Privacy policy

Privacy Policy

Tamara Miller Consulting — Tamara Miller
Last updated: September 2026

Tamara Miller Consulting is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how personal information is collected and used when you visit the website, contact me, book a call or work with Tamara Miller Consulting.

1. Who I am

Tamara Miller trading as Tamara Miller Consulting is the data controller for personal information collected and used for my own business purposes as described in this Privacy Policy.

Business: Tamara Miller Consulting
Data controller: Tamara Miller
Location: Bournemouth, Dorset, UK
Email: info@tamaramillerconsulting.com

For some client projects, I may also process personal information on behalf of my client. This is explained further below.

2. Information I may collect

Depending on how you interact with Tamara Miller Consulting, I may collect:

Identity and contact information

This may include:

  • your name;

  • business or organisation name;

  • job title;

  • email address;

  • telephone number; and

  • other professional contact information.

Enquiry and communication information

This includes information you provide through:

  • contact forms;

  • email;

  • consultation or clarity calls;

  • social media;

  • telephone calls; and

  • other business communications.

Client and project information

If we work together, I may process information such as:

  • project requirements;

  • business goals;

  • website details;

  • technical information;

  • project documents;

  • client feedback;

  • meeting notes;

  • contracts;

  • quotations;

  • invoices; and

  • relevant business-process information.

Account and access information

For website, system, automation or implementation work, you may need to provide access to platforms, websites or business systems.

I aim to minimise the collection and storage of passwords and access credentials and recommend secure access-sharing methods wherever possible.

Access will only be used for the purpose of carrying out the agreed work.

Transaction information

I may process:

  • purchase or service information;

  • invoices;

  • payment status;

  • transaction records; and

  • accounting information.

Full payment-card details are normally processed by the relevant payment provider rather than stored directly by Tamara Miller Consulting.

Marketing information

Where applicable, I may process:

  • marketing preferences;

  • email subscription information; and

  • records of whether you have opted in or opted out of marketing communications.

Website and technical information

When you visit the Tamara Miller Consulting website, technical information may be collected automatically, including:

  • IP address;

  • browser and device information;

  • operating system;

  • referring pages;

  • website pages visited;

  • interactions with the website; and

  • cookie or similar technology information.

Please see the separate Cookie Policy for further information.

3. Why I use personal information

To respond to enquiries

I use contact and communication information to answer questions, arrange calls and discuss potential work.

Lawful basis: legitimate interests in responding to business enquiries and taking steps at your request before entering into a contract.

To deliver consulting and digital services

I use client and project information to provide services such as:

  • website reviews and builds;

  • website optimisation;

  • SEO work;

  • systems and workflow consulting;

  • automation work;

  • digital strategy;

  • implementation support; and

  • related consulting services.

Lawful basis: performance of a contract or taking steps before entering into a contract.

To manage the business relationship

I may use information to:

  • manage projects;

  • communicate about work;

  • schedule meetings;

  • provide support;

  • maintain project records; and

  • manage client relationships.

Lawful basis: performance of a contract and legitimate interests in operating the business effectively.

Accounting and legal administration

Transaction and financial information is used for:

  • invoicing;

  • bookkeeping;

  • tax;

  • accounting; and

  • legal record keeping.

Lawful basis: performance of a contract and compliance with legal obligations.

Website administration and security

Technical information may be used to:

  • maintain and protect the website;

  • prevent spam, fraud or abuse;

  • understand performance; and

  • troubleshoot technical issues.

Lawful basis: legitimate interests in maintaining an effective and secure website, and consent where required for optional cookies or similar technologies.

Marketing

I may send marketing communications where you have requested them, given appropriate consent or where applicable electronic-marketing rules otherwise permit it.

You can opt out at any time.

4. When I act as a data processor for clients

As part of website, systems, workflow, SEO or automation projects, I may be given access to personal information controlled by a client.

Examples may include information contained in a client's:

  • website;

  • CRM;

  • email platform;

  • booking system;

  • analytics account;

  • e-commerce system;

  • forms;

  • customer database; or

  • automation tools.

Where I only process that information on my client's documented instructions and do not decide the purpose for which it is used, the client remains the data controller and Tamara Miller Consulting acts as a data processor.

In those circumstances:

  • the client's own privacy notice governs how they use their customers' or users' information;

  • I only process information as necessary to perform the agreed work and in accordance with the client's instructions;

  • appropriate confidentiality and security measures will be used;

  • I will not use that underlying data for my own unrelated marketing or business purposes; and

  • where required, controller-processor obligations will be reflected in the contract or a separate data-processing agreement.

If you are an individual whose information is held by one of my clients and you wish to exercise your data-protection rights in relation to that information, you should normally contact that client directly.

5. How I collect information

Information may be collected:

  • directly from you;

  • through website forms;

  • when you email or message me;

  • through a booking or scheduling platform;

  • during consultation or project calls;

  • from payment providers;

  • through website technologies; or

  • from a colleague or organisation you work with where they provide your professional details for a legitimate business purpose.

