Privacy Policy

Who we are

CityVPA is a virtual PA service operated by Aimee, based in the UK. We are the data controller for the personal information collected through this website. If you have any questions about this policy, please contact us at hello@cityvpa.co.uk.

What information we collect

We may collect the following personal information when you use our website or contact us:

• Your name and email address when you submit a contact or enquiry form
• Your phone number if you choose to provide it
• The content of any messages you send us
• Basic usage data such as pages visited (via analytics, if enabled)

How we use your information

We use the information you provide to:

• Respond to your enquiries and provide our services
• Send you information you have requested about our services
• Improve our website and services

We will never sell your personal data to third parties or use it for unsolicited marketing without your consent.

Legal basis for processing

Under UK GDPR, we process your personal data on the basis of legitimate interests (responding to your enquiry) and, where applicable, your consent. You may withdraw consent at any time by contacting us.

How long we keep your data

We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to 2 years.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, please email us at hello@cityvpa.co.uk.

Cookies

This website may use essential cookies to ensure it functions correctly. We do not use tracking or advertising cookies without your consent. You can control cookies through your browser settings.

Third-party services

We may use trusted third-party tools to operate our website and manage communications. These providers are required to handle your data securely and in accordance with UK GDPR.