Mary Brant trading as Mary Brant is a sole trader ('we', 'our', 'us' in this privacy statement).
Mary Brant is responsible for collecting, processing, storing and safe-keeping personal and other information as part of providing a service and carrying out our regular business activities. We manage personal information in accordance with data protection legislation including the Data Protection Act 2018 and we are registered as a Data Controller with the Information Commissioner's Office Registration Number [TO UPDATE].
Any questions regarding our processing of personal data should be directed to us via [email protected].
We take protecting online privacy and data security seriously. Please read the whole of this statement carefully as it sets out our approach to processing personal data including what information we may collect from you, how we may use it, store it and protect it, and your rights as a data subject.
Our Privacy Statement outlines our approach to any kind of data processing where we are acting as a data controller or co-controller (including collection, use, transfer, storage and deletion) of personally identifiable information (any information that may be used to identify a physical person, and any other information associated therewith) about natural persons. This statement applies to our processing of data collected through any means, actively as well as passively, from persons located anywhere in the world.
We are guided by the following principles when processing data:
In accordance with Data Protection Legislation we only collect and process information which we require to meet the specific purposes as stated above. The information we may collect about you could include, but is not limited to:
Given the services that we provide, it is likely that we shall request data which falls into "special category data", such as medical information. The term "special category" data is named such by the GDPR and covers any such special category data will only be collected with your express consent and will be handled in line with ICO best practice guidelines for special category data. You will receive our terms and conditions for various services which will outline how we will deliver our services and as part of delivering our services we may need to obtain special category data. We will only ask for information that is necessary to deliver our services, and therefore we encourage you not to provide us with personal data or special category data which we do not ask for.
Most personal information is provided directly and voluntarily by you when you engage with us in order to enquire about, or purchase, our services or products. We will collect information from you when:
We may also collect personal information about you from third party sources, such as when you choose to connect your social media accounts with our Site or log in through a social media platform such as Facebook or Instagram. However, we will only use this information where these third parties either have your consent or are otherwise legally permitted or required to share your personal information with us.
We collect this information in order to make available to you our services or products and to communicate with you in relation to our services or products. We may use the information collected to:
We will not sell or lend your personal data to third parties, or share your personal data for marketing purposes without your express consent. We will only share your personal data with third party service providers where it is necessary for the delivery of our products or services, and only where we are confident that any such third party service providers have appropriate data protection systems and measures in place that are compliant with UK Data Protection Legislation.
We will not give consent to third party service providers or platforms to use your information, including audio and video recordings, for purposes other than those for which the information was collected and which are necessary for the delivery of our products and services. We will not give consent for your information to be used by third party service providers for the training and development of AI modelling software, or similar purposes.
We have in place appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data we control. Your information is securely stored on Microsoft 365 which is not publicly accessible or stored in any public domain – it is accessible to our employees and affiliates only, and is password protected.
We may store or process your data on cloud based platforms or service providers whose servers are based outside of the UK/EEA which may constitute a transfer of data under GDPR. We will only use such third party service providers where we are confident that appropriate safeguards are in place to ensure that any personal data transferred outside of the UK/EEA is subject to an equivalent level of security and protection as required under UK Data Protection Legislation, such as the UK Extension to the EU-U.S. Data Privacy Framework. To learn more about the EU-U.S. Data Privacy Framework, visit the U.S Department of Commerce's website at: Home (dataprivacyframework.gov)
We also have in place appropriate procedures to handle any potential Personal Data Breaches, in accordance with Data Protection Legislation. Any such breaches will be reported to the relevant supervisory authority and notified to the affected data subjects where we are legally required to do so.
We will only keep your personal data for as long as is necessary to meet the requirements for which it was collected. This will vary depending on the nature of the requirements and the processing, but apart from in exceptional circumstances where longer retention is necessary, we will only retain your personal data for 8 years. After this period of time, we will delete your personal data unless there is a legitimate business reason to retain all or parts of the data we hold.
The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies:
We collect data for the purposes set out above. All personal data is managed to ensure that it is either erased from our system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.
Any special category data collected from you has special protection and is limited to that permissible by law. In all instances where special category data is collected, we will obtain your express consent.
You have a number of legal rights in relation to the personal data that we hold about you and you can exercise your rights by contacting us using the details at the end of this statement. These rights include:
Our Site contains links to and from other websites which are operated by individuals and companies over which we have no direct control. If you follow a link to any of these websites, please note that these websites have their own privacy and terms of use polices. We do not accept any responsibility or liability for these policies. We advise you to check the policies for third party sites before you submit any personal data to the website.
We may send you marketing emails and communications when you have opted in or otherwise given consent for us to do so. We will make it as easy as we can for you to opt out of unwanted processing, providing it does not restrict our ability to provide you with the primary service you have requested.
Please note if you wish to unsubscribe from any marketing emails that you have signed up for, you can do so by emailing [email protected] or clicking onto the unsubscribe link on the marketing email that was sent to you. It may take 24 hours for this to become effective.
We use website analytics to provide the best user experience and service to you and to evaluate and improve our site. We utilise third party data analytics service providers to improve our visibility and to monitor website browser behaviour and navigation across our site.
These third-party data analytics service providers collect this information using cookies on our behalf in accordance with our instructions and in line with their own privacy policies. Our service providers may collect the following data about the way you use our Site, which will almost always be anonymised and aggregated before reporting back to us:
From time to time, we may use the information collected about you to present you with targeted advertisements using platforms such as Facebook, X (formerly known as Twitter), Google and/or Instagram.
If you wish to limit or reject cookies associated with our website, you can do this in your browser settings. Please be aware that by choosing to limit or reject cookies from our website you may not be able to use or benefit from certain features, particularly the features designed to personalise your experience.
This Privacy Statement was last updated on 04/06/2026 and is reviewed every 6 months, or upon changes to relevant Data Protection Legislation being published, whichever is sooner.
We do not intend to process your personal information except for the reasons stated within this Privacy Statement. We reserve the right to update this Privacy Statement from time to time. Where appropriate, we shall contact you to notify you of any material changes to the Privacy Statement. You should also refer to our website periodically so that you may access and view our updated Privacy Statement. This will ensure that you understand how we are using your personal data and your legal rights around our usage of such personal data.
If you have any questions or concerns regarding our data protection or privacy policies, please contact us at [email protected] and we will be happy to respond to any concerns.
Should you still have concerns about the way in which we manage your personal data then you should contact the relevant supervisory authority, which in the UK is the Information Commissioner's Office: Contact us | ICO
Version 2.0
Last updated: 04/06/2026