Privacy Notice

Who are we?

Amanda FitzGerald PR want to ensure that we protect your confidentiality and privacy and make sure that your information is safe with us, just as you’d expect.

This privacy notice explains our approach in line with the UK General Data Protection Regulation (‘GDPR’) and the Data Protection Act 2018. We call these the ‘data protection laws’. This privacy notice will tell you what we collect from you and why as well as your rights.

We are a privately owned limited company registered as Elbow PR Ltd – we trade as Amanda FitzGerald PR (‘we’ and ‘us’). Our registered address is 85 Great Portland Street, London.

We are the ‘Controller’ of the personal data you provide to us. You can contact us at hello@amandapr.com if you have any questions.

What data we need and why

We collect your personal data, that means any data or information that can identify you. For example, this will include your

• Name
• Address
• Contact details (email or phone number)
• Payment information (from Stripe).

This is provided by you when you take one of our services, join one of our webinars or courses, or join our membership.

You may fill in our contact form on our website and we will use this to contact you to respond to your enquiry.

We need to know your personal data to:

• provide you with login details to courses;
• to be able to provide you with access to our services or membership;
• to deliver our fantastic consultancy or 1:1 conversation;
• to support you in your PR journey; or
• respond to enquiries.

We will not collect any personal data from you we do not need.

We have a legitimate interest in collecting this personal data from you as we cannot provide these services without it. Some of the personal data you provide will be with your consent. In other words, you chose to provide it. Where applicable, we can collect data when a contract is in place. These are known as the lawful bases under the GDPR.

We do collect some information through the use of website cookies – these are temporary small text files not the sort of cookies you can eat. Please read our section on Cookies below.

Sharing your personal data

Unless we tell you otherwise, we will not use or share your personal data for any other purpose without your permission. We do not sell your personal data to anyone.

We do not allow third parties to have access to your personal data unless we are required to share your data with them by law or we are ordered to do so by a Court.

If we sell our company, or merge with another, often referred to as acquisitions and mergers, we are likely to need to share your personal data with the new company. This will only be done in a safe and secure manner, and only the minimum data will be shared with them.

Overseas Transfers and decision making

All the personal data we collect and use (‘process’) is processed by our employees and approved and contracted support team. They work to our instructions and must keep your personal data confidential. As far as possible for the systems we use, this is all within the Uk or European Economic Area (‘EEA’).

We use services from Stripe, Google, Meta (Facebook) and Kartra. Some of these store personal data in the EEA or the USA. Where it is the USA, this means that we transfer your data to outside of the EEA and we ensure that we have contracts in place and undertake checks to make sure they and we can comply with data protection laws.

We do not make automated decisions on your data, nor do we use your data for profiling purposes.

How long we keep it

We will keep your data securely and only for as long as we need it. Typically this will be for up to 6 years after your last contact with us. We do need to keep financial records for 6 financial years to comply with UK HMRC and financial regulations. Where we sign a contract with you, for example, where you have purchased one of our courses, we may be required to keep some contract records for 6 years after the end of the contract period to comply with contract law.

From time to time we may contact you to confirm your wish to either continue to hold your data or to confirm deletion of your personal data. If we are unsuccessful in contacting you, we will automatically delete your personal data from our systems.

What are your rights?

You have a number of rights relating to the processing of your personal data. There are 8 main rights.

• You have the right to be informed about the processing of your personal data (this privacy notice fulfils that right).
• You can ask to see the personal data that we hold about you (known as a Subject Access Request).
• You can ask us to correct some data if it is inaccurate (the right to rectification)
• You can also ask us to delete your personal data (called the Right of Erasure or more commonly the right to be forgotten). This will only apply where we do not have a legal obligation to keep it.
• You can ask us to restrict the processing.
• There is a right to data portability – that is providing you with a copy of your data in a format that means it can be uploaded to another system. This is only applicable if we can technically do this and only for data you provide with your consent.
• You can object to processing and we generally see this if someone does not want a newsletter or marketing emails.
• You do have rights linked to automated decision-making and profiling but we do not undertake these.

You should contact us at hello@amandapr.com if you wish to exercise these rights. We may need to verify our identity and contact details as we want to maintain the security of your personal data. We will contact you if this is required.

We generally have up to one month to deal with any requests to exercise a right. You do not have to pay a fee unless your request is repetitive or excessive but we will discuss this with you if necessary.

When you have consented to provide us with the data, you can withdraw your consent at any time. This may mean that we cannot provide you with any more information such as our fabulous newsletters or access to a course or webinar.

Complaints

If you wish to raise a complaint on how we have handled your personal data, it would be helpful if you would give us the opportunity to look into the issue and you can contact us and we will investigate the matter.

If you do not wish to complain to us directly, you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, Telephone 0303 123 1113 (local rate) or online at www.ico.org.uk/make-a-complaint/

More information

More information on data protection and your rights can be found on the Information Commissioner’s website at www.ico.org.uk.

We recommend that you read the privacy notices for our system suppliers if you would like to know more about their processing of personal data.

• Kartra: www.kartra.com/gdpr/ (General GDPR) and www.kartra.com/privacy-policy/ (general privacy policy/notice)
• Stripe for payments: www.stripe.com/gb/privacy
• Google (for google docs etc): https://static.googleusercontent.com/media/www.google.com/en//intl/en/policies/privacy/google_privacy_policy_en.pdf or Google’s full privacy and terms site www.policies.google.com/privacy?hl=en-GB

Cookies

We use a limited number of cookies on our website. If you would like to lean more about cookies, you can find useful information at www.allaboutcookies.org/what-is-a-cookie.

Cookies are described in categories or types. We uses the following cookies and you will see the categories in the description:

There may be cookies set by links to social media platforms and we recommend that you read the information provided by those platforms about their use of cookies.

Review

We will review this privacy notice annually or when the data protection laws are amended.

Last review: March 2025