Effective date: 11/03/2026Business name: Shirley Thornley, Colours by ShirleyEmail: moc.yelrihsybsruoloc%40ollehWebsite: www.coloursbyshirley.com

1. Who we are

Colours by Shirley provides personalised colour analysis and image consultancy services.
For the purposes of data protection law, Shirley Thornely is the Data Controller of personal data collected via this website.
If you have any questions about this policy or how your data is handled, please contact: moc.yelrihsybsruoloc%40olleh

2. What information is collected

When you use the website, we may collect and process the following personal information when you contact us:
● Your name● Email address● Telephone number (if provided)● Information included in your enquiry message ● Consultation or booking details
Please note: The enquiry form is for initial contact only. You are advised not to include highly sensitive personal information at this stage.
Personal information may be collected when you:
● Submit an enquiry through the website contact form● Contact Colours by Shirley by email ● Book a consultation or request information about services

3. How your information is used

Your information is used to:
● Respond to your enquiry● Arrange consultations● Communicate regarding services or bookings● Provide information about consultations you have requested● Manage the website
Your personal information will not be sold or shared with third parties for marketing purposes.

4. Website and administrative support

Colours by Shirley works with Cada Creative, a website and marketing support provider, who assists with maintaining the website and supporting the management of enquiries.
As part of this support, Cada Creative may have access to website enquiry submissions and related business email communications where necessary to maintain the website, manage incoming enquiries, or assist with responses on behalf of Colours by Shirley.
Cada Creative processes this information only for the purposes of providing website and administrative support services and does so in accordance with data protection requirements.

5. Lawful basis for processing

Under UK GDPR, personal information is processed under the lawful basis of:
Legitimate interest – Responding to enquiries and providing requested information about services.
Where consultations are booked, personal information may also be processed for the purpose of providing the requested service.

6. Data storage and security

Colours by Shirley takes reasonable steps to ensure personal information is stored securely and protected against unauthorised access.
Information submitted through the website contact form may be stored within the website platform and associated email systems used to manage enquiries.
Access to personal data is limited to those who require it for the purposes described in this policy.

7. Data retention

Personal information will only be kept for as long as necessary to respond to enquiries, manage bookings, and support the administration of consultation services.
Enquiry information may be retained for a limited period in order to review demand for services and understand enquiry-to-booking conversion rates.
Where an enquiry does not result in a consultation, personal information will typically be retained for no longer than 12 months before being deleted or anonymised, unless a longer retention period is required for legitimate administrative or legal reasons.
If you become a client, information will be retained in accordance with professional and legal requirements.

8. Your data protection rights

Under UK GDPR, you have the right to:
● Request access to the personal information held about you● Request correction of inaccurate information● Request deletion of your personal data (where appropriate)● Object to certain types of data processing
If you would like to exercise any of these rights, please contact Colours by Shirley using the contact details above.

9. Third-party website

This website may contain links to other websites. Colours by Shirley is not responsible for the privacy practices or content of external websites.

10. Changes to this policy

This privacy policy may be updated from time to time to reflect changes in services or legal requirements. The most recent version will always be available on this website.