.png/:/rs=h:133,cg:true,m/qt=q:100/ll)
Privacy Policy
Last updated: 1 September 2026
Admin Harmony by Lauren takes the privacy and security of personal information seriously.
This privacy policy explains what personal information I may collect, why I use it, how it is kept and the rights you have under UK data protection law.
Who I am
Admin Harmony by Lauren is a Virtual Assistant business providing administrative and business support services to clients across the UK.
For personal information relating directly to my own business, clients, enquiries and website visitors, Admin Harmony by Lauren acts as the data controller.
When I process personal information on behalf of a client as part of the Virtual Assistant services I provide, the client will normally be the data controller and Admin Harmony by Lauren acts as a data processor.
If you have any questions about this policy or how your information is handled, please contact:
Admin Harmony by Lauren
Email: info@adminharmony.co.uk
Website: www.adminharmony.co.uk
What personal information I may collect
The information I collect depends on how you interact with Admin Harmony and the services being provided.
This may include:
- your name
- business or company name
- email address
- telephone number
- billing or business address
- information you provide when making an enquiry
- correspondence between us
- details relating to the services I provide to you
- invoices, payment records and accounting information
- information necessary to manage our working relationship
- website usage and technical information collected through cookies or similar technologies
I only collect information that is reasonably necessary for the relevant purpose.
How I use your information
I may use personal information to:
- respond to enquiries
- provide quotations and discuss potential work
- set up and manage client relationships
- provide Virtual Assistant and administrative services
- communicate with clients
- manage appointments, meetings and correspondence
- issue invoices and maintain financial records
- manage contracts and business records
- deal with questions, complaints or disputes
- maintain the security and operation of my business systems
- comply with legal, tax and regulatory obligations
- improve my website and services
My lawful bases for using personal information
Under UK data protection law, I must have a lawful basis for processing personal information.
Depending on the circumstances, I may rely on:
Contract
Where processing is necessary to enter into or perform a contract with you.
For example, this may include responding to a request for a quotation, setting you up as a client, providing agreed services or communicating with you about the work I am carrying out.
Legitimate interests
I may process information where it is reasonably necessary for the legitimate interests of running and protecting Admin Harmony, provided those interests are not overridden by your rights and interests.
These legitimate interests may include:
- managing client relationships
- responding to business enquiries
- keeping appropriate business records
- improving my services
- protecting my business and systems
- dealing with disputes or establishing legal claims
Legal obligation
I may process information where necessary to comply with a legal obligation, such as maintaining records required for tax or accounting purposes.
Consent
Where consent is the appropriate lawful basis, I will ask for it. You may withdraw your consent at any time.
When I process information on behalf of my clients
As a Virtual Assistant, I may be given access to personal information held by my clients.
Depending on the work I have been asked to carry out, this might include information held within:
- email accounts
- calendars
- customer or client databases
- CRM systems
- document management systems
- spreadsheets
- business software and online portals
- files supplied by the client
In these circumstances, I normally act as a data processor and process the information only as necessary to provide the agreed services and in accordance with the client's instructions.
The client remains responsible for deciding why the information is being processed, the lawful basis for doing so and how long it should be retained.
I treat information accessed through client systems as confidential and only access information necessary to carry out the work I have been asked to complete.
Where appropriate, data protection and confidentiality requirements are included within my client agreements.
Special category information
My own business does not routinely need to collect sensitive or special category personal information.
However, when providing administrative services to a client, I may occasionally encounter information held within that client's systems which is considered sensitive under data protection law.
Where this occurs, I will only process that information as required to carry out the client's documented instructions and agreed services.
Where I get personal information from
I may receive personal information:
- directly from you
- from your business or organisation
- from a client where the information is required for work I am carrying out on their behalf
- through my website or contact forms
- through correspondence, meetings or other business communications
Who I may share information with
I do not sell personal information.
Where necessary for the operation of my business, information may be processed using trusted third-party service providers such as:
- website and hosting providers
- email and cloud storage providers
- accounting and invoicing software
- project and task management systems
- communication and meeting platforms
- IT and security providers
These organisations may process information only where necessary to provide their services.
Where I am acting as a processor for a client, I will use client systems and other services in accordance with the client's instructions and our agreement.
I may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.
International transfers
Some technology providers may store or process information outside the UK.
Where personal information is transferred internationally, I take reasonable steps to ensure appropriate safeguards are in place in accordance with UK data protection law.
How I keep information secure
I take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.
These measures may include:
- password-protected accounts and systems
- multi-factor authentication where available
- secure cloud-based systems
- access controls
- appropriate antivirus and device security
- confidentiality arrangements
- limiting access to information to what is required for the work being carried out
How long I keep information
I do not keep personal information for longer than reasonably necessary.
Retention periods depend on the type of information and why it is held.
For example:
- enquiry information may be deleted when it is no longer required
- client correspondence and business records may be retained for a reasonable period after our working relationship ends
- invoices and accounting records will normally be retained for the period required by UK tax and accounting law
- information processed solely on behalf of a client will be retained, returned or deleted in accordance with the client's instructions and our agreement
I periodically review the information I hold and securely delete information that is no longer required.
Cookies and website information
The Admin Harmony website may use cookies or similar technologies to help the website function and to understand how visitors use it.
Where required, you will be given the option to accept or decline non-essential cookies.
You can also control cookies through your browser settings.
Marketing
I may occasionally contact existing clients or business contacts about services or information that I believe may be relevant to them where permitted by law.
You can ask me to stop sending marketing communications at any time.
If consent is required for a particular type of marketing, I will obtain it before sending those communications.
Your data protection rights
Depending on the circumstances, you may have the right to:
- ask for access to your personal information
- ask for inaccurate information to be corrected
- ask for your information to be deleted
- ask me to restrict how your information is used
- object to certain uses of your information
- ask for certain information to be transferred to you or another organisation
- withdraw consent where processing is based on consent
Not all rights apply in every situation.
If I am processing your information solely on behalf of one of my clients, you may need to direct your request to that client as the data controller. I will assist the client where required.
To make a request, please email info@adminharmony.co.uk.
How to complain
If you have concerns about how I have used your personal information, please contact me first so I have the opportunity to investigate.
You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information is available on the ICO website.
Changes to this privacy policy
I may update this privacy policy from time to time to reflect changes to my services, business practices or legal requirements.
The latest version will always be available on the Admin Harmony website.