Privacy Policy

Jenni Ventura Consultancy Website: https://www.jenniventuraconsultancy.com Last updated: 18 May 2026

This privacy policy explains how Jenni Ventura Consultancy ("I", "me", "my") collects, uses and protects personal information when you visit my website, get in touch, book an appointment or purchase a service. I am committed to handling your information lawfully, fairly and transparently in line with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018.

For the purposes of UK and EU data protection law, I am the data controller of any personal information you provide through this website.

Who I am and how to contact me

Jenni Ventura Consultancy is a sole-trader consultancy based in Bristol, United Kingdom, providing access and inclusion consultancy, training and inclusive programme design to arts organisations across the UK.

If you have any questions about this policy or about how your information is used, please contact me:

• Email: hello@jenniventura.co.uk
• Website: https://www.jenniventuraconsultancy.com/contact

What information I collect

I only collect information that I genuinely need to respond to you, deliver services and run my website. The information I collect falls into the following categories.

Information you give me directly. When you fill in the contact form, book a free consultation or appointment, or purchase a service through the website, I collect details such as your name, email address, organisation, phone number (if you provide one), the content of any messages you send me, and any information about your enquiry or project that you choose to share.

Booking information. When you book an appointment, Acuity Scheduling (the booking tool used on this website) collects the details needed to schedule and confirm your appointment, including your name, email address, time zone and any notes you add to the booking.

Payment information. If you purchase a service through the website, payment is processed by Stripe. I do not see or store your full card number, CVV or bank details. Stripe sends me confirmation that payment has been taken, together with the information needed to issue a receipt and deliver the service (such as your name, email address and the item purchased).

Information collected automatically. When you visit the website, certain information is collected automatically by Squarespace (which hosts the website) and by Squarespace Analytics. This includes your IP address (often in a truncated or anonymised form), device and browser type, the pages you view, the date and time of your visit, and how you arrived at the site. This information is used in aggregated form to understand how the site is used and to keep it secure.

Cookies and similar technologies. The website uses cookies and similar technologies. See the "Cookies" section below for details.

I do not knowingly collect special category data (such as health, disability or other sensitive information) through the website. If you choose to share this kind of information in a message or booking note in the context of an accessibility or inclusion enquiry, I will treat it with extra care and only use it for the purpose you shared it for.

Why I use your information and the lawful basis for doing so

Under UK and EU GDPR, I must have a lawful basis for processing your personal information. The bases I rely on are:

To respond to enquiries and provide a free consultation. When you contact me through the website or book a free consultation, I use your information to reply to you, prepare for the conversation and follow up where appropriate. The lawful basis is my legitimate interest in responding to enquiries about my services, and where you have asked me to do something specific (such as send you information), taking steps at your request prior to entering into a contract.

To deliver consultancy, training and other services. If we agree to work together, I use your information to deliver the agreed services, manage the project, communicate with you about it and keep proper business records. The lawful basis is the performance of a contract with you or your organisation.

To take and record payments. Where you purchase a service, I use the information needed to process payment, issue receipts or invoices and keep accounting records. The lawful basis is performance of a contract and compliance with my legal obligations (for example, tax and accounting law).

To run and improve the website. I use website analytics and similar information to understand how visitors use the site, fix problems and improve content. The lawful basis is my legitimate interest in running a functional, secure and useful website, balanced against your privacy. Where cookies or similar technologies are not strictly necessary, they are only used with your consent.

To comply with legal obligations. I may need to use or retain your information to comply with applicable laws, regulations or legitimate requests from public authorities.

I do not use your information for automated decision-making or profiling.

Sharing your information

I do not sell your personal information, and I do not share it for advertising purposes. I share information only with trusted service providers that help me run the website and my consultancy, and only to the extent they need it to perform their services. These include:

• Squarespace (Squarespace, Inc.), which hosts the website and the contact form and provides Squarespace Analytics. See Squarespace's privacy policy.
• Acuity Scheduling (a Squarespace product), which manages bookings and appointments. See Acuity's privacy policy.
• Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.), which processes payments for paid services. See Stripe's privacy policy.
• email, document and storage providers used to communicate with you and keep ordinary business records
• professional advisers such as my accountant, where reasonably necessary

Each of these providers acts as a processor on my behalf or as an independent controller for their own limited purposes, and is required to handle your information securely and in line with applicable data protection law. I may also disclose information where I am required to do so by law or to protect my legal rights.

