Privacy notice.

Last updated: 26 October 2026

This notice explains what personal information I collect through this website, why, what I do with it, who helps me look after it, and your rights. I’ve tried to keep it plain and honest. If anything’s unclear, just ask.

Who I am

Say It With a Brand is run by me, Jo Nelson, a sole trader based in Derbyshire, UK. I’m the “controller” of your personal information, which means I decide how it’s used and I’m responsible for looking after it.

You can contact me about anything in this notice at sayitwithabrand@gmail.com.

The short version

• No cookies, no tracking. This website doesn’t put cookies on your device or store anything in your browser, so there’s no cookie banner to click through.
• Visits are counted, not people. I use privacy-friendly analytics to see which pages are useful. It can’t identify you and doesn’t follow you around the internet.
• You choose what you tell me. I only have your details if you send an enquiry, sign up for a free guide, message me, or become a client.
• I never sell your information or share it for anyone else’s marketing.

What I collect, why, and on what basis

If you send an enquiry

The contact form asks for your name, email address, business name, website or Instagram, the service you’re interested in, how you heard about me, and what you’d like help with. It’s emailed straight to me so I can reply. The website itself doesn’t keep a copy.

Why I can use it: to take the steps you’ve asked for before we might work together, and my legitimate interest in replying to people who get in touch.

If you sign up for a free guide or my emails

I collect your first name, your email address, which guide you asked for, the page you signed up on, the type of device you used (phone, tablet or computer) and the website or link that sent you (for example Pinterest or Instagram). That helps me see which of my posts are actually useful.

When you sign up for the Content Clarity Reset, you get the download straight away by email, followed by six short emails, one each morning, to help you put it to work. That’s seven emails in all, and then they stop.

Requesting the reset does not sign you up for my occasional brand and content emails. I keep a record of when and where you signed up.

Every email has an unsubscribe link, and you can also just reply and ask me to stop.

Why I can use it: your consent, which you can withdraw at any time.

If you message me on WhatsApp

The “message Jo” button opens WhatsApp. I’ll see your name, number and anything you send, including voice notes. WhatsApp is run by Meta, and its own privacy policy covers how it handles your messages.

Why I can use it: my legitimate interest in replying to you, and to take steps before we work together.

If you become a client

To work with you, I keep your contact details, your business and brand information, content plans, notes from our conversations, files and photos you share, feedback and approvals, and records of what we’ve agreed and what you’ve paid.

Why I can use it: to deliver our agreement (a contract), and to meet my legal duties, such as keeping business and tax records.

When you visit the website

I use PostHog, an analytics service hosted in the EU, set up so that it:

• doesn’t use cookies or store anything on your device,
• doesn’t keep your IP address (it’s used once to work out your country, then thrown away),
• doesn’t record your screen or what you type,
• switches itself off if your browser sends a “Global Privacy Control” signal.

It records things like which pages are viewed, which links and buttons are clicked, roughly where visitors are in the world, the type of device and browser, the website that sent you here, and whether a sign-up or enquiry was sent. I can’t use it to identify you.

Like every website, the companies that host it also see technical information for a short time (such as your IP address and browser) to deliver pages securely and stop abuse.

Why I can use it: my legitimate interest in understanding which parts of my website help people, and in keeping it secure. Because nothing is stored on your device, no consent is needed under the cookie rules.

Cookies

This website sets no cookies and stores nothing in your browser.

Who helps me

These companies process information for me, under contracts that require them to keep it safe and only use it on my instructions:

• Brevo: my email list, the guide sign-up and sending enquiries to me (EU, France)
• Google (Gmail): my email inbox (USA and elsewhere)
• PostHog: privacy-friendly website analytics (EU, Germany)
• Vercel: hosting the website (USA, with servers worldwide)
• Pressable (Automattic): hosting the system I use to edit the website (USA)
• Cloudflare: my domain and website security (USA, with servers worldwide)
• WhatsApp (Meta): messages, if you choose to use it (USA and elsewhere)

I may also share information if the law requires it, or with my accountant for tax purposes.

Information sent outside the UK

Some of these companies store information outside the UK. Where they do, it’s protected by the safeguards UK law requires, such as the UK’s adequacy regulations (for the EU), the UK Extension to the EU-US Data Privacy Framework, or the UK’s approved contract terms.

How long I keep it

• Enquiries that don’t lead to work: up to 2 years, in case you get back in touch.
• Email list: until you unsubscribe. If you haven’t opened anything in 2 years, I’ll remove you.
• Client records: for as long as we work together, then 6 years for tax and legal reasons.
• WhatsApp messages: as long as they’re useful for our conversation, and no more than 2 years after we last spoke, unless you become a client.
• Website analytics: up to 12 months, in a form that doesn’t identify you.

Your rights

You have the right to:

• ask for a copy of the information I hold about you,
• ask me to correct anything that’s wrong,
• ask me to delete your information,
• ask me to limit how I use it, or object to me using it,
• withdraw your consent at any time, for example by unsubscribing,
• ask for a copy of information you gave me in a format you can take elsewhere.

Just email sayitwithabrand@gmail.com. I’ll reply within one month, and there’s no charge.

Keeping it safe

I use well-known, secure services and two-factor sign-in where it’s offered, and I only keep what I need.

Complaints

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

If I change how I use your information, I’ll update this page and the date at the top. If it’s a big change and I have your email address, I’ll tell you.