Privacy Policy 

Karen Webber of Goodness Marketing (collectively referred to as "I"or "me" in this policy) respects your privacy and is committed to protecting your personal data.  I am dedicated to being transparent about what data I collect about you and how I use it.

The purpose of this privacy policy

This policy aims to provide you with information about how I collect and process your data. This includes what personal data I collect, how I use your data, how I ensure your privacy is maintained and your legal rights relating to your personal data

It is important that you read this privacy policy together with any other documentation on specific occasions when I am collecting or processing personal data about you so that you are fully aware of how and why I use your data.


Personal data I collect

Personal data, or personal information, means any information about an individual from which that person can be identified. 

I may collect the following information about you:

  • Identity Data: title, first name, last name, age/date of birth and gender;

  • Contact Data: your contact details, postal address including billing and delivery addresses, telephone numbers and email addresses;

  • Financial data: your payment details - should you engage my services;

  • Your web browsing activities on my website;

  • Your communication and marketing preferences;

  • Your interests, preferences, feedback and survey responses;

  • Your correspondence and communication with me; 

  • Publicly available personal data including information shared on social media platforms such as Twitter, Instagram and Facebook; and

  • Your computer’s IP address.

I will not collect any sensitive data about you.

My website is not intended for children and I do not knowingly collect data relating to children. 


This list is not exhaustive and in specific instances, I may need to collect additional data for the purposes set out in this policy. Some of the above personal data is collected directly, i.e. volunteered by you when registering for information and other personal data is collected indirectly, i.e. when you are browsing my website. 

How I use your data

I use your personal data for:

  • Providing my services to you;

  • Providing information to you that you request from me relating to my products or services;

  • Internal record keeping;

  • Improving and personalising my products and services;

  • Promotional and Marketing purposes: with your agreement, to contact you via email, phone or mail about relevant promotional offers, products and events which I think may interest you;

  • Developing new products and services;

  • Client insight and market research purposes, which helps me to better understand your needs;

  • Informing you of any changes to my website, services and products;

  • Enabling me to manage all interactions with you; and

  • Where I have a legal right or duty to disclose your information (for example in relation to an investigation by a public authority or in a legal dispute). 

Legal basis for using your data

I am required to set out the legal basis for my processing of your personal data. 

I collect and use your personal data as it is necessary:

  • to pursue my legitimate interests; 

  • for the purposes of complying with my duties and exercising my rights under a contract for the sale of services to a client; 

  • to comply with my legal obligations; or

  • where you have consented to the use.

You have the right to withdraw your consent at any time. Where consent is the only legal basis for processing, I will cease to process data after consent is withdrawn. 

My legitimate interests

The usual legal basis for processing your data is that it is necessary for my legitimate interests, which include:

Selling and supplying products and services to clients;

  • Promoting, marketing and advertising my products and services;

  • Sending promotional communications which are relevant and tailored to clients;

  • Understanding client behaviours, preferences and needs;

  • Improving existing products and services and developing new products and services;

  • Complying with legal and regulatory obligations;

  • Preventing crime and fraud;

  • Handling client contracts, queries, complaints and disputes (including refunds);

  • Managing any claims made by clients (including legal).

Marketing 

I may use your personal data to send you marketing communications about products and services that are relevant to you. You have the right to opt out of receiving these at any time by clicking the unsubscribe link at the bottom of any email, or by contacting me directly using the details at the end of this policy.

Sharing data with third parties

To make certain services available to you, I may need to share your personal data with service providers and suppliers. I only allow them to handle your data where I am satisfied they apply appropriate data protection and security controls. I do not allow them to use your personal data for their own purposes.

Your data may be shared with or stored on the following platforms:

  • Mailerlite (email marketing)

  • Gmail and Google Drive

  • Meta platforms (Facebook and Instagram), for the purposes of delivering advertising

  • Government bodies, regulators, law enforcement agencies, courts or tribunals, and insurers, where I am required to do so by law

  • AI tools. Where I use AI tools, I take reasonable steps to minimise the personal data involved and do not use tools that store or train on your data without appropriate safeguards.

I will never sell or rent your data to other organisations.

My website may include links to third-party websites. I do not control these sites and am not responsible for their privacy arrangements. I encourage you to read the privacy policy of every website you visit.

International transfers

To deliver products and services to you, it may be necessary to share your data with service providers located outside the UK. Whenever I transfer your personal data internationally, I ensure it receives a level of protection that is not materially lower than UK data protection standards, in line with UK GDPR requirements.

How I protect your data

I am committed to keeping your personal data safe and secure. The measures I have in place include:

  • Use of strong passwords.

  • Anti-virus software.

  • Limiting access to personal data to those with a genuine business need.

No internet site can be 100% secure, and I cannot be held responsible for unauthorised or unintended access that is beyond my control. I have appropriate measures in place to deal with any personal data breaches and will notify you and any applicable regulator where I am legally required to do so.

How long I keep your data

I will only retain your data for as long as necessary for the purpose it was collected. The longest I will normally hold any personal data is seven years. If you ask me to delete your information, please note that I have a legal requirement to retain some data even after such a request, in order to meet legal or regulatory obligations, resolve disputes, prevent fraud, or enforce contracts.

Cookies

I use cookies on my website. You can set your browser to refuse or block all or some cookies, though please be aware that doing so may affect how parts of my website function. Non-essential cookies will not be set until you have given your consent via the cookie banner on my website. For more information, please see my cookie policy.

Your rights

You have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data I hold about you.

  • Right to rectification: to ask me to correct any inaccurate or incomplete data.

  • Right to erasure: to request that I delete your data where there is no longer a legitimate reason to hold it.

  • Right to object: to object to my use of your data, including for direct marketing.

  • Right to restrict processing: to ask me to suspend processing of your data in certain circumstances.

  • Right to data portability: to request that I provide your data in a machine-readable format.

  • Right to withdraw consent: where I rely on consent to process your data, you may withdraw it at any time.

To exercise any of these rights, please contact me using the details below. There is no charge for doing so. I may need to verify your identity before responding. I will aim to respond within one month, and will let you know if a request is likely to take longer.

Data protection complaints

If you have a concern about how I have handled your personal data, I would like the opportunity to address it. Please contact me in the first instance using the details below, setting out the nature of your concern. I will acknowledge your complaint within 30 days and let you know the outcome as quickly as possible.

If you remain dissatisfied after contacting me, or if I have not responded within a reasonable timeframe, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO). Further information is available at https://ico.org.uk.

Contact details

I am the data controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, please contact me:

Karen Webber, Goodness Marketing

Email: hello@goodnessmarketing.co.uk

Phone: 07788 530 166

This policy was last updated on 17 June 2026. I may update this policy from time to time so please check this page occasionally to ensure you are happy with any changes to this policy.