International transfers

Some of the providers I use are based outside the UK or European Economic Area, including in the United States. In particular, Squarespace (which provides the website, hosting, Acuity Scheduling and Squarespace Analytics) is based in the United States, and Stripe processes some data in the United States. Where personal information is transferred outside the UK or EEA, I rely on appropriate safeguards recognised under UK and EU GDPR, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries covered by an adequacy decision (for example, the UK Extension to the EU-US Data Privacy Framework, where applicable). You can ask me for more information about the safeguards in place by contacting me using the details above.

How long I keep your information

I keep your information only for as long as I need it for the purposes set out in this policy. In practice:

• Enquiry messages and contact form submissions are usually kept for up to two years, so I can pick up conversations that resume and understand the history of an enquiry.
• Booking and appointment records are kept for as long as needed to deliver the appointment and respond to any follow-up, and then archived or deleted.
• Records relating to paid work, invoices and tax are kept for at least six years from the end of the relevant financial year, in line with UK tax and accounting requirements.
• Website analytics data is kept for the retention period set in the analytics tool, typically no longer than 26 months.

When information is no longer needed, it is securely deleted or anonymised.

Cookies and similar technologies

The website is built on Squarespace, which sets cookies and uses similar technologies to make the site work, remember your choices, understand how the site is used and keep it secure. Cookies fall into the following broad categories:

• Strictly necessary cookies that are needed for the website and booking pages to function. These do not require consent.
• Functional cookies that remember choices you make, such as language or display preferences.
• Analytics and performance cookies that help me understand how visitors use the site, in an aggregated and largely anonymous way.

Where cookies are not strictly necessary, they are only set with your consent through the cookie banner shown on the website. You can change or withdraw your consent at any time by clearing cookies in your browser and revisiting the site, or by adjusting your browser settings to block or delete cookies. Please note that blocking some cookies may affect how parts of the website work, particularly the booking page.

Your rights

Under UK and EU GDPR you have a number of rights in relation to your personal information, including:

• the right to be informed about how your information is used (this policy)
• the right of access to a copy of the information I hold about you
• the right to rectification of inaccurate or incomplete information
• the right to erasure of your information in certain circumstances
• the right to restrict processing in certain circumstances
• the right to data portability, where the processing is based on consent or contract and carried out by automated means
• the right to object to processing based on legitimate interests
• the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact me at hello@jenniventura.co.uk. I will respond within the timescales required by law (usually one month) and may ask for information to confirm your identity before acting on a request.

If you are not happy with how I have handled your information, I would encourage you to contact me first so I can try to put things right. You also have the right to complain to a data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO), https://ico.org.uk. If you are based in the European Economic Area, you can complain to the supervisory authority in your country of residence or place of work.

How I keep your information secure

I take reasonable technical and organisational measures to protect your information against unauthorised access, loss or misuse. These include using reputable service providers, keeping software and devices up to date, using strong passwords and multi-factor authentication where available, and limiting access to information to those who need it. No method of transmission over the internet or method of electronic storage is completely secure, so I cannot guarantee absolute security, but I take the issue seriously.

Children

This website and the services offered through it are aimed at adults working in or with arts organisations. I do not knowingly collect personal information from children. If you believe a child has provided personal information through the site, please contact me and I will delete it.

Links to other websites

The website may contain links to third-party websites. I am not responsible for the privacy practices or content of those websites. I encourage you to read the privacy policies of any website you visit through a link from this site.

Changes to this policy

I may update this privacy policy from time to time to reflect changes in how I work, the tools I use or the law. The "Last updated" date at the top of the policy shows when it was most recently revised. Significant changes will be highlighted on the website. Continuing to use the website after a change has been published means you accept the updated policy.

Contact

If you have any questions about this policy or about how your information is used, please contact:

Jenni Ventura Jenni Ventura Consultancy Bristol, United Kingdom Email: hello@jenniventura.co.uk