Privacy Policy
Last updated: October 2026
WovenAware respects your privacy and aims to handle personal information carefully, transparently and responsibly.
This Privacy Policy explains what personal information may be collected through www.wovenaware.com, how it is used, who may process it, how long it may be retained and your rights under UK data protection law.
Who Is Responsible for Your Information
WovenAware is operated by Stephanie Todd, trading as WovenAware. Stephanie Todd is responsible for the personal information collected and used through WovenAware.
For privacy questions or requests:
Email: hello@wovenaware.com
Business correspondence address:
WovenAware
Lytchett House
13 Freeland Park
Wareham Road
Poole
Dorset
BH16 6FA
United Kingdom
This is a postal correspondence address and is not open for in-person visits.
What Information May Be Collected
WovenAware may collect information you choose to provide, including:
Your name and email address
Your organisation, if provided
The nature and content of your enquiry
Your preferred response method
Communication preferences or access arrangements you choose to share
Other information included in your message
Information relating to previous toolkit purchases, orders or transactions
The website may also collect technical information through Squarespace, security features, cookies and analytics. This can include information about devices, browsers and how the website is used.
When WovenAware's former digital toolkit store was operating, billing, order and transaction information was processed to complete purchases and manage customer records. The toolkit store is no longer active, but some historical records may still be retained where necessary.
Information about access needs
You are welcome to explain what would make communication accessible for you. You do not need to share a diagnosis or unnecessary medical information.
Information about disability or health can require additional protection under data protection law. Any such information should only be used where necessary for the purpose for which it was provided and where the relevant legal requirements are met.
How Your Information Is Used
Personal information may be used to:
Respond to questions, feedback and enquiries
Provide requested information
Understand and arrange appropriate communication access
Discuss potential writing, speaking or collaborative opportunities
Manage agreed work and related correspondence
Maintain records of previous purchases, downloads, enquiries and refunds
Operate, maintain and protect the website
Understand website use and identify possible improvements
Meet applicable legal, accounting and tax obligations
WovenAware does not sell personal information or use enquiry details for unrelated marketing purposes.
Legal Basis for Processing
Different lawful bases may apply depending on why personal information is used.
Legitimate interests
WovenAware may rely on legitimate interests to respond to ordinary enquiries, manage relevant correspondence, maintain website security and improve its services where appropriate.
These interests must be balanced against the rights and interests of the people whose information is processed.
Contract
Where someone has previously purchased a resource, or requests or agrees to commissioned work, personal information may be processed to take steps towards a contract or fulfil contractual obligations.
This may include previous order records, delivery information and project correspondence.
Consent
Consent may be used where it is specifically requested and obtained, including for certain optional cookies or other activities that require consent.
Where processing relies on consent, it can be withdrawn.
Legal Obligation
Some information may need to be processed or retained to comply with legal, accounting, tax or other applicable requirements.
The appropriate lawful basis depends on the purpose of the processing. Additional conditions apply where special-category personal information is processed.
Website Analytics and Cookies
WovenAware uses Squarespace and may use cookies or similar technologies to support website functionality, security, preferences and analytics.
Some technologies are necessary for the website to operate. Other technologies may require consent or qualify for a specific exception under applicable UK rules.
Visitors can use the website's Cookie Preferences control to manage the choices made available for these technologies.
For further information, please read the Cookie Policy.
Third-Party Services
WovenAware uses external providers to support the website and related activities.
Squarespace
WovenAware is hosted through Squarespace, which may process information relating to hosting, contact forms, website security, analytics and other website functions.
Google reCAPTCHA
The website's contact form uses Google reCAPTCHA to help protect against spam and automated submissions. This may involve the processing of technical information for security purposes.
Squarespace Payments – Previous Purchases
WovenAware previously used Squarespace Payments to process purchases through its digital toolkit store.
WovenAware previously used Squarespace Payments through its digital toolkit store.
Historical transaction information may continue to be processed or retained where necessary for accounting, customer enquiries, refunds, legal obligations or related purposes.
Squarespace Payments uses payment-processing and fraud-prevention providers, including Stripe and Sift.
WovenAware does not directly collect or store complete payment-card details.
Email and Other Service Providers
Services used to receive and manage correspondence may process information necessary to deliver messages and support communications.
External Websites and Platforms
WovenAware may link to external websites and platforms, including LinkedIn.
Those organisations are responsible for their own privacy practices. WovenAware does not control how external websites handle personal information.
International Processing
Some service providers may process or store personal information outside the United Kingdom, including in the United States.
Where international transfers are subject to UK data protection requirements, appropriate legal safeguards must apply.
You can contact WovenAware for further information about relevant processing arrangements.
Data Retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal requirements.
Contact-form enquiries and related correspondence may be retained while an enquiry is being handled and for any necessary follow-up.
Information relating to agreed work may be retained for contractual, accounting or legal purposes.
Historical purchase and financial records may be retained for longer where required by law or needed to address outstanding customer matters.
Information that is no longer required should be securely deleted or otherwise disposed of as appropriate.
Data Security
WovenAware aims to use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access.
Some information is processed or stored through external services used to operate WovenAware.
No method of online storage or transmission can be guaranteed completely secure.
Children’s Data
WovenAware is not designed to collect personal information directly from children.
If an enquiry includes information about a child, only details necessary for the enquiry should be shared.
If you believe personal information relating to a child has been provided inappropriately, please contact WovenAware so the matter can be reviewed.
Your Rights
Depending on the circumstances, UK data protection law may give you the right to:
Access your personal information
Correct inaccurate or incomplete information
Request deletion in certain circumstances
Restrict certain processing
Receive certain information in a portable format
Object to certain processing
Withdraw consent where consent is the lawful basis
Where WovenAware relies on legitimate interests, you may have the right to object to that processing.
Not every right applies in every situation.
To make a privacy request, email hello@wovenaware.com.
Automated Decision-Making
WovenAware does not use personal information to make decisions based solely on automated processing or profiling that produce legal or similarly significant effects.
Complaints
If you have concerns about how WovenAware handles your personal information, you can contact me at hello@wovenaware.com, use the website's contact form or write to the business correspondence address provided in this policy.
Data protection complaints will be acknowledged within 30 days of receipt. I will investigate the matter appropriately and without undue delay, keep you informed of relevant progress and explain the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO).
Changes to This Policy
This Privacy Policy may be updated when WovenAware's website, activities, service providers or data-processing practices change.
Updates will be published on this page with a revised date.
Contact
For questions about this Privacy Policy, your personal information or your data protection rights:
Email: hello@wovenaware.com
Postal correspondence can be sent to the business correspondence address provided at the beginning of this policy.