Privacy Policy

Headliners Insight & Strategy Ltd
Last updated: 14 January 2026

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Headliners Insight & Strategy (“we”, “us”, “our”) collects, uses, and protects your personal information. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Headliners Insight & Strategy
Email: [email protected]
We are responsible for deciding how your personal data is used and protected.

2. What Personal Data We Collect

A) Data you provide directly

Contact Form

  • Name

  • Email address

  • Any information you include in your message

Newsletter Signup

  • Email address

  • Name (optional)

B) Data collected automatically

Through Squarespace, Cloudflare, and Google Analytics, we collect:

  • IP address (anonymised in Analytics)

  • Device type & browser type

  • Pages visited, time on pages

  • Approximate location (city-level analytics)

  • Security & performance data (Cloudflare)

We do not collect financial data or sensitive personal data.

3. How We Collect Your Data

  • When you contact us via a form

  • When you subscribe to newsletters

  • When you browse the website (via cookies and analytics)

  • Through security and performance tools (Cloudflare/Squarespace)

4. Why We Use Your Data & Legal Basis

Responding to contact form messages: Legitimate interests

Sending newsletters: Consent

Running and securing the website (Squarespace/Cloudflare): Legitimate interests / essential services

Analytics to improve the site (Google Analytics): Consent via cookie banner

Maintaining server logs & security: Legitimate interests

Legal obligations (if applicable): Legal obligation

5. Who We Share Data With

We only share personal data with trusted providers who act on our behalf:

  • Squarespace – website hosting, forms, built‑in analytics

  • Cloudflare – DNS, CDN, security & bot protection

  • Google Analytics (GA4) – website analytics (with your consent)

  • Email service provider – for newsletter delivery

We do not sell personal data.

6. International Data Transfers

Some of our providers (e.g., Google, Cloudflare, Squarespace) process data outside the UK. When this happens, we rely on legally approved safeguards, including:

  • UK International Data Transfer Agreement

  • UK Addendum to EU Standard Contractual Clauses (SCCs)

  • Provider-specific security measures

You may request details at any time.

7. Data Retention

We keep data only for as long as necessary:

  • Contact form enquiries: 12 months

  • Newsletter subscribers: until you unsubscribe

  • Website analytics:

    • Google Analytics: 14 months

  • Security logs: typically up to 12 months

8. Cookies & Tracking

We use essential and non‑essential cookies. Analytics cookies run only with your consent.
See our separate Cookie Policy for full details.

9. Email Marketing (Newsletter)

If you sign up, we will send occasional email updates.
You can unsubscribe at any time using:

We only send marketing with your explicit consent.

10. Google Analytics (GA4)

We use GA4 to understand how visitors use our website. We have enabled:

  • IP anonymisation

  • No personalised ads

  • Consent Mode (analytics only runs if you accept cookies)

GA4 retention is limited by Google to 14 months maximum, not indefinite.
I can set your policy text accordingly.

11. Security

We use industry‑standard security via:

  • Squarespace’s hosting infrastructure

  • Cloudflare’s DDoS protection & firewall

  • HTTPS encryption

  • Limited staff access to accounts

  • Regular security monitoring

No system is 100% secure, but we take reasonable steps to safeguard your data.

12. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion

  • Withdraw consent

  • Restrict or object to processing

  • Request data portability

  • Complain to us about how we handle your personal data, and escalate to the ICO if you remain dissatisfied

To exercise these rights, contact [email protected].

If you have a concern or complaint about how we handle your personal data, please contact us first at [email protected] so we can try to put things right. We will acknowledge your complaint within 30 days and respond without undue delay. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

13. Children

Our website is not intended for children under 16.

14. Changes to This Policy

We may update this policy occasionally. Any changes will be posted on this page with a new date.

15. Contact Us

For privacy questions or concerns:

Headliners Insight & Strategy
Email: [email protected]