Privacy Policy

Angela Murray trading as Virtual Angie
Last updated: 20 October 2026

Introduction

Angela Murray trading as Virtual Angie is a sole trader based in England, United Kingdom. In this Privacy Statement, “we”, “our” and “us” refer to Angela Murray trading as Virtual Angie.
Business correspondence address: [TO BE ADDED]

Email: ange@virtualangie.com | Website: https://www.virtualangie.com | ICO registration reference: ZA480587
Virtual Angie provides business systems strategy, client experience consulting, Dubsado setup and support, training, and digital products and resources.

We are responsible for collecting, using, storing and protecting personal information in connection with our own business activities. We process personal information in accordance with applicable UK data protection legislation, including the UK GDPR and Data Protection Act 2018, as amended.
When providing services to clients, we may also process personal information on their behalf. In those circumstances, the client will generally be the data controller and Virtual Angie will act as a data processor, subject to applicable contractual arrangements.
We take the protection of personal information seriously and aim to handle it lawfully, fairly, transparently and securely. Questions may be sent to ange@virtualangie.com.

Data Protection Principles

We aim to ensure that personal information is processed lawfully, fairly and transparently; collected for specified, explicit and legitimate purposes; limited to what is necessary; accurate and kept up to date where necessary; retained no longer than needed; and protected by appropriate security measures. We maintain accountability for our processing activities.

What Information We Collect

Depending on how you interact with Virtual Angie, we may collect:
Contact details: names, email addresses, telephone numbers, postal addresses and other contact details.
Business information: business name, website, industry, activities, branding and services.
Enquiry information: requirements, systems, budgets, challenges and services of interest.
Client project information: questionnaires, contracts, project documents, strategy discussions and other materials needed to deliver services.
Financial and transaction information: billing details, invoices, payment records and transaction information. Payments are primarily processed through Square via Dubsado, with occasional bank transfers or PayPal payments.
Meeting recordings and transcripts: recordings, transcripts and notes from consultations, strategy sessions and training.
Communications: emails and correspondence via Dubsado, Voxer, Slack and other agreed channels.
Email marketing information: contact details, subscription preferences and interactions with marketing emails.
Digital product information: information supplied when purchasing, downloading or accessing resources, guides, courses and templates.
Website and technical information: IP addresses, device and browser information, website usage and information collected by cookies or similar technologies.

We do not routinely request medical information or other special category personal data as part of our services. If such information is provided unexpectedly, we will handle it in accordance with applicable data protection requirements and will not retain it unnecessarily.
When delivering services to business clients, we may have access to personal information relating to their customers or other individuals. Where we act on behalf of a client, we process this information in accordance with their instructions and applicable requirements.

How We Collect, Use and Share Personal Data

We collect information directly when you complete an enquiry form, book a consultation, enter a contract, provide project information, communicate with us, subscribe to marketing, request a free resource, purchase a digital product, participate in a meeting or visit our website. We may also receive information from third party systems used to operate our business.

How We Use Your Information

Respond to enquiries, arrange appointments and prepare proposals and contracts.
Deliver Dubsado setup, systems strategy, consulting, training and related services.
Manage projects, client communication and post-project support.
Process payments, issue invoices and maintain business and financial records.
Provide purchased digital products, educational resources and requested downloads.
Send marketing communications in accordance with applicable laws and preferences.
Record and transcribe meetings for accessibility, accurate records, project planning and service delivery.
Improve services and resources, maintain systems and website security, and meet legal obligations.
Handle data protection requests, complaints and legal claims.

Meeting Recordings and Transcriptions

We record and transcribe client consultations, strategy sessions, training sessions and other meetings where appropriate. This supports accessibility, full participation, accurate record keeping and project delivery. Clients are informed of recording and transcription arrangements before meetings and may contact us in advance to raise concerns or discuss alternatives. We use Google Meet and Fireflies. Recordings and transcripts may be stored on our business computer, Google Drive and authorised services, with access limited to those who need it for legitimate business purposes.

Artificial Intelligence Tools

We may use AI tools, including ChatGPT and Claude, to assist with drafting documents and email templates, understanding clients’ communication styles, reviewing business processes, organising project information and developing resources. We seek to minimise unnecessary personal information shared with such services and use appropriate privacy settings. The suitability of provider contracts and safeguards for identifiable personal data is assessed according to the nature of the information and our role as controller or processor. Turning off model training does not itself establish all required contractual protections.

Sharing Information

We do not sell personal information. We may share information with service providers where necessary to operate our business, deliver services, process payments or comply with legal obligations. Depending on the service, these include Dubsado, Google Workspace, Fireflies, MailerLite, Wix, Square, PayPal, Canva, Voxer, Slack, ChatGPT and Claude, and authorised subcontractors. We seek appropriate confidentiality, security and data protection arrangements, including any necessary client authorisation where we use subprocessors. We may disclose information where required by law or necessary for legal claims.

Information Processed on Behalf of Clients

When working within clients’ business systems, clients generally determine the purposes and means of processing and Virtual Angie acts on their instructions. Access is limited to what is necessary for agreed services. Where authorised subcontractors assist, their access is limited to assigned responsibilities.

