Privacy Policy

Last updated: 9 October 2026

This policy explains what personal information Cosmic Monday collects through this website, why, what I do with it, and the choices you have. I've written it in plain English, because you should be able to understand how your information is handled without needing a law degree.

1. Who I am

Cosmic Monday is run by Stephanie Knowles, a sole trader based in England. For the purposes of UK data protection law, I am the "controller" of the personal information collected through cosmicmonday.co

If you have any questions about this policy or your information, email me at steph@cosmicmonday.co

2. What information I collect

Information you give me directly

Enquiries: when you fill in a contact or enquiry form, or email me, I collect your name, email address, business name and anything you choose to tell me about your business.
Email list and free resources: when you sign up for my emails or download a free resource (such as The Founder Date), I collect your name and email address.

Information collected automatically

When you visit the site, my website platform (Squarespace) collects basic technical information such as your IP address, browser and device type, the pages you visit, how you arrived at the site and roughly where in the world you're browsing from. Some of this is collected using cookies - see my Cookie Policy for details.

I don't ask for, and would prefer you didn't send, sensitive information (such as health details) through the website.

3. How I use your information, and why I’m allowed to

UK data protection law requires me to have a lawful basis for each use of your information.

    What I use it for
    Lawful basis
  
    Replying to your enquiry and talking to you about working together
    Taking steps at your request before entering a contract, and my legitimate interest in responding to people who contact me
  
    Sending you the free resource you asked for
    Your consent
  
    Sending you my emails (business tips, updates, and occasionally details of my services)
    Your consent — you can unsubscribe at any time
  
    Keeping the website running securely and understanding how it's used so I can improve it
    My legitimate interest in running a secure, useful website (and your consent where cookies require it)
  
    Keeping records I'm required to keep, and dealing with any legal claims
    Legal obligation and my legitimate interests

What I use it for	Lawful basis
Replying to your enquiry and talking to you about working together	Taking steps at your request before entering a contract, and my legitimate interest in responding to people who contact me
Sending you the free resource you asked for	Your consent
Sending you my emails (business tips, updates, and occasionally details of my services)	Your consent — you can unsubscribe at any time
Keeping the website running securely and understanding how it's used so I can improve it	My legitimate interest in running a secure, useful website (and your consent where cookies require it)
Keeping records I'm required to keep, and dealing with any legal claims	Legal obligation and my legitimate interests

4. Who I share it with

I only share your information with trusted services that help me run the business, and only as much as they need. They act on my instructions and must keep your information secure. These are:

Squarespace - hosts the website
Dubsado - hosts my enquiry form
Flodesk - sends my emails and manages my mailing list
Google Workspace - my business email and documents

I may also share information if the law requires it, or with professional advisers (such as an accountant or solicitor) where needed.

5. Transfers outside the UK

Some of these providers are based in, or store data in, the United States or elsewhere outside the UK. Where that happens, I rely on the safeguards UK law requires, such as UK government adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or approved contract terms (the UK International Data Transfer Agreement or Addendum).

6. How long I keep it

Enquiries that don't lead to working together: up to 12 months after our last contact, then deleted.
Email list: until you unsubscribe. After that I keep only your email address on a suppression list so I don't contact you again by mistake.
Client records: for as long as needed under our agreement, and up to 6 years afterwards for tax and legal purposes.
Website analytics: in line with Squarespace's retention settings.

7. Keeping it safe

I use reputable, secure platforms, strong passwords and two-factor authentication, and I limit who can access your information. No system is perfectly secure, but I take reasonable steps to protect what you share with me.

8. Your rights

Under UK data protection law, you have the right to:

ask for a copy of the information I hold about you
ask me to correct anything inaccurate or incomplete
ask me to delete your information
ask me to restrict or stop using it, or object to how I'm using it
ask for your information in a format you can take elsewhere
withdraw your consent at any time (for example, by clicking "unsubscribe" in any email)

To use any of these rights, email steph@cosmicmonday.co. There's no charge, and I'll respond within one month.

9. Complaints

If you're unhappy with how I've handled your information, please tell me first at steph@cosmicmonday.co - I'll acknowledge your complaint within 30 days and do my best to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk or 0303 123 1113.