Privacy Policy
Last updated: 27 June 2026
Who I am
This site is operated by Charlotte Grey, trading as Charlotte Grey VA, based in the United Kingdom. You can reach me at hello@greyva.co.uk.
What data I collect, and why
I only collect what's necessary to respond to your enquiry and run this website. Specifically:
- Contact form data — your name, email, business name (optional) and message. Used to reply to your enquiry.
- Submission metadata — your IP address and browser user-agent are recorded when you submit the contact form, for security and spam protection.
- Essential cookies — a single browser key (
gva.cookie) that remembers whether you've dismissed the cookie banner. No tracking.
I don't use analytics or advertising cookies. I don't sell, share, or profile your data.
Legal basis (UK GDPR)
I rely on your consent when you submit the contact form (Article 6(1)(a)), and on legitimate interests for keeping basic security logs of form submissions (Article 6(1)(f)).
How long I keep it
Contact form submissions are retained for 24 months, after which they are deleted. If we work together, your business records are kept for the duration of our engagement plus 6 years for tax compliance (HMRC requirement).
Who I share it with
Your data is stored on UK-hosted infrastructure. Form submissions are emailed via an outbound SMTP relay. I don't share your data with third parties beyond what's needed to operate the site (hosting, email delivery).
Your rights
Under UK GDPR you have the right to: access your data, correct it, delete it, restrict processing, object to processing, and withdraw consent. To exercise any of these, email me at hello@greyva.co.uk and I'll respond within 30 days.
Complaints
If you're unhappy with how I handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, the "last updated" date above will be revised.