What we collect, and what we do with it.
Written in plain English, because a privacy policy you can't read isn't protecting anyone.
Who we are
Ruby Roo is a UK consultancy working across education, business strategy and marketing. For data protection purposes, the data controller is Ruby Roo [legal entity name and company number to be confirmed]. If you have any question about this policy or your data, email kim@rubyroo.uk — it goes to Kim, not a shared inbox nobody checks.
What we collect, and why
When you contact us — through the contact form, by email, or by booking a call — we receive your name, your contact details and whatever you choose to tell us. We use it to reply and, if we end up working together, to deliver the work. The lawful basis is our legitimate interest in responding to you, and contract once an engagement starts.
When you browse the site — if (and only if) you accept analytics cookies, Google Analytics tells us which pages get read and roughly where visitors come from. The lawful basis is your consent, which you can withdraw at any time via the Cookie settings link in the footer. If you decline, we get no analytics about your visit at all.
What we don't do: we don't sell your data, we don't run advertising or ad tracking on this site, and we don't add you to a mailing list because you asked us a question.
Cookies and similar storage
The essential items below make the site work and don't track you. The analytics cookies are only set if you accept them.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| rubyroo-consent | Essential (local storage) | Remembers your cookie choice | 12 months |
| rubyroo-a11y | Essential (local storage) | Remembers your accessibility settings (text size, contrast, motion) | Until cleared |
| _ga | Analytics (cookie, consent only) | Distinguishes visitors for Google Analytics | 2 years |
| _ga_* | Analytics (cookie, consent only) | Maintains the Google Analytics session | 2 years |
We use Google Consent Mode v2: analytics is denied by default and nothing is sent to Google unless you opt in. Advertising signals are switched off permanently, regardless of your choice.
Third parties we use
- Google Analytics 4 (with your consent only) — visit statistics. Google may process this data outside the UK; transfers are covered by the UK Addendum to the EU Standard Contractual Clauses under Google's data processing terms.
- Fontshare — our web fonts are currently delivered by Fontshare (Indian Type Foundry), which means your IP address is sent to their servers to load the font files. No cookies are set.
- Cloudflare — hosts and serves the website, and sees the traffic data any host sees (IP addresses, requests) to deliver pages and prevent abuse.
- WhatsApp — the chat button is an outbound link. Nothing loads from WhatsApp on this site; their privacy policy applies only once you choose to open the chat.
How long we keep things
Enquiries: for as long as the conversation is live, then up to 24 months in case you come back. Client records: for the engagement plus the period UK tax and accounting law requires (typically 6 years). Analytics: Google Analytics data retention is set to 14 months.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict what we do with it, object to our use of it, or hand it to you in a portable format. Where we rely on consent, you can withdraw it whenever you like. Email kim@rubyroo.uk and we'll respond within a month.
If you're not happy with how we've handled something, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd appreciate the chance to fix it first.
Changes to this policy
If we change what we collect or how we use it, this page changes too, with a new date at the top. We won't quietly move the goalposts.