Privacy Policy

Last updated: August 2026

Annaliese Mason ("we", "us" or "our") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit www.annaliesemason.co.uk, contact us, make an enquiry or engage us to provide Executive Support, Virtual Assistant or related professional support services.

1. Who We Are

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller for information collected directly by our business is:

Annaliese Mason
Executive Support & Virtual Assistant Services
Website: www.annaliesemason.co.uk

When providing services to clients, we may also process personal information on behalf of a client. In these circumstances, the client may be the data controller and Annaliese Mason may act as a data processor.

2. Information We May Collect

Depending on how you interact with us, we may collect and process information including:

Contact information – such as your name, email address, telephone number and business details.
Enquiry information – information you provide when contacting us about our services.
Client information – information required to manage our working relationship, projects, contracts and communications.
Business and project information – information provided by clients that is necessary for us to carry out agreed services.
Personal information processed on behalf of clients – depending on the services provided, this may include information relating to a client's customers, suppliers, employees, contacts or other individuals.
Payment and transaction information – records relating to invoices and payments. We do not generally store full payment card information ourselves.
Website and technical information – such as your IP address, browser type, device information and information about how you interact with our website.
Marketing preferences – including whether you have chosen to receive marketing communications from us.

We will only collect information that is reasonably necessary for the relevant purpose.

3. How We Collect Your Information

We may collect information:

Directly from you when you contact us, submit an enquiry or engage our services.
During the course of providing services to you.
From information you provide through email, telephone, online meetings or other communication platforms.
Through our website and associated technologies, including cookies where applicable.
From third parties where this is necessary to provide an agreed service or where you have authorised us to receive the information.

4. How We Use Your Information

We may use your personal information to:

Respond to enquiries.
Provide and manage our services.
Communicate with clients about projects, tasks and ongoing support.
Manage contracts, invoicing and payments.
Maintain appropriate business and financial records.
Improve our website and services.
Manage our business operations.
Comply with legal, regulatory, accounting or tax obligations.
Protect our legitimate business interests.
Send marketing communications where we have an appropriate lawful basis to do so.

We will not use your personal information for purposes that are incompatible with those for which it was originally collected unless permitted or required by law.

5. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract – where processing is necessary to provide services you have requested or to take steps before entering into a contract.
Legitimate interests – where processing is reasonably necessary for the operation and development of our business and those interests do not override your rights.
Legal obligation – where we need to process information to comply with a legal requirement.
Consent – where you have specifically agreed to a particular use of your information.

Where we rely on consent, you may withdraw that consent at any time.

6. Information Processed on Behalf of Clients

As part of providing Executive Support and Virtual Assistant services, we may be given access to personal or confidential information held by our clients.

Where we process personal information on behalf of a client, we will only process that information as necessary to provide the agreed services and in accordance with the client's instructions and applicable data protection requirements.

Clients remain responsible for ensuring that they have an appropriate lawful basis for collecting and sharing personal information with us where they are the data controller.

We treat client information confidentially and take reasonable measures to protect information entrusted to us.

7. Sharing Your Information

We do not sell your personal information.

We may share information with trusted third-party service providers where reasonably necessary to operate our business or provide our services. This may include providers of:

Website hosting and website management.
Email and communication services.
Cloud storage and document management.
Accounting and invoicing systems.
Payment processing.
IT and technical support.
Other software or platforms used to deliver our services.

We may also disclose information where required by law, regulation, court order or another legitimate legal process.

Where third-party providers process personal information on our behalf, we take reasonable steps to ensure that appropriate safeguards are in place.

8. International Data Transfers

Some of the technology and service providers we use may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable UK data protection legislation.

9. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no internet-based system or method of electronic storage can be guaranteed to be completely secure.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax or reporting requirements.

The length of time information is retained will depend on the nature of the information, our relationship with you and any applicable legal requirements.

Information processed on behalf of a client will be retained or deleted in accordance with the relevant client arrangements and applicable legal requirements.

11. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information in certain circumstances.
Request restriction of processing in certain circumstances.
Object to certain types of processing.
Request the transfer of your personal information where applicable.
Withdraw consent where processing is based on consent.
Object to the use of your personal information for direct marketing.

If you wish to exercise any of these rights, please contact us using the contact details provided on our website.

You also have the right to raise a concern with the Information Commissioner's Office (ICO) if you believe your personal information has not been handled appropriately.

12. Cookies

Our website may use cookies and similar technologies.

For further information about the cookies used on our website and how you can manage your preferences, please see our Cookie Policy.

13. Third-Party Links

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any third-party website you visit.

14. Marketing Communications

Where permitted by law, we may contact you about our services, updates or other information we believe may be relevant to you.

You can ask us to stop sending marketing communications at any time by using the unsubscribe option provided, where applicable, or by contacting us directly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, website or legal obligations.

Any updates will be published on this page and the "Last updated" date will be amended accordingly.

16. Contact Us

If you have any questions about this Privacy Policy, how your information is handled or wish to exercise your data protection rights, please contact:

Annaliese Mason
Executive Support & Virtual Assistant Services
Website: www.annaliesemason.co.uk

Please use the contact details or contact form provided on our website.