1. Who We Are

Phoenix Athena Ltd ("we", "us", "our") is a limited company registered in England and Wales, providing website maintenance, social media management, copywriting, blog writing, Google Ads and analytics services.

Email: natasha@phoenixathena.co.uk
ICO Registration No: ZC162699

We are the data controller for the personal data we collect and process in connection with our business activities.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact details: name, email address, phone number, business address

  • Login credentials and account access details provided to carry out agreed work (e.g. WordPress, Google, Facebook, social media accounts)

  • Business information shared during the course of an engagement

  • Communication records: emails, messages, and written approvals

  • Invoice and payment information: bank details and transaction records

  • Website visitor data if we manage analytics on your behalf (processed under your privacy policy as data processor)

3. How We Collect Your Data

We collect personal data in the following ways:

  • Directly from you when you contact us, sign a letter of engagement, or instruct us to carry out work

  • Through the platforms and accounts you grant us access to

  • From publicly available sources where relevant to the services we provide

4. Why We Use Your Data (Legal Basis)

We process your personal data on the following legal bases under UK GDPR:

  • Contract: to perform the services agreed in our letter of engagement

  • Legitimate interests: to communicate with you, manage our business relationship, and keep records of work carried out

  • Legal obligation: to retain financial records as required by HMRC and Companies House

5. How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • Client records and correspondence: up to 6 years after the end of an engagement

  • Financial and invoice records: 6 years (required by HMRC)

  • Login credentials: deleted promptly once access is no longer required

You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

6. Who We Share Your Data With

We do not sell or share your personal data with third parties for marketing purposes. We may share data only in the following limited circumstances:

  • Our accountant, for the purpose of managing our business finances

  • Cloud storage providers (e.g. Google Drive) used to store work files securely

  • Where required by law or a regulatory authority

7. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access: to request a copy of the data we hold about you

  • Right to rectification: to request correction of inaccurate data

  • Right to erasure: to request deletion of your data (subject to legal obligations)

  • Right to restriction: to request we limit how we use your data

  • Right to object: to object to processing based on legitimate interests

  • Right to data portability: to receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at natasha@phoenixathena.co.uk. We will respond within one month.

8. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Helpline: 0303 123 1113

9. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available on our website and will show the date it was last updated.

PRIVACY POLICY
Phoenix Athena Ltd

Last updated: 8 July 2026