Privacy policy

1. Who is responsible for your information?

Brief to Invoice is operated by Len Johnson. I am the data controller responsible for the personal information described in this policy, and I am registered with the UK Information Commissioner’s Office (ICO), registration number ZC169736.

You can contact me for any privacy-related question, including requests to access, correct, or delete data we hold about you.

2. Information I collect and why

Newsletter subscriptions and book delivery

When you ask to receive the book or join the Brief to Invoice newsletter, I may collect your email address, name, signup date, consent record and information about how you interact with emails, such as opens and link clicks.

I use this information to send the material you requested, deliver the newsletter, operate the subscriber list and understand whether emails are useful. The lawful basis for sending newsletter emails is your consent. You can withdraw that consent at any time by using the unsubscribe link in an email.

Messages and enquiries

If you contact me, I may collect your name, email address and the information you include in your message. I use it to reply, keep an appropriate record of the conversation and take steps you have requested. The lawful basis is normally my legitimate interest in responding to enquiries and operating Brief to Invoice. Where your message concerns a possible agreement, processing may also be necessary to take steps at your request before entering into a contract.

Website operation and security

When you visit the website, the hosting and security systems may record technical information including your IP address, browser and device type, requested pages, referring page, and the date and time of each request. This information is used to deliver the site, diagnose faults, prevent abuse and protect it from attacks. The lawful basis is my legitimate interest in running a reliable and secure website.

Legal and administrative records

I may retain or disclose information where reasonably necessary to meet a legal obligation, establish or defend legal rights, prevent fraud or respond to a lawful request from a public authority. The lawful basis will be a legal obligation or a relevant legitimate interest, depending on the circumstances.

3. Cookies and similar technologies

The website may use cookies or similar local storage where necessary for security, forms, preferences and core WordPress functionality. Strictly necessary technologies are used because the site cannot provide the relevant function securely without them.

Brief to Invoice does not currently use advertising cookies or behavioural advertising. If optional analytics, advertising or comparable tracking is introduced, you will be asked for consent before those technologies are set and this policy will be updated.

4. Embedded content and external links

Articles may link to or embed content from other websites. Embedded content can behave as though you visited the provider directly. That provider may collect information, use cookies or record your interaction according to its own privacy policy. Brief to Invoice is not responsible for the privacy practices of external websites.

5. Who receives your information?

I use a limited number of service providers to operate Brief to Invoice. They may process personal information only to provide their services or meet their own legal obligations.

• 20i provides website hosting and related infrastructure.
• Kit.com stores subscriber details, manages consent records and sends newsletter emails.
• Email, form, backup and website-security providers may process limited information where required to provide those functions.
• Professional advisers, courts, regulators or public authorities may receive information where disclosure is reasonably necessary or legally required.

I do not sell or rent your personal information.

6. International transfers

Some service providers or their approved subprocessors may process information outside the United Kingdom. Where this happens, I rely on a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and require the provider to protect the information appropriately.

7. How long information is kept

• Newsletter information: kept while you remain subscribed. After you unsubscribe, a minimal suppression record may be retained so that you are not added back accidentally and to demonstrate that your request was honoured.
• Consent records: retained for as long as reasonably necessary to demonstrate compliance with data-protection and direct-marketing requirements.
• Enquiries: normally kept for up to 24 months after the last meaningful contact, unless the information becomes part of a contract or needs to be retained for a legal reason.
• Technical logs and backups: retained according to the host’s operational, security and backup schedules, then deleted or anonymised.

Information may be kept longer where required by law or where reasonably necessary to establish, exercise or defend legal claims.

8. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for a copy of your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be deleted;
• ask for processing to be restricted;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent at any time.

These rights are not absolute and an exemption may apply. To make a request, email us. I may need to ask for information that confirms your identity before acting on a request.

9. Automated decisions

I do not use your personal information to make solely automated decisions that have legal or similarly significant effects on you.

10. Security

I use reasonable technical and organisational measures intended to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. No internet service can guarantee absolute security, but access is limited to people and providers that need the information for the purposes described above.

11. Children

Brief to Invoice is written for people developing professional and commercial skills. It is not directed at children under 13, and I do not knowingly collect their personal information.

12. Changes to this policy

I may update this policy when the website, service providers or legal requirements change. The date at the top of the page shows when it was last revised. Material changes will be explained on this page and, where appropriate, communicated directly.

13. Questions and complaints

Please contact me first if you have a question or concern about how your information has been handled:

Len Johnson
Brief to Invoice

You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint/ or call +44 303 123 1113.