Privacy Policy

Who we are

girlmonday2friday is a sole trader business providing professional support services for probate, Court of Protection, and people in care. Our registered address is:

We are registered with the Information Commissioner's Office (ICO). For any privacy-related enquiries, contact us at [email protected].

What personal data we collect and why

We collect personal data only where there is a lawful basis for doing so under UK GDPR:

• Contact enquiries — when you submit the contact form or email us, we collect your name, email address, and any details you provide. Lawful basis: legitimate interests (responding to your enquiry).
• Service delivery — if you engage us for professional services, we may collect additional information necessary to carry out that work (e.g. details of a property, estate, or care arrangement). Lawful basis: performance of a contract.
• Legal obligations — we may retain certain records as required by law. Lawful basis: compliance with a legal obligation.

We do not collect sensitive personal data unless strictly necessary for service delivery, and we do not use your personal data for automated decision-making or profiling.

How long we keep your data

• Contact enquiries: up to 12 months, unless we enter a service relationship.
• Client records: 7 years from the end of the service engagement, in line with HMRC guidance.
• We will securely delete or anonymise data that is no longer needed.

Cookies and website data

This website uses only strictly necessary cookies. These are set by Cloudflare (our security provider) for bot detection and fraud prevention purposes, and by Cloudflare Turnstile on the contact form. No tracking or advertising cookies are used.

Because only strictly necessary cookies are used, no consent is required — however you can clear cookies at any time via your browser settings.

Who we share your data with

We do not sell, rent, or lease your personal data. We may share data with:

• Cloudflare, Inc. — our website is served via Cloudflare's network, which processes request data (IP address, browser information) for security, DDoS protection, and bot detection. Cloudflare Turnstile is used on the contact form to verify that submissions are made by a real person; this involves Cloudflare processing limited browser and interaction data. Cloudflare acts as a data processor on our behalf and is certified under the UK–US Data Bridge.
• Amazon Web Services (AWS) — when you submit the contact form, your name, email address, and message are transmitted via Amazon Simple Email Service (SES) to our internal inbox. AWS acts solely as a mail relay; your data is in transit only and is not stored by AWS beyond the time required to deliver the message. AWS is certified under the UK–US Data Bridge.
• Professional third parties — where required to deliver our services (e.g. solicitors, estate agents, care homes) — only with your knowledge.
• Regulatory or law enforcement bodies — where required by law.

All third-party processors we use are bound by appropriate data processing agreements and are required to handle your data in accordance with UK GDPR.

Your rights under UK GDPR

You have the following rights, which you can exercise at any time by contacting us:

• Right of access — request a copy of the personal data we hold about you (free of charge).
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data where there is no longer a lawful reason to hold it.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, please write to us at the address above or email [email protected]. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Links to other websites

This website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of this website after any changes constitutes acceptance of the updated policy.