This privacy policy explains how I (Kathryn Farmer, trading as Kits @twenty-six) collect and process your personal data as the data controller for Kits @twenty-six. This notice was created and last updated on 6 March 2020.


  • The personal data I collect about users of my service includes: full name, contact details (location, email address, telephone number, social media handles), and a record of our correspondence. Please note that if you employ me to create a create a CV, or other documents which may include more information (such as work history and details of your education), I will also necessarily need to store these in order to fulfil your order. If I have provided you with a quote, completed work, or discussed a collaboration with you, I may also hold any information you have shared with me with reference to that (background info, details of payment, feedback).
  • My website collects some technical and usage data (e.g. IP address, language, and time zone settings, as well as how you navigate the site).


  • The majority of data I collect will be provided directly by you, either by email, via the contact form on my website, or on social media.
  • My website uses cookies to collect technical data about your equipment, browsing behaviour, and usage patterns. It is built and hosted through – reading their privacy and cookie policies is also recommended.


  • Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit my website, I may collect information from you automatically through these cookies.
  • My website uses cookies to track how you use the site. This helps me to build a picture of how people are using my site, which in turn allows me to improve my website, and to understand what services and information are of most interest to the people who visit.


  • I store client data on my computer (in Word documents and Excel spreadsheets, which are also backed up on Microsoft OneDrive); in my emails ( and social media messages; on Mailchimp, to manage my online marketing; as well as on paper.
  • Your data is also stored in cookies processed by



  • I use the data I collect to fulfil your requests for my services. This may involve me contacting you to discuss your needs a client, providing a quote, or completing work for you. I may also contact you further to that, to ask you to review the service you received; or else to enquire as to whether you require any additional assistance.
  • If you give your consent, I will also use your details to send you marketing materials such as newsletters and flyers.
  • The data that my website collects as cookies allows me to see how the site is used so that I can improve that site and my services. The cookies may also record information such as your language preference and the browser you use, as these factors do have an impact on your user experience.
  • Otherwise, I will only use your data when necessary for my legitimate interests, and your interests and fundamental rights do not override those interests; or when I need to comply with a legal or regulatory obligation.
  • B. I only rely on your consent for processing your personal data in relation to sending you marketing materials via email.
  • If you have purchased a service from me, I am required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of six years, after which time it will be destroyed. If you consent to me holding personal data about you for marketing purposes, this will be kept until you notify me that you no longer wish to receive this information.


  • I will not sell your data to third parties, but (on occasion) it may be necessary for me to share your personal data with the applications and tools that I use to run my business—including social media sites—to ensure that I can effectively complete your requests for service.
  • It may also be necessary for me to share your personal details with other professionals (such as illustrators, designers, or publishers, if you require their services); or attorneys, HM Revenue & Customs, or other government bodies in accordance with the law.
  • I will always seek consent before sharing your personal data—unless I am legally prohibited from doing so. In such a case, I will only release the information that has been requested if I have strong reason to belief that the law requires me to do so.


My website and social media channels may contain links to other sites that I think may be of interest to users—but please be aware that, once you have followed these links and left my site, these external websites are not governed by this privacy statement. As such, I cannot be held responsible for the protection and privacy of any information that you provide whilst using such sites.

I advise all users to exercise caution, and to check the privacy statement applicable to the each of the sites in question.


To ensure that you are fully aware of all your data protection rights, please know that every user of my services is entitled to the following:

  • The Right to Access – You have the right to submit a request to Kits @twenty-six for copies of your personal data. Please note, there may be a small fee for this service.
  • The Right to Rectification – You have the right to request that I correct any information that you believe is in accurate. You also have the right to request that I complete information that you believe is incorrect.
  • The Right to Erasure – You have the right to request that I erase your personal data, under certain conditions.
  • The Right to Restrict Processing – You have the right to request that I restrict the processing of your personal data, under certain conditions.
  • The Right to Object to Processing – You have the right to object to my processing of your personal data, under certain conditions.
  • The Right to Data Portability – You have the right to request that I transfer the data that I have collected to another organisation, or directly to you, under certain conditions.

If you make a request, I have one month to respond to you. If you would like to exercise any of these rights, please contact me at Should you feel that I have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office at


By accessing my website (, you consent to the collection and use of your data as is outlined in this privacy policy. It is important that you know I may change my privacy statement from time to time. Every time I do so, I will update this page, so that you will be aware of my most recent policy.