Legal

Privacy Policy

Last updated: June 2026

Who we are

Two Hoots Digital is operated by Julia Leech-Howlett, trading as Two Hoots Digital. Our registered address is 35 Captains Meadow, SY8 4DW. You can contact us at julia@twohoots.digital.

This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data we collect

When you book or enquire about our audit service, we may collect the following personal data:

We do not store your full card details. Payment data is handled directly by Stripe, who are PCI DSS compliant. You can read Stripe's privacy policy at stripe.com/gb/privacy.

Website tracking

We currently use standard server logs to understand how our website is used. In future, this website will also use the Meta Pixel to track visitor behaviour and measure the effectiveness of our advertising. When implemented, this will be disclosed clearly and, where required, your consent will be obtained before any tracking cookies are set.

CRM and customer management

We intend to use a CRM (customer relationship management) system to manage client relationships and communications. Any personal data held in our CRM will be used solely to deliver and follow up on our audit service. We will only use providers who meet appropriate data protection standards.

Why we collect your data

We collect and process your personal data for the following purposes:

Our lawful basis for processing is contract performance — we need your data to provide the service you have paid for — and in some cases legitimate interests, where we have a genuine business reason to process your data that does not override your rights.

How we store your data

Your data is stored securely and accessed only by Julia Leech-Howlett for the purposes described above. We do not transfer your data outside the UK without ensuring appropriate safeguards are in place.

How long we keep your data

We retain your personal data for as long as is necessary to deliver the service and meet our legal obligations. Once your data is no longer needed, it will be securely deleted.

Third parties

We do not sell, rent, or trade your personal data to any third party. We may share data with trusted service providers (such as Stripe for payment processing) solely to the extent necessary to deliver our service. These providers are bound by their own privacy policies and data protection obligations.

Your rights

Under UK GDPR you have the following rights:

To exercise any of these rights, or to request deletion of your data, please email julia@twohoots.digital. We will respond within one calendar month.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.