Privacy Policy

Introduction

We protect your personal data in line with the requirements of the UK General Data Protection Regulation (UK GDPR) and Data (Use and Access) Act 2025. This requires data controllers and processors such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.

Data controller

The data controller responsible for this website and Heaven Sent Solutions is Helen Heathfield-White.

This website contains links to third-party websites such as Facebook and Linkedin, which have their own data controllers and privacy policies. This privacy policy is relevant to Heaven Sent Solutions and this website only. 

What we collect

Personal data

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:

Information about your browser, network and device

Web pages you visited prior to coming to this website

Web pages you view while on this website

Your IP address

Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyses the data in a de-personalised form.

This information may also include details about your use of this website, including:

·         Clicks

·         Internal links

·         Pages visited

·         Scrolling

·         Searches

·         Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

We collect and store the following information about our clients:

  • Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.

  • Date of birth.

  • Gender.

  • Location of employment or workplace.

  • Emergency Contact details.

REASONS WHY we HOLD INFORMATION ON CLIENTS

  • It is necessary for us to retain data on clients in order for Heaven Sent Solutions to fulfil the contractual obligations and hold data for legitimate business needs.

  • We will only retain data which we reasonably require and for a period which is reasonably necessary and in accordance to our legal obligations.

  • We will not disclose your data to the third parties unless you have consented for us to do so or under another law or enactment.

HOW we COLLECT PERSONAL INFORMATION

  • We collect personal information about clients directly from themselves when they contact Heaven Sent Solutions via telephone, email, social media or through the website.

  • Client and business data is stored within a GDPR compliant Google (Gmail) Cloud account with a mirrored copy of the data saved on a hard drive located in offices that is password encrypted. Data on current clients that we are actively working with is also stored on my mobile telephone that is also password encrypted.

  • We reserve the right to change the systems in which data is stored without notification to another equivalent system but at all times we will ensure the appropriate security of your data and GDPR compliance.

HOW we USE YOUR INFORMATION.

We will only use personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

  • To perform the terms of the contract

  • Where we must need to comply with a legal obligation.

  • Where it is necessary for Heaven Sent Solutions legitimate interests and your interests and fundamental rights do not override those interests.

We may also use your personal information in the following situations, which are likely to be rare:

  • Where we need to protect your interests (or someone else’s interests).

  • Where it is needed in the public interest (or for official purposes).

  • To prevent fraud.

  • To market other products or services which I offer which may be of interest to you.

  • Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent.

Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customise the user experience. We also aggregate Non-Personal Information in order to track trends and analyse use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

Legal purpose of the processing of personal data

Heaven Sent Solutions may process any of your personal information identified in this privacy policy where necessary for the establishment, exercise or defence of legal claims, both in court proceedings and in an administrative or out-of-court procedure. The legal basis for this processing is the protection and assertion of our legal rights, your legal rights and the legal rights of others.

Heaven Sent Solutions may also process any of your personal information identified in this privacy policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, fulfilment of tax obligations, or obtaining professional advice. The legal basis for this processing is the proper protection of our business against risks.

Individual rights - Raising concerns and complaints

If you have concerns about how we collect, use, store, share or protect your personal data, including any concerns relating to AI assisted or automated processing, please refer to our separate Data Protection Complaints Notice.  This explains your rights, how to raise a complaint directly with us, the timescales we will follow and your right to escalate matters to the Information Commissioner's Office (ICO).You can exercise your rights by contacting us via email Hello@HeavenSentSolutions.co.uk.   

You can also notify the Information Commissioner’s Office.  We are registered with ICO under the reference number ZB402034

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.

Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

Cookie Name Duration Purpose

ss_cid Two years Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cpvisit Two years Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvisit 30 minutes Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvr Two years Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvt 30 minutes Identifies unique visitors and tracks a visitor’s sessions on a site

Policy reviewed and updated 01st June 2026

Next Review due 01st June 2029

Changes signed off by Helen Heathfield-White – Director/Owner of Heaven Sent Solutions