Privacy Policy

I am Rachel Pascal, trading as RHPWriting Ltd. I am the data controller for all personal data collected through this website and during the course of providing my services.

What personal data DO I collect? 

I collect and process personal data that you provide when you contact me or work with me, including:

• Name

• Email address

• Telephone number (if provided)

• Organisation/employer (if applicable)

• Information you include in your enquiry or project brief

• Documents provided for the purpose of writing or editing work (e.g., project materials)

• Billing and invoicing information

I do not process special category data about identifiable individuals.

How I Use Your Personal Data

a) Providing medical-writing and editing services

Purpose: responding to enquiries, preparing proposals, communicating with you, carrying out contracted work, delivering completed services.

b) Business administration and accounting

Purpose: invoicing, tax compliance, and maintaining business records.

C) SERVICE AVAILABILITY NOTIFICATIONS OR OPT-INS

Purpose: to notify you about the availability of services you have expressed interest in, or invite you to join our email list for updates, offers, and marketing, if you choose to opt in.

c) Email marketing list

If you subscribe to my email list, I use your name and email address to send occasional updates or information about my services. You may unsubscribe at any time.

I use Kit (formerly ConvertKit) as my email service provider, which acts as a data processor and stores your data solely for delivering emails.

How I Store and Protect Your Data

I take appropriate technical and organisational measures to keep your personal data secure, including:

• Password-protected devices

• Two-factor authentication on email

• Encrypted cloud storage

• Optional password-protected delivery of project files

Access to your personal data is restricted to:

• Me, as the primary service provider

• Trusted third parties where necessary for business operations (e.g., accountant, bookkeeper, administrative assistant), all of whom are bound by confidentiality and process data only under my instruction 

I do not sell your personal data or share it for third-party marketing.

Data Sharing and Third-Party Processors

I may share your personal data with the following categories of service providers, strictly as needed:

• Email marketing provider (Kit)

• Cloud storage services

• Accountancy software or accountants

• Administrative support providers

These organisations act as data processors and process data only under written agreements that comply with UK GDPR.

Some of your personal data may be stored or processed outside the UK/EEA (for example, using OneDrive or Kit). In all such cases, appropriate safeguards, such as Standard Contractual Clauses, are in place to ensure your data is protected in accordance with UK GDPR.

Data Retention

I retain personal data only for as long as necessary for the purposes outlined in this policy.

• Financial records: 6 years (legal requirement)

• Project files and correspondence: up to 5 years after project completion (legitimate business need)

• Email enquiries: up to 3 years

• Email marketing list: until you unsubscribe or withdraw consent

Your Data Protection Rights

You have the following rights under UK GDPR:

• Right of access

• Right to rectification

• Right to erasure

• Right to restrict processing

• Right to object

• Right to data portability

• Right to withdraw consent (where applicable)

To exercise any of these rights, contact me using the button above. I aim to respond within one month.

Your Right to Complain

If you have concerns about how I handle your data, please contact me first so I can address them.
You also have the right to complain to the:

Information Commissioner’s Office (ICO)
www.ico.org.uk
Telephone: 0303 123 1113

Updates to This Policy

I may update this privacy policy occasionally. The most recent version will always be available on this page, with the date of last update shown at the top.