Privacy Policy

The Content Stage — thecontentstage.co.uk

Last updated: 21st July 2026

​

1. Who we are

The Content Stage is a content creation, content strategy and creative direction consultancy operated by Nicole Read, a sole trader based in Bedfordshire, United Kingdom.

For the purposes of UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018), Nicole Read trading as The Content Stage is the data controller of the personal data described in this policy.

Contact: nicole@thecontentstage.co.uk
 

2. What personal data we collect

We collect and process the following personal data:

When you use our contact form: your name, email address, and any information you include in your message.

When you sign up for a free resource (lead magnet): your name and email address.

When you interact with us on Instagram or via automated DMs (ManyChat): your Instagram username, profile information you have made public, and the content of your messages. If you provide your email address through a DM automation, we collect that too.

When you become a client: your name, business name, contact details, billing address, and information reasonably required to deliver our services and manage our working relationship.

When you browse our website: technical data such as your IP address, browser type, device information, and how you use the site, collected via cookies and analytics tools (see sections 6 and 7).

We do not knowingly collect personal data from anyone under 16, and our website and services are not directed at children.
 

3. Why we collect it and our lawful bases

​

Responding to enquiries via the contact form or DMs
Lawful basis: Legitimate interests — responding to people who contact us.
 

Sending you a free resource you requested
Lawful basis: Legitimate interests / taking steps at your request.
 

Sending email marketing (tips, offers, news)
Lawful basis: Consent — you can withdraw at any time via the unsubscribe link in any email.
 

Delivering services to clients, invoicing and account management
Lawful basis: Performance of a contract.
 

Keeping business and tax records
Lawful basis: Legal obligation.
 

Understanding how visitors use our website
Lawful basis: Consent (analytics cookies).

​

4. Who we share your data with
 

We never sell your personal data. We share it only with trusted service providers ("processors") who help us run the business:
 

• Wix — website hosting and contact form handling

• Flodesk — email marketing platform (stores our email list and sends our emails)

• ManyChat — Instagram DM automation

• Meta Platforms (Instagram) — where you interact with us on Instagram

• Google — website analytics (Google Analytics)

• Professional service providers such as our bank and accounting tools, for invoicing and record-keeping
   

Each provider only processes your data on our instructions and under contractual safeguards.

We may also disclose personal data where required by law, regulation or court order.
 

5. International transfers

Some of our providers (including Wix, Flodesk, ManyChat, Meta and Google) store or process data outside the UK, including in the United States. Where this happens, transfers are protected by appropriate safeguards recognised under UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement / Addendum (standard contractual clauses).
 

6. Cookies

Our website uses cookies — small text files placed on your device. These include:

• Essential cookies, set by Wix, needed for the website to function and stay secure. These do not require consent.

• Analytics cookies (Google Analytics), which help us understand how visitors use the site. These are only set with your consent, which you can give or refuse via the cookie banner when you first visit, and change at any time through the cookie settings on our site.
   

7. Analytics

We use Google Analytics to measure website traffic and understand which content is most useful. This involves processing your IP address and information about your visit. Data is aggregated and does not identify you personally to us. You can opt out via our cookie settings or by using Google's browser opt-out tools.
 

8. How long we keep your data

• Enquiries that don't lead to work: up to 12 months, then deleted.

• Email marketing list: for as long as you remain subscribed. If you unsubscribe, we suppress or delete your details promptly.

• Client records: for the duration of our engagement and up to 6 years afterwards, to meet legal, tax and accounting obligations.

• Analytics data: retained in line with the retention period set in our analytics tool.
   

9. How we keep your data secure

We take reasonable technical and organisational measures to protect your data, including using reputable providers with strong security practices, password protection and two-factor authentication on business accounts, and limiting access to personal data to what is necessary.
 

10. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Erase your data ("right to be forgotten")

• Restrict or object to how we process it

• Data portability — receive your data in a usable format

• Withdraw consent at any time, where consent is our lawful basis (for example, email marketing)

To exercise any of these rights, email nicole@thecontentstage.co.uk. We will respond within one month.
 

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113. We'd appreciate the chance to resolve any concern first, so please do contact us before going to the ICO if you can.
 

11. Third-party links

Our website and social channels may link to other websites. We are not responsible for the privacy practices of those sites, so please check their own privacy policies.
 

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.

​