How We Store and Transfer Your Information

We use cloud services and local computer storage, including Dubsado, Google Workspace, Fireflies, MailerLite, Wix, Canva, payment processors and communication platforms. We take reasonable technical and organisational measures to protect information, including access controls, suitable account security settings, limiting access and reviewing retained information.

International Data Transfers

Some service providers may store or process information outside the United Kingdom. Where restricted international transfers occur, we are responsible for identifying and applying an appropriate transfer mechanism or safeguard, such as relevant UK adequacy regulations or approved contractual safeguards, where required. The specific provider arrangements must be verified before this statement is published.

Data Security Incidents

If a personal data breach occurs, we will assess the incident, take appropriate containment and remedial steps, and make notifications required by law. Where we act as a processor, we will inform the relevant client in accordance with applicable contractual and legal obligations.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for its purpose, including legal, accounting, contractual and legitimate business requirements.

Client and Project Records

We retain appropriate business records in Dubsado after projects finish. These may include contracts, proposals, invoices, payment histories, records of services delivered, agreed instructions and relevant correspondence. We keep these where needed for tax, accounting, business administration, contractual matters or legal claims and review them periodically. Complete Dubsado project histories are not routinely deleted at the end of the support period.

Temporary Working Files

Downloaded meeting recordings, transcripts, questionnaires, duplicate project documents and temporary client assets will normally be deleted within 30 days after the agreed post-project support period ends, unless a legitimate reason requires longer retention. We review relevant copies on local devices, Google Drive, Fireflies and other applicable services, subject to provider retention and backup arrangements.

Financial Records

Invoices, payment records and other accounting and tax records are retained for the applicable statutory periods.

Marketing and Enquiries

Mailing list information is retained while you remain subscribed or while another lawful reason applies. We retain limited information needed to respect unsubscribe requests. Enquiries that do not result in a client relationship are kept for a justified period, which will be specified in our internal retention schedule.

Deletion and Disposal

When information is no longer required, we take reasonable steps to delete or securely dispose of it. Information held by providers may remain in restricted backups or be subject to additional deletion periods under their policies. Where we act as a processor, applicable client instructions on returning or deleting information take precedence.

Legal Basis for Processing Your Data

Depending on the purpose, we rely on one or more of the following lawful bases:
Performance of a contract: to enter into and fulfil contracts, deliver services, manage projects and provide purchased products.
Legal obligation: to meet tax, accounting, data protection and other legal requirements.
Legitimate interests: to respond to business enquiries, manage client relationships, maintain business records, protect systems and improve services, where these interests are not overridden by individuals’ rights.
Consent: where required for particular marketing communications or nonessential cookies. Consent can be withdrawn at any time without affecting prior lawful processing.
The appropriate basis depends on the specific activity. We do not rely on consent where another basis is more appropriate. Any processing of special category information requires an additional applicable condition where relevant.

Your Data Protection Rights

Subject to applicable conditions and exemptions, your rights include being informed; access; rectification; erasure; restriction of processing; data portability; objection (including an absolute right to object to direct marketing); and rights concerning solely automated decisions with legal or similarly significant effects.
To exercise your rights, email ange@virtualangie.com. We may ask for information reasonably necessary to verify identity. We normally respond without undue delay and within one calendar month, subject to lawful extensions or exceptions. Requests are normally free, although a reasonable fee may be permitted in limited circumstances.
Where we process information on behalf of a client, we may refer the request to that client and assist them as required.

Complaints

Please contact us first if you have concerns about how your information is handled. You may also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk | 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Marketing Emails

We use MailerLite to send business advice, educational content, updates, offers and information about our services and resources. You may subscribe through our website, a free resource request or another identified subscription opportunity. Where consent is required, we obtain it before sending marketing. Where legally permitted, another lawful basis may apply.
Purchasing a product, submitting an enquiry or entering a client agreement is not automatically treated as consent to unrelated marketing. Marketing emails include an unsubscribe link. Unsubscribing does not prevent necessary service messages about contracts, invoices, purchases or appointments.

Cookies and Website Analytics

Our website, https://www.virtualangie.com, is hosted on Wix and uses cookies and similar technologies for website functionality, analytics and marketing. Google Analytics 4 (GA4) is installed to measure website traffic and interactions. Meta Pixel is installed to measure advertising performance and website interactions. These services may collect device identifiers, IP addresses, browser information and website interaction data.

Cookie Preferences

Our website displays a cookie banner headed “Yay cookies!” with a “Decline All” option and a “Cookie settings” widget for reviewing or changing preferences. Essential cookies may operate where necessary for the site. We seek consent where required for nonessential analytics and marketing cookies. Visitors may also manage cookies through browser settings. The operation of consent controls, including whether GA4 and Meta Pixel are blocked before consent, must be technically verified before publication.
Further information about individual cookies, purposes and durations should be available through the website’s cookie controls or a separate cookie policy, where provided. Google and Meta also publish their own privacy policies.

Changes to This Privacy Statement

We may update this statement to reflect changes in our business, services, technology or applicable law. Updates will be published on our website with a revised date. Where changes materially affect processing, we will take appropriate steps to inform affected individuals where required.

Angela Murray trading as Virtual Angie
Email: ange@virtualangie.com
Website: https://www.virtualangie.com
ICO registration reference: ZA480587
Business correspondence address: [TO BE ADDED]