad.co.uk — I am not responsible for the privacy practices of other websites and encourage you to read their privacy policies.
Changes to this policy
I may update this policy from time to time to reflect changes in how I work or in the law. When I do, I'll update the date at the top of this page. I encourage you to check back occasionally.
Get in touch
If you have any questions about this policy or I we handle your personal data, you're welcome to contact me:
Clea Broad