Privacy Policy
Pebble & Pond
Last updated: 26 October 2026
1. Who I am
Pebble & Pond is an operations and project delivery consultancy run by Shari Walters as a sole trader. I am the "data controller", which means I decide how and why your personal information is used.
• Email: info@pebbleandpond.co.uk
• Website: www.pebbleandpond.co.uk
If you have any questions about this policy or your information, please contact me using the details above.
2. What information I collect
When you use my website or contact me
• Your name, email address, phone number and business name
• Anything you write in a message, contact form or booking form
• Technical information such as your device, browser and the pages you visit (see "Cookies" below)
When you book an intro chat
• Your name, email address, chosen time and any notes you add
When I work with you as a client
• Contact and billing details
• Information about your business, systems, processes and projects that you share with me
• Information about your team that is needed to do the work, such as names, roles and what they tell me in conversations
• Notes, reports and project documents I create for you
When you follow or message me on social media
• Your public profile information and the messages you send, on platforms such as LinkedIn and Instagram
I don't ask for sensitive personal information (such as health details). Please don't send it to me unless it is needed for the work, and we have agreed this first.
3. How I use your information, and why
• Replying to your enquiry and booking an intro chat: legitimate interests
• Invoicing, accounting and keeping records: legal obligation
• Providing my services and managing our work together: contract
• Improving my website and services: legitimate interests
• Sending you updates or marketing emails: consent, which you can withdraw at any time
• Looking after my business and keeping it secure: legitimate interests
I don't sell your information, and I don't use it to make automated decisions about you.
4. Using AI tools
I use AI tools to help with planning, drafting, analysis and administration.
• I don't put client information into AI tools without your agreement.
• I check the data settings of each AI tool I use and, where possible, choose tools and settings that don't use your information to train their models.
• I use tools that have appropriate data protection safeguards.
• I remove or anonymise names and sensitive details wherever I can.
• If I record or transcribe a meeting, I will ask you first.
• If you would prefer I didn't use AI tools on your information, just tell me.
5. Who I share your information with
I only share your information when I need to, with trusted providers that help me run my business, such as:
• Website and hosting: Squarespace
• Booking and scheduling: Microsoft Bookings
• Email and documents: Microsoft 365
• Accounting and payments: Zoho Books, Monzo
• AI tools: Claude, Monday.com, Asana, Fireflies, Canva, Gamma, Runway, Jasper
I may also share information if the law requires it. I never share your information for other people's marketing.
6. Where your information is stored
Some of my providers are based outside the UK, including in the United States. Where this happens, I use providers that have appropriate protections in place, such as approved data transfer arrangements, so your information stays protected.
7. How long I keep your information
• Enquiries and booking messages: up to 12 months, unless we start working together
• Client records and project documents: 6 years after our work ends, as required for tax and accounting
• Marketing preferences: until you ask me to stop
After that, I delete or anonymise it.
8. Cookies
My website uses cookies and similar technologies to make it work and to understand how it is used (for example, which pages are visited). You can accept or decline non-essential cookies using the cookie banner, and you can change your choice at any time in your browser settings.
9. Your rights
Under UK data protection law, you have the right to:
• Be informed about how your information is used
• Access a copy of the information I hold about you
• Correct anything that is wrong or incomplete
• Delete your information, in certain circumstances
• Restrict or object to how I use it
• Move it to another provider (data portability)
• Withdraw consent at any time, where I rely on it
To use any of these rights, email me at info@pebbleandpond.co.uk. I will usually reply within one month.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. I would always appreciate the chance to put things right first.
10. Keeping your information safe
I use sensible measures to protect your information, such as password protection, two-factor authentication and trusted providers. No online system is completely secure, but I take care to keep your information safe.
11. Children
My services are for businesses and adults, and I don't knowingly collect information from children.
12. Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date at the top.
13. Contact
Shari Walters
Pebble & Pond