Privacy Policy

Last updated: August 26th, 2026

‍
This Privacy Policy explains how Sebastian Kraft Consulting Limited ("we", "us", "our") collects and uses personal data when you visit SebastianKraftConsulting.co.uk (the "website"), subscribe to our newsletter, or contact us.

We are the data controller responsible for your personal data.

Company: Sebastian Kraft Consulting Limited, registered in England & Wales, Company No. 12430914
Registered office: 11 Merus Court, Meridian Business Park, Leicester, LE19 1RJ, United Kingdom
Contact for privacy matters: contact@sebastiankraftconsulting.co.uk

‍

1. The personal data we collect

At this stage our website is a holding page. We only collect personal data in two situations:

a) Newsletter sign-up. If you subscribe to The Beauty & AI Brief using the sign-up form on our website, we collect your email address (and any name you choose to provide).

b) Contact enquiries. If you contact us through the website's contact form or by email, we collect the information you choose to give us.This is typically your name, email address, company/brand name, and the content of your message.

We do not use analytics or tracking on this website, and we do not collect personal data automatically beyond what is strictly necessary for the website to function and to deliver the newsletter sign-up. See our Cookie Notice for details.

‍
2. How we use your personal data, and our legal basis

What we use it for and the legal basis (UK GDPR):

Sending you The Beauty & AI Brief newsletter.
Legal basis: Your consent, given when you subscribe. You can withdraw it at any time.

Responding to your enquiry and discussing a possible engagement.
Legal basis: Our legitimate interests in responding to prospective clients, and/or taking steps to enter into a contract with you.

We do not use your personal data for automated decision-making or profiling.

‍
3. Our newsletter: Substack

Our newsletter is operated through Substack, and our website hosts an embedded Substack sign-upform. When you subscribe, your email address is collected and stored by Substack on our behalf, acting as our data processor. When the sign-up form loads, Substack also sets its own cookies within the embed to keep the sign-up secure and manage the submission; see our Cookie Notice for details.
Your data is handled in accordance with Substack's own privacy terms, which we recommend you read: https://substack.com/privacy.
Substack is based in the United States, so your email address may be transferred and stored outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK data protection law. You can unsubscribe at any time using the link at the foot of every newsletter email, or by contacting us directly.

‍

4. How we store and share your data

We do not sell your personal data, and we do not share it with third parties for their own marketing. Your data is shared only with the service providers who help us operate the website and newsletter (for example, Substack for the newsletter, and our website host, Webflow), and only to the extent necessary for them to provide those services. Contact form submissions are sent to us by email and handled by our website host. We keep your personal data only for as long as necessary: newsletter data until you unsubscribe, and enquiry data for as long as needed to deal with your enquiry and for a reasonable period afterwards in case of follow-up.

‍
5. Your rights

Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- object to, or ask us to restrict, our processing of your data;
- withdraw consent (for the newsletter) at any time;
- request a copy of your data in a portable format; and
- lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email contact@sebastiankraftconsulting.co.uk

‍
6. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or the law. The "last updated" date at the top of this page shows when it was last revised, and the currentversion always applies from the moment it is published here. Where we make a significant change that affects how we handle your personal data, we will take reasonable steps to make you aware of it before it takes effect; for example, by a notice on the website or, where appropriate, by email.

We encourage you to review this page periodically.

When we launch our full website, this policy will be reviewed and expanded to reflect any additional data processing.

‍