• Identity and contact details – name, email address, postal address (if provided).
• Project information – word count, nature of project, genre, scheduling, correspondence.
• Country/region – for invoicing, currency and tax treatment.
• Payment identifiers – limited details necessary to reconcile payments (processed by Stripe; I do not see full card numbers).
• Website usage – only with your consent to analytics cookies (see Cookies)
• To respond to enquiries, provide quotes, perform and manage projects, and issue invoices – contract; legitimate interests (where proportionate).
• To keep business records and meet tax/accounting obligations – legal obligation.
• To send editorial news and offers – consent (you can withdraw at any time). For UK recipients, I will only send marketing emails where you have opted-in, or – if applicable – under the limited soft opt-in for existing clients with an always-on opt-out.
I use trusted service providers acting under contract as processors, including:
• Webflow (website hosting), Kit (subscriptions), Motion (calendar), Stripe (payments), Microsoft Outlook/Office 365 (email), and secure local storage/backup. These providers may be located outside your province or country. I do not sell your data.
• Where required by law, I may share data with tax authorities or law-enforcement (e.g. Canada Revenue Agency, HMRC).
If your data is transferred outside the UK, I use appropriate safeguards — for example, the UK’s International Data Transfer Agreement (IDTA)or the UK Addendum to EU SCCs, or rely on UK adequacy regulations where available. Details are available on request.
• Enquiries and quotes – kept 12 months after last contact.
• Client/project files and invoices – kept 6–7 years to meet accounting and tax requirements, then securely deleted.
• Mailing-list data – kept until you unsubscribe or withdraw consent.
I keep data no longer than necessary for the purposes above.
I use appropriate technical and organisational measures – account/password protection, access controls, TLS encryption in transit, and encrypted backups for local storage – to protect personal information.
I will only send you marketing emails if you have opted in (or, in the UK, under the narrow soft opt-in for existing clients), and every email includes an unsubscribe link. You can withdraw consent at any time.
• UK users (UK GDPR / DPA 2018): rights of access, rectification, erasure, restriction, objection, portability, and to withdraw consent. I aim to respond within one month (extendable in complex cases). You may complain to the ICO (ico.org.uk).
• BC users (PIPA): rights to access and request correction to your personal information. I will respond within 30 business days unless an extension is permitted. You may complain to the Office of the Information and Privacy Commissioner for BC (OIPC).
To exercise your rights, email info@rebeccamillareditorial.com.
This site uses essential cookies for operation. Analytics cookies (e.g. Google Analytics) are off by default and set only if you consent via the banner — you can change your choice at any time. Non-essential cookies require a clear, positive action; simply continuing to browse is not consent. See your browser help for how to clear cookies.
The only way I use cookies specifically is through Google Analytics.
If you wish to disable cookies, you can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
This site may link to other websites. Their privacy policies apply to their services.
Email: info@rebeccamillareditorial.com
UK: Information Commissioner’s Office (ICO) — complaint guidance at ico.org.uk.
BC: Office of the Information and Privacy Commissioner for BC (OIPC) — complaint guidance at oipc.bc.ca.
