JAMES HILLMAN

PRIVACY POLICY

Last updated: 8 May 2026

This Privacy Policy explains how James Hillman ("we", "us", "our") collects, uses and protects information you provide when you use jameshillman.co.uk (the "Site").

1. WHO WE ARE James Hillman is a London-based fashion consultancy operating as a UK limited company. For all data protection enquiries, contact us at info@jameshillman.co.uk.

2. INFORMATION WE COLLECT We may collect the following information when you use the Site: - Information you provide directly: your name, email address, phone number, company name, and any project details you share when you contact us, book a Studio Session, or sign up for our newsletter. - Information collected automatically: anonymous analytics data via Squarespace Analytics and Google Analytics — pages visited, referrers, device type, approximate location (city-level), and visit duration. This data is aggregated and does not identify individual users. - Cookies: see our Cookies section below.

3. HOW WE USE YOUR INFORMATION We use information you provide to: - Respond to enquiries and project requests - Deliver Studio Sessions and consultancy services you have engaged us for - Send occasional updates if you have opted in to our newsletter - Maintain and improve the Site We do not sell, trade, or rent your personal information to third parties.

4. LEGAL BASIS FOR PROCESSING (UK GDPR) We process personal data on the following legal bases: - Contract: where processing is necessary to deliver a service you have requested - Legitimate interests: to respond to general enquiries and improve the Site - Consent: where you have actively opted in (e.g. newsletter subscription) You can withdraw consent at any time by contacting us.

5. HOW WE STORE AND PROTECT YOUR INFORMATION Your data is stored on services we use to run the consultancy, including Squarespace (website host, contact form submissions), Google (analytics, calendar, email), Dropbox (project files), and our accounting software (invoicing — only for active clients). We take appropriate technical and organisational measures to protect your data. However, no online service is 100% secure, and we cannot guarantee absolute security.

6. RETENTION We retain personal data only as long as necessary: - Enquiries that don't result in engagement: 12 months - Active client records: duration of engagement plus 7 years for accounting purposes - Newsletter subscribers: until you unsubscribe

7. YOUR RIGHTS UNDER UK GDPR You have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data - Object to or restrict processing - Data portability - Withdraw consent at any time - Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) To exercise any of these rights, email info@jameshillman.co.uk.

8. COOKIES This Site uses cookies for essential functionality and analytics. You can disable non-essential cookies via your browser settings or our cookie banner where displayed.

9. THIRD-PARTY LINKS The Site may contain links to third-party sites (e.g. client websites, our social media, supplier sites). We are not responsible for the privacy practices of those sites. Please review their policies separately.

10. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. CONTACT For any questions about this Privacy Policy, contact: James Hillman info@jameshillman.co.uk