Last updated: 23 October 2026

Privacy notice

This notice explains how The Mum Desk uses personal information when you enquire about or receive virtual research, planning and family admin support, including support funded by an employer.

Who is responsible for your information?

Jeyda Roach, trading as The Mum Desk, is responsible for deciding how personal information is used for enquiries and the services described here (the data controller).

For privacy questions, requests or complaints, email themumdesk@outlook.com.

What information is collected?

Your name, email address and any other contact details you choose to provide.
Your enquiry, correspondence, agreed tasks, preferences and information needed to research options and prepare your plan.
Relevant family circumstances, childcare or working arrangements that you choose to share for an agreed task.
For employer enquiries, your organisation, role, business contact details and programme arrangements.
Service administration information, such as which support was used and records of agreed fees or payment arrangements.
Technical information processed by the website host to deliver and protect the site, which can include IP addresses and request information.

Information is usually supplied directly by you. For employer-funded support, an employer may provide your name, contact details and confirmation that you are eligible for the agreed support.

A brief outline is enough for a first enquiry. Please avoid sending children’s names, identity documents, health information or other sensitive details unless we have discussed why they are needed and how they will be handled.

Why information is used and the lawful bases

Individual enquiries and services: to respond to your request, agree a service and carry it out. Where necessary to take steps at your request before a contract or to perform a contract with you, the lawful basis is contract.
Employer-funded employee support: to arrange and deliver the support you choose to use. Where you are not personally a party to the employer’s contract, the basis for ordinary personal information is legitimate interests: providing the requested support and administering the employer-funded service.
Business enquiries and administration: legitimate interests in responding to relevant enquiries, maintaining service records and communicating with employer contacts.
Website delivery and security: legitimate interests in keeping the website available, secure and functioning.
Legal and accounting requirements: legal obligation where a specific law requires records to be kept or information to be disclosed.

Any legitimate-interest use must be necessary and balanced against your rights and reasonable expectations. You can object to processing based on legitimate interests by emailing the address above.

If a task genuinely requires health information or other special-category data, the additional legal condition and any necessary permission will be addressed before that information is requested or used. This general notice does not itself provide consent for sensitive-data processing.

What does an employer receive?

For employer-funded support, the employer receives confirmation that support was used. This confirmation may identify the employee where needed to administer the arrangement. The content of personal conversations, family circumstances, research and individual plans is not included in that routine usage confirmation.

Any additional sharing will be discussed with you first, unless disclosure is required by law. The information-sharing arrangements should be clear before the support begins.

Service providers and sharing

The Mum Desk uses Microsoft Outlook for email, Google Drive for storing and organising service information, and Cloudflare for website hosting, delivery and security. These providers process relevant information to supply their services. Their own privacy information explains their processing:

Information may also be disclosed where necessary to meet a legal requirement. Personal details are not needed for every research task: public information can often be researched without identifying you.

International processing

Microsoft, Google and Cloudflare operate internationally, and information may be processed outside the UK. The locations and protections depend on the services and account settings used. Where a transfer is restricted under UK data protection law, an appropriate UK adequacy arrangement or other required transfer safeguard must be in place. Contact Jeyda for information about the arrangements relevant to your data.

How long information is kept

Fixed retention periods have not yet been set for every record type. The criteria used are:

Enquiries that do not become client work: whether the enquiry or follow-up is still active and whether the correspondence remains necessary to resolve it.
Client research, plans and correspondence: whether the agreed task and follow-up are complete, whether the information is still needed for an ongoing service, and whether a complaint or dispute remains unresolved.
Employer usage records: whether confirmation, billing or an employer query is still outstanding.
Financial or legally required records: the applicable legal record-keeping period and any continuing need connected with a claim or dispute.

Records should be reviewed when an enquiry or task closes and should be deleted or anonymised when no longer needed under these criteria. A need to retain an invoice does not automatically justify retaining all the underlying family information.

Website analytics and cookies

The website files use email links rather than a submission form. Clicking an email link opens your own email service; your message reaches The Mum Desk only when you send it. The website’s copy-email button copies the business email address.

Cloudflare processes technical traffic information to deliver and protect the website. Cloudflare dashboard settings may also enable traffic statistics or Cloudflare Web Analytics. Where enabled, these help understand visits and website performance. Cloudflare states that its Web Analytics product does not use cookies or local storage for analytics.

The supplied website files do not include advertising trackers or Google Analytics. Cloudflare settings can add features separately from these files. If additional tracking or cookies are introduced, this notice and any required choices must be updated before they are used. This notice does not mean that a particular analytics feature is currently enabled.

Your rights

Depending on the circumstances, you may ask to access or correct your information, have it erased, restrict its use, object to processing, or receive certain information in a portable format. These rights are not absolute. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier use.

Email themumdesk@outlook.com to exercise a right or raise a concern. Enough information may be requested to confirm your identity and locate the relevant records.

Questions and complaints

Please contact Jeyda using the email above if you have a concern about your information. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes to this notice

This notice will be updated when the service or information-handling arrangements change. The date at the top shows the latest revision.