Last updated: 10th May 2026
This Privacy & Cookie Policy explains how The Norfolk Edit collects, uses, stores and protects personal information when people use this website, send an enquiry, join the Creator Network, request a creator, become a client, appear in photo or video content, or interact with us online.
The Norfolk Edit is operated by Tiff Gowing and Rebecca Harrod.
For UK data protection purposes, Tiff Gowing and Rebecca Harrod, operating as The Norfolk Edit, are the data controllers for the personal information described in this policy.
For privacy or data protection questions, contact:
This policy applies to:
- The Norfolk Edit website: thenorfolkedit.com
- Enquiries sent through the website
- Creator Network registrations
- Request a Creator submissions
- Event, supplier and collaboration enquiries
- Email communications
- Photo and video content created for clients
- Portfolio, website and social media use of content
- Website cookies and analytics
We do not sell personal information.
1. Information we collect
We may collect and use the following types of personal information.
Website enquiry information
When you submit a website form, we may collect:
- Name
- Email address
- Phone number
- Business name
- Message details
- Any other information you choose to include
This information is used to reply to your enquiry and discuss the service, opportunity or request you have asked about.
Creator Network registration information
When you join The Norfolk Edit Creator Network, we may collect:
- Name
- Email address
- Phone number
- Location or area covered
- Business or creator name
- Website links
- Social media links
- Portfolio links
- Type of creator, freelancer or digital professional you are
- Content style, niche, skills or specialisms
- Examples of your work
- The type of opportunities, events or collaborations you are interested in
- Any other information you choose to submit
This information is used to review your submission, understand what you offer, keep relevant details on file and contact you about suitable creator requests, collaborations, supplier opportunities or event opportunities where appropriate.
Joining the Creator Network does not guarantee work, paid opportunities, event access or collaborations.
Request a Creator information
When a business submits a Request a Creator form, we may collect:
- Name
- Email address
- Phone number
- Business name
- Website or social media links
- Location or area covered
- Type of creator or freelancer requested
- Content style, skillset, platform or audience required
- Project, campaign, event or collaboration details
- Timescale
- Budget information, if provided
- Any other information included in the request
This information is used to review the request, respond to the enquiry, consider whether there may be suitable creators, freelancers, suppliers or local contacts, and keep a record of the request where relevant.
Event and supplier enquiry information
If you contact us about events, supplier opportunities, product showcases or collaborations, we may collect:
- Name
- Email address
- Phone number
- Business or supplier name
- Location
- Type of product, service, venue or collaboration offered
- Event interest
- Any relevant messages, links or attachments
This information is used to respond to your enquiry and consider whether there may be relevant future opportunities.
Email and client communication
If you contact us by email or become a client, we may keep records of:
- Your name
- Email address
- Phone number
- Business details
- Project discussions
- Quotes, proposals or agreed services
- Content planning information
- Shoot arrangements
- Creator requests or collaboration discussions
- Any relevant messages or attachments
Photo and video content
As part of our content creation services, we may capture, edit, store and use photos and videos. These may include recognisable people, such as:
- Business owners
- Staff members
- Customers
- Visitors
- Members of the public
- Children, where appropriate permission has been obtained
Photo and video content may be used for the client’s own social media, website or marketing. With permission or where otherwise appropriate, selected content may also be used by The Norfolk Edit for portfolio, website or social media purposes.
Website and technical information
When you visit the website, limited technical information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Pages visited
- Approximate location information
- Date and time of visit
- Website usage information
- Security and server log information
Some of this information is collected through cookies, analytics tools or website security logs.
2. How we use personal information
We may use personal information to:
- Reply to enquiries
- Discuss services
- Provide quotes or proposals
- Arrange content shoots
- Plan, create and deliver photo and video content
- Manage client relationships
- Review Creator Network registrations
- Keep relevant Creator Network details on file
- Contact creators about relevant opportunities
- Review Request a Creator submissions
- Consider potential creator, freelancer, supplier or business matches
- Make introductions where appropriate
- Manage event, supplier or collaboration enquiries
- Store project and enquiry records
- Improve the website
- Monitor website performance
- Protect the website from spam, abuse or security threats
- Comply with legal, tax or record-keeping responsibilities
- Show examples of our work, where appropriate
We only collect information that is relevant to the purpose.
3. Our lawful basis for using personal information
We rely on different lawful bases depending on how the information is used.
Replying to general enquiries: legitimate interests and/or steps before entering into a contract
Providing services to clients: contract
Managing client records: contract and legitimate interests
Keeping business and accounting records: legal obligation
Website security and spam prevention: legitimate interests
Google Analytics cookies: consent
Reviewing Creator Network registrations: legitimate interests
Keeping Creator Network details on file for future opportunities: consent
Contacting creators about relevant network opportunities: consent
Reviewing Request a Creator submissions: legitimate interests and/or steps before entering into a contract
Considering possible creator, business, supplier or event matches: legitimate interests
Sharing limited professional information to explore a possible match: legitimate interests
Sharing direct contact details for an introduction: consent or another lawful basis where appropriate
Our legitimate interests include responding to enquiries, running the Creator Network, considering relevant matches, managing business relationships, improving and protecting the website, and keeping appropriate business records.
