Privacy Policy


Last updated: 10th October 2025
(Previously updated 7th January 2025)

Donna Dundas (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit https://donnadundas.co.uk (the “Site”).


1. Information We Collect

We may collect information in the following ways:

Information You Voluntarily Provide

When you leave a comment, subscribe to a newsletter, complete a contact form, or make a purchase, we may collect information such as your name, email address, and any details you provide voluntarily.

Automatically Collected Information

We automatically collect certain data about you and the device you use to access this Site. For example, we may log your IP address, operating system type, browser type, referring website, pages viewed, and the dates/times of access.

Cookies and similar technologies may be used to store preferences or recognise your browser. You can disable cookies via your browser settings, but some parts of the Site may not function correctly.


2. How We Use Your Information

We may use the information collected to:

  • Operate and maintain the Site;
  • Send you newsletters or promotional materials (with your consent);
  • Respond to comments and enquiries;
  • Track and measure advertising on the Site;
  • Analyse usage for performance and improvement;
  • Ensure Site security and prevent fraud.

We process personal data only where we have a lawful basis to do so under UK GDPR. These bases may include:

  • Consent (e.g. for email subscriptions or cookies);
  • Performance of a contract (e.g. delivering digital products);
  • Legitimate interests (e.g. analytics, security, and improving services);
  • Legal obligations (e.g. record-keeping or responding to lawful requests).

3. Advertising

This Site uses Raptive to manage all third-party advertising. Raptive may use cookies and similar tracking technologies to deliver personalised advertising content.

CMI Marketing, Inc., d/b/a Raptive (“Raptive”) is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive’s data usage, click here: https://raptive.com/creator-advertising-privacy-statement

Because Raptive hosts the full policy, any updates to their advertising partners or privacy practices will automatically apply.

We may also use other third-party advertising or affiliate programmes (e.g. Google Ads, Amazon Associates, Awin, or social media platforms) that collect and process your information for advertising or analytics.


4. Affiliate Programmes

We participate in affiliate marketing programmes, including Amazon Associates and Awin. These programmes use cookies to track visits and purchases for commission purposes. Clicking on an affiliate link will not cost you anything extra.


5. Cookies

The Site uses cookies to:

  • Store user preferences;
  • Customise content based on user interests;
  • Analyse traffic through tools such as Google Analytics.

A cookie banner allows you to manage consent for analytics and advertising cookies. You can also disable cookies through your browser settings.

A summary of cookie types is provided below:

TypePurposeExampleRetention
EssentialSite security and core functionalityLogin/session cookiesUntil browser close
AnalyticsMeasure traffic and usageGoogle Analytics (_ga)Up to 2 years
AdvertisingPersonalised adsRaptive, Amazon, AwinVaries by provider

6. Your Rights

You have the right to:

  • Access the personal data we hold about you;
  • Request correction or deletion;
  • Withdraw consent for processing;
  • Object to certain processing, including profiling;
  • Request that we transfer your data to another controller (data portability).

To exercise any of these rights, please email admin@donnadundas.co.uk with “Data Request” in the subject line. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).


7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States, where some of our service providers are based (e.g. Raptive, Google, Flodesk). Where this occurs, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure your data remains protected.


8. Profiling and Automated Decision-Making

We and our partners may use automated processing and profiling to deliver personalised content and advertisements. You can opt out of such profiling by managing your cookie preferences or adjusting advertising settings on third-party platforms.


9. Children’s Information

We do not knowingly collect personal data from children under 16. If you believe a child has provided such information, please contact us so we can delete it promptly.


10. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy. For example:

  • Email subscribers: until you unsubscribe or request deletion;
  • Analytics data: typically retained for up to two years;
  • Purchase or invoice records: retained for at least six years for accounting obligations.

11. Do Not Track & Global Privacy Control

We currently do not respond to Do Not Track (DNT) signals. However, we do honour Global Privacy Control (GPC)signals, which allow users to express privacy preferences in supported browsers.


12. Disclosure of Your Information

We may share your information with:

  • Service providers assisting in Site operation, email delivery, or analytics;
  • Advertising partners (e.g. Raptive, Google, Facebook, Amazon);
  • Legal authorities if required to comply with law or protect our rights.

We will never sell your personal data. However, some data sharing for advertising purposes may be considered a “sale” or “sharing” under certain US privacy laws. You may opt out of this at any time by managing cookie preferences. 


13. Links to Other Websites

This Site may contain links to third-party websites. We are not responsible for their privacy policies or practices.


14. Security

We use reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the Internet can be guaranteed to be 100% secure.


15. Terms of Service

Use of this Site is governed by UK law. Nothing in this Policy limits your statutory rights. Any disputes arising from this Policy will be subject to the jurisdiction of the courts of England and Wales.


16. Contact Information

For any questions about this Privacy Policy, please contact:
📧 admin@donnadundas.co.uk