Privacy Policy
Last updated: 17 August 2026
This Privacy Policy explains how Savannah Marriott collects, uses and protects personal information when you visit savannahmarriott.com, contact me, or enquire about services.
For the purposes of UK data protection law, Savannah Marriott is the data controller for personal information collected through this website.
Contact: me@savannahmarriott.com
Information I may collect
When you contact me through the website, I may collect information including:
- your name;
- email address;
- telephone number;
- the type of enquiry you select;
- information contained in your message;
- any additional information you choose to provide;
- correspondence between us following your enquiry.
The website may also collect limited technical information necessary for its operation, security and administration.
Please avoid including sensitive personal information in a general website enquiry unless it is genuinely necessary.
Contact form enquiries
The Contact Savannah form is provided using Contact Form 7.
Form submissions may also be stored within the website using Flamingo so that I have a record of enquiries and can respond if an email notification is lost or fails to arrive.
Information submitted through the contact form is used to:
- respond to your enquiry;
- understand the help or service you are looking for;
- communicate with you about your enquiry;
- arrange tutoring, research, consultancy or other services where requested;
- provide information about Research Manager where relevant;
- maintain appropriate records of correspondence;
- prevent misuse of the website.
Lawful basis for using your information
Depending on the circumstances, I may process your information because:
It is necessary to take steps at your request before entering into a contract, for example where you ask about tutoring, research services or access to a service.
It is necessary to perform a contract where you subsequently become a client or customer.
I have a legitimate interest in responding to enquiries, communicating with people interested in my work, administering the website and maintaining appropriate records.
I have a legal obligation where information must be retained or processed to comply with applicable law.
Where consent is the appropriate lawful basis, you may withdraw that consent at any time.
UK GDPR requires organisations to identify an appropriate lawful basis for their processing and explain it in their privacy information.
How long I keep information
General website enquiries will normally be retained for up to 24 months after the last meaningful communication, after which they will be deleted unless there is a legitimate reason to retain them for longer.
Where an enquiry results in paid work, tutoring, research support or another contractual relationship, relevant records may need to be retained for longer for contractual, accounting, tax, legal or administrative purposes.
Information that is no longer reasonably required will be deleted or anonymised.
Who receives your information
I do not sell your personal information.
Information may be processed using service providers necessary to operate the website and communicate with you, which may include:
- the website hosting provider;
- email and email-delivery providers;
- website security and backup providers;
- other technical service providers where reasonably necessary.
Contact form submissions stored by Flamingo are stored as part of the WordPress website database.
If a provider processes information outside the United Kingdom, appropriate safeguards will be used where required by data protection law.
Marketing
Submitting the contact form does not automatically subscribe you to marketing communications.
If marketing emails are introduced in the future, they will be handled separately and in accordance with applicable data protection and electronic marketing rules.
Cookies
The website may use cookies and similar technologies for functionality, security and other purposes.
Please see the separate Cookie Policy for further information.
Your data protection rights
Depending on the circumstances, UK data protection law may give you rights including the right to:
- ask for access to your personal information;
- ask for inaccurate information to be corrected;
- ask for information to be deleted;
- ask for processing to be restricted;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent.
These rights are not absolute and may depend on the circumstances and lawful basis for processing. ICO guidance confirms rights including access, erasure and objection under the UK GDPR.
To exercise a privacy right, contact:
Complaints
If you have concerns about how your personal information is handled, please contact me first so that I have an opportunity to resolve the issue.
You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. ICO guidance requires privacy notices to tell individuals how they can complain about the handling of their information.
Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes to the website, services or legal requirements.
The date at the top of the page shows when it was last updated.