Using recognisable photos/videos for client content: contract, legitimate interests and/or consent depending on the situation
Using recognisable photos/videos for The Norfolk Edit portfolio or promotion: consent or legitimate interests, depending on the context
Responding to data protection requests: legal obligation
Where consent is used, consent can be withdrawn at any time. Withdrawing consent will not affect anything already lawfully done before consent was withdrawn.
4. Website forms
The website uses Ninja Forms to collect enquiries, Creator Network registrations and Request a Creator submissions.
When you submit a form, your details may be stored in the website admin area, sent by email to The Norfolk Edit and used for the purpose of the form submitted.
Depending on the form, this may include replying to your enquiry, reviewing your Creator Network registration, reviewing a Request a Creator submission, keeping relevant details on file, or contacting you about relevant opportunities where you have consented to this.
General enquiry form entries stored inside WordPress are normally kept for up to 12 months, unless they need to be kept longer because you become a client, there is an ongoing discussion, or there is a legal or business reason to retain the information.
Creator Network registration details may be kept for longer because the purpose of the network is to consider creators for future opportunities. These details are normally kept while the Creator Network remains active, unless you ask for your details to be removed.
Request a Creator submissions may be kept where needed to respond to the enquiry, manage the request, keep a record of the discussion or consider future related opportunities.
Website enquiries are not automatically added to a mailing list.
We do not currently send marketing newsletters.
5. Creator Network and creator matching
The Norfolk Edit Creator Network is a private register. It is not a public directory.
Information submitted through the Creator Network form may be used to:
- Understand who you are and what you create
- Keep your relevant details on file
- Contact you about suitable creator requests where you have agreed to this
- Contact you about event, supplier or collaboration opportunities where you have agreed to this
- Consider whether you may be a suitable match for a business request
We will not sell your details.
We may share limited relevant professional information with a business, supplier, event organiser or potential collaborator where it is appropriate to explore a possible opportunity or introduction. This may include your creator name, business name, location, social media links, website, portfolio links, style of work or relevant skills.
We will not normally share direct contact details, such as your email address or phone number, without your agreement. If an introduction is needed, we may first share limited professional information and then ask for permission before passing on direct contact details, where appropriate.
6. Request a Creator submissions
Businesses can use the Request a Creator form to explain what type of creator, freelancer, supplier, content style or collaboration they are looking for.
Information submitted through this form may be used to:
- Review the request
- Respond to the business
- Consider possible creators, freelancers, suppliers or local contacts
- Discuss the opportunity with relevant people where appropriate
- Keep a record of the request
Submitting a request does not guarantee that a suitable creator, freelancer, supplier or collaborator will be available.
7. Email
Emails sent to contact@thenorfolkedit.com may be stored in the business email account.
Emails may be kept where needed to:
- Reply to enquiries
- Manage client relationships
- Keep a record of agreed work
- Review Creator Network or Request a Creator discussions
- Deal with future questions
- Meet legal or accounting requirements
General enquiries that do not become client work or ongoing opportunities are normally reviewed and deleted when no longer needed.
Client-related emails may be kept for longer where they form part of the business relationship or project record.
8. Photo and video content
The Norfolk Edit creates photo and video content for businesses.
This may include recognisable people. Images and video of identifiable people can be personal information.
Where a client arranges a content shoot, the client is responsible for making sure that relevant staff, customers, visitors or other people are aware that photo or video content may be captured and used.
Clients should obtain appropriate permission before a shoot where recognisable people may appear, especially where the content involves:
- Staff members
- Customers
- Children
- Vulnerable people
- Private locations
- Sensitive situations
- Testimonials or personal stories
- Content being used publicly online
The Norfolk Edit will not knowingly use identifiable images of children for public promotional purposes without suitable permission from a parent, guardian or responsible adult.
If someone appears in content and wants to discuss removal, they can contact:
Removal requests will be reviewed fairly. Where content has already been published by a client, The Norfolk Edit may need to work with that client to deal with the request.
9. Use of content in The Norfolk Edit portfolio
The Norfolk Edit may use selected examples of work on its own website, portfolio, Instagram or other social media channels.
This may include:
- Finished photos
- Short video clips
- Reels
- Behind-the-scenes content
- Screenshots or examples of social media posts
- Client project examples
- Event highlights
- Creator collaboration examples
Clients can request that their content is not used in The Norfolk Edit’s portfolio or social media.
Clients and individuals can also request removal of content by emailing:
We will consider removal requests carefully, especially where a person is clearly recognisable.
10. How long we keep information
We only keep personal information for as long as reasonably necessary.
General website form entries: up to 12 months
General enquiry emails: until no longer needed
Creator Network registrations: while the Creator Network remains active, unless removal is requested or the information is no longer needed. The Norfolk Edit aims to review Creator Network records periodically and remove or update details that appear out of date.
