Privacy Policy
Use of private information policy (GDPR)
Our commitment to privacy
Brave Day is an independent storytelling practice and social enterprise committed to respecting and protecting personal information.
This Privacy Policy explains how we collect, use, store and share personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our work often involves people's experiences, stories and personal information. We believe that information should be handled with care, transparency and respect.
We aim to collect only the information we need, use it for clear and appropriate purposes, and take reasonable steps to keep it secure.
How we collect information on this website
Our contact form asks for contact information including your name and email address, so that I can reply to your enquiry.
Occasionally, we might receive your contact information from one of my partners. If we do, we protect it in exactly the same way as if you give it to us directly.
Newsletter subscriptions
When you subscribe to the Brave Day newsletter, we collect your name (if provided) and email address through Squarespace, which we use to manage our mailing list and send newsletters.
You can unsubscribe at any time using the link included in our emails.
We previously used Kit (formerly ConvertKit) to manage newsletter subscriptions. Some subscriber information remains stored in our Kit account, although Squarespace is now our active newsletter platform.
Filming, photography and contributor information
As part of our storytelling and creative production work, Brave Day may collect photographs, video and audio recordings, interviews and other information shared by project contributors.
We normally use written contributor consent or release forms to explain the purpose of the recording, how the material may be used and where it may be published or shared.
We take a careful, respectful approach to recording people's experiences, particularly when working with children, vulnerable individuals or people sharing sensitive personal information.
Recordings and associated personal information are stored securely and shared only with authorised clients, collaborators and service providers where necessary for the project and in accordance with applicable data protection requirements.
Where appropriate, contributors can contact us with questions or concerns about how their personal information is being used. Requests will be considered in accordance with applicable data protection law and any relevant agreements.
What information we hold
When you contact us by email or through our website or subscribe to our newsletter, I collect your name and email address.
If you contact us by phone, we collect your name and phone number.
If you do business with us, we also collect your business name and keep records of the invoices we send you and the payments you make.
How we store and share project information
Brave Day stores project files, photographs, video and audio recordings on local storage devices and, where necessary, through cloud-based services including Dropbox, Google Drive and Adobe Creative Cloud.
We may use secure file-sharing services, including WeTransfer, to transfer project materials to clients and authorised creative collaborators.
Access to project information is limited to people who need it for the purposes of the project. We take reasonable steps to protect personal information and manage access appropriately.
Some of these services may process or store information outside the UK. Where applicable, we take account of the relevant data protection requirements and safeguards.
When you contact Brave Day by email or through our website, your information is stored securely using our email and website services.
Newsletter subscriber information is managed through Squarespace. Some historical subscriber information is also retained in our previous newsletter platform, Kit (formerly ConvertKit).
What we use your information for
We will use your information to correspond with you on prospective and active projects as well as to send you invoices, statements, or reminders. If you’ve subscribed to my mailing list we’ll contact you about my training workshops, blogs and new projects.
Who has access to information about you
When we store information in our own systems, only the people who need it have access. We have access to everything you’ve provided, but if we work with a wider team of freelancers on a project, individual team members can access only what they need to do their job.
Your data protection rights
Under UK data protection law, you have rights relating to how your personal information is used. Depending on the circumstances, these may include the right to:
Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of your personal information.
Ask us to restrict how your information is used.
Object to certain uses of your information.
Request a copy of information you have provided in a portable format.
Where we rely on your consent to process personal information, you can withdraw that consent at any time.
These rights are subject to certain legal conditions and exceptions.
Questions and complaints
If you have any questions or concerns about how Brave Day handles your personal information, please contact us at kirstie@braveday.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Website: https://ico.org.uk
We welcome the opportunity to address any concerns directly.
Changes to the policy
If we change the contents of this policy, those changes will become effective the moment we publish them on our website.
Last updated: 10th October 2026