Overview
This Privacy Policy explains how Sisi Ncube collects, uses, stores and protects personal information when you visit this website, review portfolio content, make an enquiry, or communicate about workflow systems, automation, AI agents, Notion setups, product UX or related services.
This website is a portfolio and services website. It is intended to collect only the personal information reasonably needed to operate the website, respond to enquiries, manage potential or existing client relationships, protect the website, and meet legal or administrative obligations.
This policy is written for visitors in the United Kingdom and internationally. Depending on where you live, you may have additional privacy rights under local law.
Who is responsible for your information?
For the purposes of this Privacy Policy, Sisi Ncube is responsible for the personal information processed through this website, unless a separate client agreement or service provider arrangement says otherwise.
For privacy questions or rights requests, contact: sisi@theugcplaybook.com.
What this policy covers
This policy covers personal information handled through this website and related service enquiries. It does not cover third-party websites, tools, platforms, apps, analytics providers, social media platforms or external links that may appear on this website.
If you become a client, additional terms, proposals, statements of work, platform policies or data processing arrangements may apply depending on the nature of the project and the tools involved.
Information I may collect
The information collected depends on how you use the website and whether you contact me. It may include:
- Identity and contact details, such as your name, email address, business name, job title, website, social profile or other contact details you choose to provide.
- Enquiry and project details, such as information about your workflow, business, team, tools, goals, budget, timeline, pain points, service needs or any documents, links or notes you send voluntarily.
- Communication records, including emails, enquiry notes, consultation messages, proposals, follow-ups and project-related correspondence.
- Technical and usage data, such as IP address, browser type, device type, operating system, pages visited, referral source, approximate location, timestamps and website performance data.
- Marketing and preference data, if you choose to opt in to updates, respond to content, or interact with any future newsletter, form or campaign.
- Administrative and transaction data, if paid services are agreed, such as invoice details, payment status, billing information, project records and business correspondence.
I do not intentionally collect special category or sensitive personal information through this website. Please avoid sending sensitive personal information unless it is necessary for a specific service discussion and you are comfortable sharing it.
How information is collected
Personal information may be collected:
- Directly from you, when you email, complete a form, book a call, send project details or communicate about services.
- Automatically through the website, through hosting logs, security tools, cookies, analytics or similar technologies.
- From third-party platforms, if you contact me through LinkedIn, Notion, email, scheduling tools, payment platforms, collaboration tools or other services.
- From public sources, where relevant to a legitimate business enquiry, such as your public website, business profile or public social media page.
How I use personal information
I may use personal information for the following purposes:
| Purpose | Examples | Typical lawful basis where UK/EU law applies |
|---|---|---|
| Responding to enquiries | Replying to emails, understanding your workflow needs, arranging calls and assessing service fit. | Legitimate interests or steps before a contract. |
| Providing services | Preparing scopes, proposals, invoices, project plans, handovers and service communications. | Contract or steps before a contract. |
| Website operation and security | Hosting, troubleshooting, preventing spam, protecting the website and monitoring performance. | Legitimate interests or legal obligation where applicable. |
| Analytics and improvement | Understanding page performance, visitor behaviour and what content is useful. | Consent where required; otherwise legitimate interests where permitted. |
| Business administration | Record keeping, accounting, tax, legal compliance, dispute prevention and internal organisation. | Legal obligation, contract or legitimate interests. |
| Relevant follow-up | Following up on an enquiry, proposal or existing client relationship. | Legitimate interests, consent where required, or contract. |
Cookies, analytics and similar technologies
This website may use essential cookies or similar technologies that are needed for the website to function, load securely, remember technical preferences, prevent spam or support basic performance.
The website may also use analytics or performance tools to understand how visitors use the site. If non-essential analytics, marketing cookies, advertising pixels, retargeting tags or similar technologies are added, the website should use an appropriate cookie notice or consent mechanism where required by law.
You can control cookies through your browser settings. Blocking some cookies may affect how the website works.
Implementation note: if tools such as Google Analytics, Meta Pixel, LinkedIn Insight Tag, Hotjar, ad tracking or other non-essential tracking are added later, this policy and the live cookie consent setup should be updated before those tools go live.
When information may be shared
I do not sell personal information. I may share information only where reasonably necessary with:
- Website hosting, security, email, scheduling, analytics, form, CRM, cloud storage, invoicing, payment, project management or admin service providers.