Request a Creator submissions: while needed to review, respond to or manage the request, and then reviewed when no longer relevant
Event and supplier enquiries: while needed to manage the enquiry or consider future relevant opportunities
Client project emails and records: up to 6 years where needed for business, tax, contract or legal purposes
Website security logs: normally short-term, unless needed to investigate an issue
Analytics information: according to Google Analytics settings
Raw photo/video content: kept while needed for the project, client relationship, portfolio use or business records, then reviewed
Published portfolio/social media content: until removed, replaced, no longer needed, or a valid removal request is agreed
Raw photo and video content should not be kept indefinitely without review. The Norfolk Edit aims to review stored content periodically and delete material that is no longer needed.
11. Cookies
Cookies are small files placed on your device when you visit a website. Some cookies are needed for the website to work. Others are used for analytics, embedded content or spam protection.
The website may use the following types of cookies and similar technologies.
Essential cookies
These help the website function properly and may be used for security, form functionality, cookie preference storage or website administration. These cookies do not require consent where they are strictly necessary for the website to work.
Analytics cookies
With your consent, we may use Google Analytics 4 to understand how people use the website. Analytics information helps us understand which pages are visited, how visitors move around the website, which devices and browsers are used, and how the website can be improved.
Google Analytics should only run after you accept non-essential cookies. You can reject non-essential cookies using the cookie banner.
Spam protection cookies and checks
The website may use Google reCAPTCHA to help protect forms from spam and abuse.
Google reCAPTCHA may collect technical information about your device, browser and interaction with the website to decide whether form activity appears genuine. Google’s own Privacy Policy and Terms of Service apply to Google reCAPTCHA.
Embedded content and third-party services
The website may include links to Instagram or other third-party websites. If embedded Instagram feeds, videos or third-party content are added in future, those third parties may set their own cookies or collect data.
We do not control cookies set directly by third-party websites.
12. Cookies we may use
The exact cookies may change depending on the website features enabled.
Cookie consent preference: remembers whether you accepted or rejected cookies. Essential.
WordPress cookies: used for logged-in website administrators. Essential/admin only.
Website forms/Ninja Forms: supports enquiry, Creator Network and Request a Creator form functionality. Essential or functional, depending on the website setup.
Google Analytics 4: website usage analytics. Non-essential.
Google reCAPTCHA: spam and abuse prevention. Security/third-party.
Instagram or social embeds: displaying social media content, if added. Third-party.
You can control cookies through the cookie banner and through your browser settings.
Blocking some cookies may affect how parts of the website work.
13. Google Search Console and PageSpeed Insights
The website may use Google Site Kit for Search Console and PageSpeed Insights.
These tools help the website owner understand search performance, indexing, technical issues and website speed.
Search Console and PageSpeed Insights are mainly website-owner tools and are not used to identify individual website visitors.
14. Who we share information with
We may share personal information with trusted service providers where needed to run the website, manage enquiries, provide services or store business records.
This may include:
- Website hosting provider
- Website designer or technical support provider
- WordPress and website plugins
- Email hosting provider
- Google Analytics, Google Search Console, PageSpeed Insights and reCAPTCHA
- Cloud storage providers used to store photo and video content
- Professional advisers, if required
- Legal or regulatory authorities, if required by law
We may also share limited relevant information between creators, businesses, suppliers or event contacts where this is needed to explore a suitable opportunity, collaboration or introduction.
We only share information where there is a valid reason.
15. International transfers
Some service providers may process information outside the UK.
Where this happens, we expect appropriate safeguards to be in place, such as recognised contractual protections or other lawful transfer mechanisms.
This may apply to services such as Google, cloud storage, email tools, analytics tools or social media platforms.
16. Security
We take reasonable steps to protect personal information.
The website is hosted on a managed hosting environment and uses hosting-level security measures. Access to the WordPress admin area is restricted.
However, no website, email system or online service can be guaranteed to be completely secure.
If we become aware of a data security issue that affects personal information, we will take appropriate steps to investigate and respond.
17. Your rights
Depending on the situation, you may have the right to:
- Ask what personal information we hold about you
- Ask for incorrect information to be corrected
- Ask for information to be deleted
- Object to certain uses of your information
- Ask us to restrict how information is used
- Withdraw consent where consent is being relied on
- Ask for a copy of your information
- Complain to the Information Commissioner’s Office
To make a request, email:
We may need to verify your identity before dealing with a request.
You also have the right to make a subject access request and ask for a copy of the personal information we hold about you. We will usually respond without undue delay and within one month.
18. Automated decision-making
We do not use personal information for automated decision-making or profiling that has a legal or similarly significant effect on individuals.
19. Complaints
If you are unhappy with how your personal information has been handled, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office, which is the UK data protection regulator.
20. Updates to this policy
We may update this Privacy & Cookie Policy from time to time.
The latest version will be published on this page.