Privacy Policy

The plain-English bit

Hi. I'm Carly, and this is the privacy policy for You Need Words.

I know privacy policies are usually a slog, so I've written this one in plain English. It covers what data I collect, why, what I do with it, and your rights over it.

If you've got questions after reading this, email me on carly@youneedwords.co.uk and I'll get back to you.

This policy was last updated on 20th October 2026.

Who I am

Carly Hall-Simms, trading as You Need Words.

Email: carly@youneedwords.co.uk

I'm the "data controller" for the personal information I collect through this website. In plain English, that means I'm the one legally responsible for looking after your data.

What information I collect

I only collect information you actively give me, plus a bit of standard website analytics data. Specifically:

When you contact me (via the contact form or email):

Your name
Your email address
Any other details you choose to share (business name, website, project info, etc.)

When you sign up for my email list or download a lead magnet:

Your first name
Your email address
Which lead magnet you signed up for (so I can send the right sequence)

When you take my free quiz:

Your quiz answers
Your first name and email address (if you choose to receive your full verdict)

When you visit the website:

Standard analytics data (pages visited, time on site, general location, device type)
Cookies (see the Cookies section below)

What I DON'T collect:

Payment information (invoices are handled outside this website, via separate secure platforms)
Sensitive personal data (health, political views, etc.)
Anything you haven't actively given me

Why I collect it, and what I do with it

I collect information for specific reasons, and I only use it for what I've told you.

If you contact me:

I use your details to reply to your enquiry, discuss your project, and (if we work together) manage that project through to completion. Under GDPR, my "lawful basis" for this is legitimate interests and, later, contract.

If you sign up for my email list or a lead magnet:

I use your email address to send you the freebie you signed up for, plus follow-up emails about copywriting, brand voice, and my services. Lawful basis: consent (you opted in) and legitimate interests (marketing to people who've engaged with my content).

You can unsubscribe at any point using the link at the bottom of any email. No hard feelings.

If you take my free quiz:

I use your answers to give you a personalised result. If you share your email, I add you to the email list and send you related follow-up content (see above).

If you just visit the website:

I use anonymised analytics data to understand how people find and use the site, so I can make it better. This doesn't identify you personally.

Who else sees your data

I don't sell your data. Ever. I don't share it with third parties for marketing purposes. Ever.

But I do use a few trusted tools to run the business, and your data passes through them:

Wix

This website is hosted on Wix. Wix processes some data (analytics, form submissions) on my behalf. Their privacy policy: wix.com/about/privacy

MailerLite

I use MailerLite to send emails and manage my email list. If you sign up, your details are stored on their servers. Their privacy policy: mailerlite.com/legal/privacy-policy

Tally

I've got a free quiz in the works, hosted by Tally. When it's live, quiz answers pass through their systems before your email is added to MailerLite. Their privacy policy: tally.so/help/privacy-policy

Google Analytics

I use Google Analytics to see anonymised website traffic data. Their privacy policy: policies.google.com/privacy

All of these tools are GDPR-compliant. I've reviewed their data protection standards, and I'll only work with tools that meet UK/EU data protection law.

How long I keep your data

I only hold onto your data for as long as I actually need it. Specifically:

Contact form enquiries: Kept for up to 2 years, in case we end up working together later. Deleted after that if there's no ongoing conversation.
Client project data: Kept for 7 years after project completion (for tax, accounting, and legal reasons), then deleted.
Email list subscribers: Kept until you unsubscribe, then removed within 30 days.
Quiz submissions: Kept as part of your email list record (see above).
Analytics data: Kept in line with Google Analytics' standard retention (currently 14 months).

Cookies

This website uses cookies. Cookies are small text files stored on your device that help the site work and help me understand how visitors use it.

The cookies used here:

Essential cookies: Required for the site to function (e.g. remembering your cookie preferences). You can't opt out of these.
Analytics cookies: Google Analytics cookies that help me understand traffic patterns. You can opt out of these via the cookie banner when you first visit.
Marketing cookies: Currently, this website doesn't use marketing or advertising cookies.

You can also manage or block cookies through your browser settings. Fair warning: blocking essential cookies may break parts of the site.

Your rights

Under UK GDPR, you have the following rights over your personal data:

The right to be informed about what I'm doing with your data (that's what this policy is for).
The right of access to a copy of the data I hold about you.
The right to rectification if any of your data is wrong.
The right to erasure (the "right to be forgotten"). You can ask me to delete your data.
The right to restrict processing of your data in certain circumstances.
The right to data portability (a copy of your data in a machine-readable format).
The right to object to how I'm using your data.
Rights around automated decision-making and profiling (I don't do either of these, so this doesn't apply here).

To exercise any of these rights, email me on carly@youneedwords.co.uk. I'll respond within 30 days.

How I keep your data safe

I take data security seriously. Practical measures include:

Strong, unique passwords across all accounts that hold client data
Two-factor authentication wherever possible
Only working with GDPR-compliant third-party tools
Keeping devices and software up to date
Deleting data when it's no longer needed

No system is 100% secure, and I can't guarantee absolute security of data transmitted online. But I'll always do my bit.

Complaints

If you're not happy with how I've handled your data, please email me first on carly@youneedwords.co.uk so I can try to fix it.

If you're still not satisfied, you can complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

Changes to this policy

I may update this policy from time to time (for example, if I start using a new tool or the law changes). The "last updated" date at the top will always reflect the most recent version.

If I make significant changes that affect how I use your data, I'll email anyone on the mailing list to let them know.

Contact

For any privacy-related questions or requests: