Home / Privacy

Privacy

How I handle personal data, in plain English.

Last updated 27 September 2026. When anything that matters changes, this date changes.

Got an email from me? What I hold and where it came from, or stop my emails now.

The short version

What you don't have to do:

  • Give a reason to stop my emails. If I emailed you first, one reply saying “no thanks” stops them for good, from every address I send from, within 2 UK working days.
  • Accept cookies. This site sets no cookies and uses no analytics.
  • Chase me for answers. You can ask to see, correct or delete your data by email at any time, and I reply within 1 UK working day.

What I do:

  • I use what you send me, what your organisation has published, and a work address a finder service checked or worked out.
  • I don’t sell your data or share it for anyone else’s marketing.

Every time limit on this page, in one place:

What
My reply to any email about your data
When
Within 1 UK working day
What
“No thanks” taking effect on every address I send from
When
Within 2 UK working days
What
Telling you which services hold your data, by name
When
In that same reply, within 1 UK working day
What
Carrying out a request to see, correct or delete your data
When
Within one month; for a complex request up to two months more, and I tell you if so
What
Acknowledging a complaint
When
Within 1 UK working day

1. Who is responsible for your data?

I am.

Marcell Mozes, trading as Marcell Mozes Studio

Lakeview 600, Lakeside Dr, Centre Park Square

Warrington WA1 1RW, United Kingdom

marcell@marcellmozes.com

I’m a sole trader and I handle every request myself. Everything happens by email, with no calls. I reply within 1 UK working day.

2. Why did I email you?

To stop it. Reply “no thanks” to any email from me, use the unsubscribe link, or email me with the subject “No thanks” (marcell@marcellmozes.com). You don’t need a reason. Within 2 UK working days your address is on my do-not-email list and no further email goes to it. You don’t have to reply to me at all; nothing happens if you don’t.

How opting out works. I send from more than one address, and all of them share one do-not-email list. When you opt out, your email address and the date go on that list, so no address of mine emails you again. I delete the rest of your outreach record: what I found about you and why I wrote.

Opting out covers outreach records only. If you are also a client, it doesn’t delete your client or invoice records. I keep those for the periods in section 8, and you can still ask about them under your rights.

What I hold about you. Your name, job title, company, work email address and company website; the public page my email mentioned, where I found your address and the date; and any reply you send.

Where it came from. One or more of these:

  • your company’s own website (about, team or contact pages)
  • public registers: the UK’s public register of companies, the Companies Registration Office in Ireland, and US nonprofit tax filings published by the IRS and ProPublica
  • job ads your organisation published
  • an email finder and verification service that works out or checks a work address from your name and company domain

If the address was wrong. A finder service works out some addresses from a name and a domain, so it can be wrong. If my email reached the wrong person, reply and say so. I delete the record and put that address on the do-not-email list.

Why you. Your role relates to the writing my email offered, about something your organisation had published.

The legal basis. Legitimate interests, for direct marketing to businesses. You have the right to object to this at any time, and I will always stop. How I weigh it:

My interest
Offering a relevant writing service to organisations that may need it.
Why email
A short note to the person whose job it concerns, not a general inbox.
Your side
A work address only, about your business role only, with no sensitive data. My emails don’t track opens or clicks. Each one says who I am, where I found your address and how to stop, and gives the address of this page. At most four emails in all: a first email and up to three follow-ups. One reply ends it.

Who I email. UK companies (Ltd, PLC and LLP) that I check on the UK’s public register of companies, never UK sole traders or partnerships, because UK email marketing law protects them as individuals. Organisations in the US and Ireland. In Canada, Australia, New Zealand and France, only addresses the person or the company published themselves. Nowhere else.

3. If you only visit this site

This site sets no cookies. It runs no analytics, no tracking pixels and no embedded content from other companies. Fonts come from the site itself.

If you choose a currency for the prices, your browser remembers that choice on your device. It never reaches me, and you can clear it with your browser’s site data.

My web host receives your IP address and browser details, which it needs to send you a page, and keeps short server logs for security.

The start form sends nothing to me. It opens your own email app with your answers filled in, and nothing reaches me until you press Send there.

If you pay by card, the checkout or invoice page belongs to my card payment processor and falls under its own privacy notice.

4. If you email me or send a brief

What I receive. From the start form: your name, work email, website, what you want written, a link to your material, when you need it, the billing currency you choose and who approves the work. For Cover the Seat, whether you can use outside suppliers. If you ask for subscription renewal texts, also the name of the app that runs your subscriptions. For some jobs, a purchase order number if you give one. Later, by email: your answers to my questions about the job, your invoice address and any purchase order number.

Why. To reply to you, to quote, to prepare the job, and to check that your organisation hasn’t already had its free sample or its first job paid after approval, since each is once per organisation. For that check I use only your organisation’s name, its website and the domain of your email address. The rules themselves are in the Terms.

Do you have to give it? No. But without these details I can’t quote or start the job.

5. If you’re a client

Your material. Your brief and material may contain personal data, such as your client’s team names or examples from your members. I use it only to do your job. Where you control that data, I act on your written instructions, as set out in the Terms.

Drafts. Drafts sit in a shared document you can comment on but not edit. Every document carries one of three labels: Draft (the first version, with open questions marked), Facts confirmed (every “to confirm” answered) and Approved (the final version you approved).

If you’re a studio or agency. I never contact your client. I never name you or them, and I never show the work anywhere without your written permission.

AI. I use AI for research and first drafts. I check and edit every line myself. What goes into these tools: your brief, your material and public pages. What never goes in: payment details. More in How I use AI.

Invoices and payments. Invoices and card payments go through my card payment processor. It handles card and bank details, so I never see your full card number, and it uses payment data for its own fraud checks as its own controller.

6. Who else handles your data, and where?

Only the kinds of service I need to do the work. Ask me and I will tell you which services hold your data, by name, in my reply within 1 UK working day.

  • Email: my email provider.
  • Documents: my document storage, where your drafts and material sit.
  • Payments: my card payment processor.
  • Research and first drafts: AI writing tools.
  • Sending outreach: an email sending service.
  • Finding and checking work addresses: an email finder and verification service.
  • The website: my web host.
  • Accounts: an accountant, if I use one, for tax records only.

Transfers outside the UK. Some of these services store data outside the UK. Until I give you the names, assume that any of the kinds above may do so; my reply tells you which ones do and which safeguard applies to each. Where a US provider has signed up to the UK‑US data bridge, I rely on that. Where it hasn’t, I rely on the ICO’s international data transfer agreement or its addendum to the EU clauses. For people in Ireland, EU data protection law also applies, and the EU recognises UK protection as adequate.

I don’t sell data, and I don’t share it with anyone for their own marketing.

7. Why I use it, and on what legal basis

What I do
Replying and quoting
Legal basis
Steps towards a contract, at your request
What I do
Doing the work
Legal basis
Our contract
What I do
Invoices and tax records
Legal basis
Legal obligation (UK tax law)
What I do
Outreach and the do-not-email list
Legal basis
Legitimate interests (section 2)
What I do
Checking who can have a free sample or pay after approval, once per organisation
Legal basis
Legitimate interests (keeping starts fair)

I don’t rely on consent for any of this. No decision about you is made by software alone.

8. How long I keep it

What
Prospects who don’t reply
How long
6 months after my last email, then deleted
What
Prospects who reply but don’t go ahead
How long
6 months after the last email between us, then deleted (a “no thanks” goes on the do-not-email list instead)
What
The do-not-email list
How long
For good, your address and the date only
What
Enquiries that don’t become work
How long
12 months, then deleted
What
Raw sources: your material, my research notes and working files
How long
Deleted within 30 days of the job closing or of no approval, unless you ask me to keep them for your next job
What
Drafts you don’t approve
How long
Deleted within 30 days of the job closing or of no approval
What
Your job record: the brief, the copy you approved and the voice notes for your organisation
How long
Kept on file for your next job until you ask me to delete it, and at most for the same period as the job’s invoice (the row below), then deleted.
What
Invoices and payment records
How long
5 years after the 31 January filing deadline for their tax year, as HMRC requires, then deleted

Opting out of my emails doesn’t shorten the client and invoice periods above.

9. Your rights

You can ask me to:

  • give you a copy of your data
  • correct it
  • delete it
  • limit what I do with it
  • send it to you in a format you can reuse
  • stop using it: this is your right to object, and for marketing it is absolute, with no reason needed

You also have the right not to be subject to decisions made by software alone. I don’t make any.

How. Email me about your data (marcell@marcellmozes.com). I reply within 1 UK working day and carry out your request within one month. For a complex request the law lets me take up to two months more, and I tell you within the first month if I need to. I may ask you to confirm it’s you before I send any data.

Deleting invoice and payment records early isn’t possible while UK tax law requires me to keep them. I tell you when that applies.

If you’re in the US. I don’t sell or share personal information. You can use the same email to see, delete or stop the use of your data.

10. If you’re unhappy

Tell me first, by email with the subject “Data complaint” (marcell@marcellmozes.com). I acknowledge it within 1 UK working day and respond without undue delay.

You can complain to the Information Commissioner’s Office at any time: ico.org.uk/make-a-complaint. In Ireland, the Data Protection Commission: dataprotection.ie. Elsewhere, the data protection authority where you live or work.

Your data

Questions about your data?

One email covers access, correction, deletion and complaints.

Email me about your data

Or write to marcell@marcellmozes.com from any email app.

Curious what my email was about? See what I do · Terms · How I use AI · Refunds