Privacy Policy

Last updated: November 2026

1. Introduction

This Privacy Policy explains how QuillCraft Content collects, uses, discloses and safeguards your information when you visit quillcraftcontent.co.uk or engage me for content-writing services. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

2. Data Controller

The data controller is Rupa Thapa, trading as QuillCraft Content, 599 Leytonstone High Road, London, E11 4PB, United Kingdom. You can contact me at hello@quillcraftcontent.co.uk for any privacy question or to exercise your rights.

3. Information I Collect

I only collect information that is necessary to answer your enquiry, deliver the service you have requested and meet my legal obligations.

• Enquiry data — name, business name, email, telephone (if provided), website URL and the details of your project brief.
• Correspondence — the content of emails or messages exchanged during a project.
• Payment metadata — transaction confirmations and invoice records supplied by Stripe. I do not store card or bank account details on this website.
• Technical data — limited server-log data (IP address, browser type, pages requested) collected for security and diagnostic purposes.
• Cookie data — as described in the Cookie Policy.

4. Lawful Bases

Personal data is processed under one or more of the following lawful bases:

• Contract — to prepare or perform a content-writing engagement you have requested.
• Legitimate interests — to respond to enquiries, keep proper business records and maintain the security of this website.
• Legal obligation — to comply with UK tax, accounting and record-keeping requirements.
• Consent — where you explicitly opt in, for example to non-essential cookies.

5. How Your Information Is Used

Your information is used to:

• Reply to enquiries and provide quotations.
• Prepare, agree and deliver content-writing projects.
• Issue invoices and process payments through Stripe.
• Keep accounting and tax records required by UK law.
• Improve the reliability and security of this website.

6. Payment Processing

Payments are processed by Stripe Payments UK, Limited. Where you make a payment through Stripe Checkout, your card or bank information is entered into Stripe's own secure interface and is not accessible to me. Stripe processes your payment data as an independent controller and their own privacy notice applies to that processing.

7. Sharing Your Information

I do not sell your personal information. Information is only shared with third parties where necessary to deliver the service, comply with the law or protect my legal rights. Recipients may include Stripe (payment processing), email service providers, hosting providers and, where required, HMRC or professional advisers.

8. International Transfers

Where any of the service providers I use process personal data outside the United Kingdom, transfers are subject to appropriate safeguards recognised under UK GDPR, such as UK adequacy decisions or standard contractual clauses.

9. Data Retention

Enquiry and project data is retained only for as long as required for the purposes described above. Financial records are retained for at least six years to comply with UK tax law. Marketing data (where consent has been given) is deleted upon withdrawal of consent or when it is no longer needed.

10. Security

Appropriate technical and organisational measures are in place to protect personal information against unauthorised access, alteration, disclosure or destruction. These include restricted access, up-to-date software, secure devices and encrypted connections where appropriate.

11. Your Rights

Under UK GDPR you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure, in certain circumstances.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent, where consent is the lawful basis.
• Right to lodge a complaint with the Information Commissioner's Office.

12. Cookies

This website uses only strictly necessary cookies by default. Non-essential cookies (for example, analytics) are only set with your consent. See the Cookie Policy for full detail.

13. Marketing

I do not send unsolicited marketing. Any occasional service update or newsletter is sent only to individuals who have specifically requested it, and every message contains a plain unsubscribe option.

14. Children

This website and my services are not directed at children under 18 and I do not knowingly collect personal information from children.

15. Automated Decision-Making

I do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

16. Third-Party Links

This website may link to external websites. I am not responsible for the privacy practices of any third-party sites and encourage you to read their privacy notices before submitting any personal information.

17. Complaints

If you are unhappy with how your personal information has been handled, please contact me first at hello@quillcraftcontent.co.uk so I can address your concerns. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

18. Updates

This Privacy Policy may be updated from time to time. The 'Last updated' date at the top of this page reflects the most recent revision.

19. Contact

Questions about this Privacy Policy should be sent to hello@quillcraftcontent.co.uk.

---

QuillCraft Content is independently owned and operated by Rupa Thapa as a sole trader in the United Kingdom. Correspondence: 599 Leytonstone High Road, London, E11 4PB, United Kingdom. Email: hello@quillcraftcontent.co.uk.