Privacy Policy
Last updated: . Accepted by the site owner on 8 November 2026.
Who is responsible for your data
Tidy Trellis is the trading name of Sarah Ozoemenam, an individual UK sole trader and the data controller for personal data used to run this website. The controller's address is 57 Westwood close, GreatHolm, Milton Keynes, MK8 9EF.
What we collect
- Contact enquiries: your name, email address, optional subject, message and submission time. If you email us or provide follow-up information, we also receive the correspondence and any personal information you choose to include. Please do not send unnecessary sensitive information.
- Contact administration: whether a message is handled, any verified substantive-contact date, a flag for uncertain follow-up correspondence and any necessary documented retention reason.
- Free printables: downloads are open to everyone. We don't ask for your email address to download them.
- Visitor statistics: currently switched off. We do not use analytics or tracking cookies, and no advertising is shown — see our cookie policy.
How we use it
Contact messages are stored in our website database and can be read only by the site's authorised administrators, so that we can read and, where appropriate, respond to them. We don't currently send automatic email notifications or replies, and sending a message does not sign you up to any emails.
Lawful basis for ordinary enquiries
We rely on legitimate interests under Article 6(1)(f) UK GDPR to receive, read, manage and, where appropriate, respond to contact enquiries, keep necessary related correspondence and protect the contact service from abuse. We have documented a legitimate-interests assessment weighing these purposes against your reasonable expectations and rights. We use only the information reasonably needed for these purposes, and you can object at any time (see "Your rights"). This basis applies only to ordinary enquiries; where we handle a data protection rights request, we do so to meet our legal obligations. Sending an enquiry is not newsletter consent.
Please do not send health information or other sensitive personal information, identity documents or unnecessary information about other people. If sensitive information arrives unexpectedly, access is restricted to authorised administrators and it is reviewed promptly. Legitimate interests alone does not permit processing special-category data: a separate condition under Article 9 UK GDPR is also required. We will not use that information to answer an ordinary enquiry unless the necessary legal basis and condition have been established, and will delete unnecessary information promptly, subject to any applicable legal requirement.
Retention and deletion
We review contact messages manually at 12 calendar months after the last substantive contact, and delete earlier where information is no longer necessary. Longer retention requires a documented legitimate reason. Viewing a message or marking it handled does not restart this period. Where later correspondence is unverified, we use the submission date as the known date and flag follow-up uncertainty for manual review. Messages are not deleted automatically when review becomes due.
Authorised administrators can delete an individually selected message after explicit confirmation. Deletion from the active website database does not mean immediate erasure from our hosting provider's routine database backups. Deleted information may remain in those backups until they expire under the provider's backup cycle; backups are not used for normal operations, and if a backup ever had to be restored we would re-apply deletions that still stand.
Newsletter
We are not currently sending newsletters or collecting new newsletter signups. If we launch a newsletter in future, it will use a dedicated email service, signing up will be optional, and this policy will be updated first. Any request about earlier signup information can be made using the privacy contact below.
Your rights
Depending on the circumstances, you may ask for access to your personal data, correction, erasure or restriction of its use, and object to processing based on legitimate interests. Data portability applies only where its legal conditions are met. These rights are not absolute; we will explain any applicable limitation. No automated decision-making or profiling is used by this website.
For general privacy enquiries, requests to access, correct or delete your personal data, or other data protection questions, email contact@tidytrellis.com or use our contact form.
We may need proportionate information to verify your identity before disclosing or changing data. We will respond without undue delay and normally within one calendar month, subject to applicable legal rules. Where a lawful extension applies to a complex or numerous request, we will explain the reasons within the initial month.
Complaints
You can raise a concern using our privacy contact or complain to the UK Information Commissioner's Office (ICO). You do not need our permission to complain. Visit ico.org.uk/make-a-complaint for the ICO's current complaint process.
Storage and access
This website is built and hosted with Lovable, and contact-form records are stored in Lovable Cloud, which acts as our service provider. The database for this website is hosted in an EU (Ireland) data region. Database access controls restrict reading, retention changes and deletion to authorised administrators; visitors cannot read other people's messages. Email enquiries are received through our business email provider. We do not sell personal data or use contact details for marketing.
Our service providers and their sub-processors may access or process data outside the UK, for example for support or security. Where personal data is transferred outside the UK, it should be protected by UK adequacy arrangements or appropriate safeguards such as the UK International Data Transfer Addendum. You can ask us for more information about these arrangements using the privacy contact above.