- Professional advisers such as accountants, legal advisers, insurance providers, technical support or business consultants.
- Third-party tools or platforms used for a project, where you have asked to use those tools or they are required to deliver agreed services.
- Authorities, regulators, courts, law enforcement or other parties where required by law or where necessary to protect legal rights, safety, security or business interests.
- Successors or relevant parties if the website, business, assets or services are transferred, merged, reorganised or sold.
International visitors and transfers
This website may be accessed worldwide. If you contact me from outside the United Kingdom, your information may be processed in the UK or by service providers in other countries.
Some hosting, analytics, email, cloud or business service providers may process information outside your country of residence. Where required by applicable data protection law, appropriate safeguards should be used, such as standard contractual clauses, adequacy decisions or other recognised transfer mechanisms.
How long information is kept
Personal information is kept only for as long as reasonably necessary for the purpose it was collected, including responding to enquiries, managing potential or active client relationships, maintaining records, resolving disputes and meeting legal, tax or accounting obligations.
- General enquiries may be kept for a reasonable period in case of follow-up, then deleted or archived when no longer needed.
- Client, proposal, project, invoice and payment records may be retained for longer where needed for business, legal, tax, accounting or dispute purposes.
- Website logs and analytics information may be retained by hosting or analytics providers according to their own settings and policies.
How information is protected
I use reasonable organisational and technical measures to protect personal information from unauthorised access, loss, misuse or disclosure. However, no website, email system or online transmission is completely secure. You should avoid sending highly sensitive information through ordinary email unless necessary.
Your privacy rights
Depending on where you live and which laws apply, you may have rights to:
- Access the personal information held about you.
- Ask for inaccurate or incomplete information to be corrected.
- Ask for personal information to be deleted in certain circumstances.
- Object to or restrict certain types of processing.
- Withdraw consent where processing is based on consent.
- Ask for a copy of your information in a portable format where applicable.
- Opt out of certain marketing communications.
- Complain to a privacy regulator or supervisory authority where applicable.
To make a privacy request, contact sisi@theugcplaybook.com. I may need to verify your identity before responding. Some requests may be limited by legal, contractual, security or record-keeping obligations.
Additional privacy rights for certain regions
UK, EEA and Switzerland
If UK GDPR, EU GDPR or similar European data protection laws apply, you may have rights of access, rectification, erasure, restriction, objection, portability and consent withdrawal. You may also have the right to complain to your local supervisory authority. In the UK, this is the Information Commissioner’s Office.
United States state privacy rights
If you are in California, Virginia, Colorado, Connecticut, Utah or another US state with applicable privacy rights, you may have rights to know, access, correct, delete or obtain a copy of personal information, and to opt out of certain uses such as sale, sharing, targeted advertising or certain profiling where those laws apply.
I do not sell personal information. I also do not knowingly share personal information for cross-context behavioural advertising through this website unless a future analytics or advertising setup is clearly disclosed and the required opt-out or consent mechanism is provided.
California notice
For California residents, the categories of personal information that may be collected are described in the “Information I may collect” section above. The sources, purposes, retention, sharing and rights are described throughout this policy. I do not knowingly collect, use or disclose sensitive personal information for purposes that require a right to limit under California law.
You will not be discriminated against for exercising privacy rights that apply to you.
Marketing communication
This website is primarily for portfolio and service enquiries. If I offer a newsletter, lead magnet, updates list or marketing emails in the future, you should only receive those communications where you have opted in or where it is otherwise lawful to contact you. You can unsubscribe or opt out of marketing emails at any time.
Children’s privacy
This website is not directed to children and is intended for business, portfolio and professional service audiences. I do not knowingly collect personal information from children under 13, or from children under the age required by applicable local law. If you believe a child has provided personal information through this website, contact me so it can be reviewed and deleted where appropriate.
Automated decision-making
This website does not use personal information to make decisions that produce legal or similarly significant effects about visitors through solely automated processing.
External links and third-party platforms
This website may link to third-party websites, tools, social media platforms, case studies, products or resources. I am not responsible for their privacy practices, security, availability or content. You should review their privacy policies before sharing information with them.
Updates to this policy
This Privacy Policy may be updated from time to time to reflect changes to the website, services, tools, legal requirements or business operations. The latest version will be posted on this page with an updated date.
Contact
For privacy questions, rights requests or concerns about how your information is handled, contact: sisi@theugcplaybook.com.