Where information has not been obtained directly from you, I will only use it where I have a lawful basis to do so.

6. Cookies and website technologies

The Tamara Miller Consulting website uses cookies and similar technologies for purposes including:

  • website operation;

  • security;

  • user preferences;

  • analytics where enabled; and

  • website performance.

Where consent is legally required, optional cookies or technologies will be used in accordance with the choices you make.

Please see the separate Cookie Policy for more information.

7. Google reCAPTCHA

Certain website forms may use Google reCAPTCHA to help prevent spam, fraud, automated submissions and abuse.

Technical and interaction data may be processed for security and risk-analysis purposes.

For reCAPTCHA customer data collected through the Tamara Miller Consulting website, Tamara Miller Consulting acts as the data controller and Google processes relevant information as a data processor.

8. Who I may share personal information with

I do not sell personal information.

Where reasonably necessary, information may be shared with:

  • Squarespace or other website and hosting providers;

  • booking and scheduling providers such as Calendly;

  • payment processors;

  • email and communications providers;

  • cloud-storage and IT providers;

  • project or software tools used to deliver agreed client work;

  • accountants, insurers, lawyers and other professional advisers;

  • contractors or specialist service providers involved in a project where appropriate and subject to suitable confidentiality and data-protection requirements;

  • regulators, government authorities, courts or law-enforcement agencies where legally required; and

  • a purchaser or adviser in connection with a genuine sale, restructuring or transfer of the business where legally appropriate.

Where a third party processes personal information on my behalf, they are expected to handle it securely and only for the appropriate purpose.

9. International transfers

Some digital platforms and service providers may process personal information outside the UK.

Where personal information is transferred outside the UK, I take reasonable steps to ensure the transfer is covered by an appropriate mechanism under UK data-protection law.

Depending on the destination and provider, this may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK International Data Transfer Addendum;

  • another legally approved safeguard; or

  • another permitted mechanism.

You may contact me if you would like further information about safeguards relating to a particular provider.

10. How long I keep personal information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected.

As a general guide:

  • enquiries that do not result in work will be deleted when they are no longer reasonably required;

  • project communications and client records will be retained for an appropriate period following completion where reasonably necessary for contractual, legal, professional or insurance purposes;

  • financial and transaction records will be retained for the period required by tax and accounting law;

  • marketing records will be kept until you unsubscribe or the relevant marketing activity ends;

  • project-access credentials should be removed or deleted when they are no longer reasonably required; and

  • personal information processed solely on behalf of a client will be returned, deleted or otherwise dealt with in accordance with the client's instructions, the relevant agreement and applicable law.

Information may be retained for longer where necessary for the establishment, exercise or defence of legal claims or another legal obligation.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of appropriately.

11. Security

I take reasonable technical and organisational precautions to protect personal information from:

  • unauthorised access;

  • misuse;

  • accidental loss;

  • alteration; and

  • disclosure.

Measures may include:

  • password-protected accounts;

  • multi-factor authentication where available;

  • secure sharing of account access;

  • appropriate access controls;

  • secure devices and systems; and

  • limiting access to people who reasonably need the information.

No online system can be guaranteed to be completely secure, but reasonable precautions are taken to reduce risk.

12. Marketing preferences

You may ask me to stop sending marketing communications at any time.

You can:

Opting out of marketing does not stop communications that are necessary to deliver an existing service or manage a contract.

13. Your data-protection rights

Depending on the circumstances and lawful basis involved, you may have rights including the right to:

  • access personal information held about you;

  • correct inaccurate information;

  • request erasure;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable; and

  • withdraw consent where consent is being relied upon.

These rights are subject to legal conditions and exemptions.

Your right to object

Where I rely on legitimate interests, you may have the right to object to the processing.

You always have the right to object to the use of your personal information for direct marketing.

To exercise your rights in relation to information controlled by Tamara Miller Consulting, email:

info@tamaramillerconsulting.com

I may need to verify your identity before responding.

Where I hold information solely as a processor for one of my clients, I may need to refer your request to that client as the relevant data controller.

14. Complaints

If you have concerns about how Tamara Miller Consulting has handled your information, please contact me so I have the opportunity to address the issue. Email: info@tamaramillerconsulting.com

15. Third-party websites

The Tamara Miller Consulting website may contain links to websites or services operated by third parties.

Those third parties are responsible for their own privacy practices. You should review their privacy information when providing information directly to them.

16. Children

The Tamara Miller Consulting website and services are intended primarily for businesses and adults.

I do not knowingly collect personal information from children under 13 through the website.

17. Automated decision-making

Tamara Miller Consulting does not currently use solely automated decision-making or profiling to make decisions about individuals that produce legal or similarly significant effects.

18. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes to services, technology, business practices or applicable law.

The most recent version will be published on the Tamara Miller Consulting website with the date of the latest update.