Introduction

Lisa Deighan Limited ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy notice explains how we collect, use, and safeguard your information when you visit our website or interact with our services.

This notice applies to all personal data processed through lisadeighan.com and any related services.

The data controller is Lisa Deighan Limited, registered in England & Wales (Company No. 08173994). For any questions about this privacy notice or how we handle your data, please contact us.

What Information We Collect

Contact Form

When you contact us through our website, we collect:

• Name — to address you personally
• Email address — to respond to your enquiry
• Phone number (optional) — for alternative contact if needed
• Subject and message — the content of your enquiry
• Timestamp — when you submitted the form

Workshop Question Form

When you ask questions about workshops, we collect:

• Name and email address — to respond to your question
• Question content — your specific inquiry
• Timestamp — when you submitted the question

Workshop Updates Subscription

When you subscribe to workshop updates, we collect:

• Name and email address — to send you workshop notifications
• Consent statement — your agreement to receive emails
• Consent timestamp — when you provided consent
• Source — which form you used to subscribe

Workshop Reviews

When you submit a workshop review, we may collect:

• Name (optional) — may be displayed publicly with your review
• Email (optional) — for admin contact only, never displayed publicly
• Rating and testimonial — your public review content
• Feedback responses — confidential improvement suggestions

Browser Storage

We use browser local storage (not cookies) to remember your preferences:

• Portfolio favourites — image IDs you've marked as favourites (stored only on your device, contains no personal data)
• Review and feedback submissions — a copy of your submitted workshop review or feedback (rating, name and comments if provided) so you can see what you previously submitted when you return to a workshop's review page

This is stored per browser and device — it won't appear if you switch to a different browser or device, or if you clear your browser data.

Website Analytics

If you accept our cookie consent banner, we use Google Analytics 4 to understand how visitors use our site. This collects:

• Pages viewed and how you arrived at our site
• Approximate location — country/city level, not your exact address
• Device and browser type

Analytics only runs if you accept the consent banner. If you decline, no analytics cookies are set. See our Cookie Policy for full details.

How We Use Your Information

Contact Form

Purpose: To respond to your enquiries
Legal basis: Legitimate interest (responding to customer communications)

Workshop Question Form

Purpose: To respond to your question, and to help us develop FAQ content for the website
Legal basis: Legitimate interest (responding to customer communications and improving our website's help content)

If a question helps shape a new FAQ, we only use the question itself — your name and email are not published or used for that purpose.

Workshop Updates Subscription

Purpose: To send you email notifications about new workshops and updates
Legal basis: Consent (you explicitly agreed to receive these emails)

You can unsubscribe at any time using the link in every email or by contacting us directly.

Workshop Reviews

Purpose: To display testimonials on our website and gather feedback for improvements
Legal basis: Legitimate interest (marketing and service improvement)

Public reviews may include your name if provided. Email addresses are never published and are used only for admin contact if needed.

Website Analytics

Purpose: To understand how visitors use our site so we can improve it
Legal basis: Consent (via our cookie consent banner)

You can accept or decline analytics cookies via the consent banner shown on your first visit. See our Cookie Policy for details on managing your preference.

How We Store & Protect Your Data

Storage Location

Your data is stored securely on Google Cloud Platform, with servers located in the United Kingdom. All data is:

• Encrypted at rest — using Google-managed encryption
• Encrypted in transit — all connections use HTTPS/TLS
• Access-controlled — only authorised administrators can access your data

Administrative Access

Access to your data is restricted to authorised administrators only, using secure authentication and role-based permissions that limit what each administrator can view or manage. Depending on their role, administrators can:

• Read contact form submissions
• Manage workshop subscriptions
• Moderate reviews and feedback

These restrictions are enforced at the infrastructure level, not just within the admin interface.

Third-Party Services

We use the following trusted third-party services:

• Google Cloud Platform / Firebase — data storage and email delivery with enterprise-grade security
• Google Analytics 4 — website usage analytics, only if you accept our cookie consent banner

Google Analytics 4 only processes data if you've accepted analytics cookies. See our Cookie Policy for full details.

Data Retention

Contact Form Messages

We retain contact form submissions only for as long as necessary to respond to your enquiry and manage our relationship with you. We periodically review and delete older messages, typically within 12 months, unless there's a legitimate business or legal reason to keep them for longer.

Workshop Questions

We retain workshop questions on the same basis, typically deleting them within 12 months of being answered. Where a question may help us develop FAQ content, we may keep an anonymised version of the question text — with your name and email removed — for longer.

Workshop Subscriptions

• Active subscriptions — retained while you remain subscribed
• Unsubscribed records — minimal data kept to honour your opt-out preference and prevent accidental re-subscription

Reviews and Feedback

Published reviews are retained to showcase workshop experiences. Confidential feedback is retained for service improvement purposes and may be anonymised or deleted after review.

Your Privacy Rights

Under UK GDPR and data protection law, you have the following rights:

To exercise any of these rights, please submit a request. We will respond within one month.

If you have any questions about your privacy rights, please contact us.

Marketing Communications

We will only send you marketing emails (workshop updates, newsletters) if you have explicitly consented. We keep separate records of:

• The consent statement you agreed to
• When and where you provided consent
• Your subscription status (active or unsubscribed)

Operational vs Marketing: Contact form confirmations and question acknowledgements are transactional messages, not marketing. They confirm receipt of your message and do not require separate consent.

Unsubscribing: Every marketing email includes an unsubscribe link. This takes you to our unsubscribe page where you can confirm removal from future mailings.

Cookies & Tracking

We use cookies and similar technologies on this website. For full details about what cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.

International Data Transfers

Your data is stored in European data centres (europe-west2, London, UK). Google Cloud Platform may transfer data internationally for technical operations, but all transfers comply with UK GDPR requirements and include appropriate safeguards.

How to Complain

If you have concerns about how we handle your personal data, please contact us first. We will do our best to resolve any issues.

You also have the right to lodge a complaint with the UK's data protection supervisory authority:

Changes to This Notice

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when changes were last made.