Privacy Policy
Grace Editorial ('we', 'us', 'our') believes your privacy matters. This Privacy Policy explains what personal data we collect when you visit grace-editorial.com (the 'Site'), why we collect it, how we use it, and what rights you have over it. We are committed to handling your information with care and in compliance with applicable data protection law, including the EU General Data Protection Regulation (GDPR). Please read it carefully.
Who We Are
Grace Editorial is a sole-trader editorial services business founded and operated by Elisa Grace, based in Lisbon, Portugal. For privacy enquiries, contact us.
What Information We Collect
Information you give us directly:
Name and email address when you complete a contact form or book a discovery call
Manuscript information and creative writing you share as part of an editorial engagement
Payment information processed via Stripe (we do not store card details — Stripe handles this)
Communications you send us by email or through the Site
Information collected automatically:
Technical data including IP address, browser type, device type, and pages visited
Cookies and similar tracking technologies used by Squarespace (our website platform) and any analytics tools we use
Referral source — how you arrived at the Site
Information from third-party services:
Acuity Scheduling collects booking information when you schedule a call
Stripe collects payment information when you purchase a service
How We Use Your Information
We use the information we collect for the following purposes:
To provide the editorial and coaching services you have requested
To communicate with you about your booking, engagement, or enquiry
To process payments for services
To improve the Site and understand how visitors use it
To send service-related communications (not marketing, unless you have opted in)
To comply with our legal obligations
Legal basis for processing (EU/UK visitors): We process your personal data on the following legal bases: performance of a contract (when providing services you have requested); legitimate interests (improving the Site, preventing fraud); legal obligation (where required by law); and consent (where you have explicitly opted in, such as to a newsletter).
Cookies
The Site uses cookies — small text files placed on your device — to enable certain functions and improve your experience. Cookies used on this Site include:
Essential cookies: required for the Site to function (set by Squarespace)
Analytics cookies: help us understand how visitors use the Site (if analytics are enabled)
Booking cookies: set by Acuity Scheduling when you use the booking function
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Site. Where required by law (including for EU/UK visitors), we will request your consent before placing non-essential cookies.
How We Share Your Information
We do not sell your personal information. We share it only in the following circumstances:
With service providers who help us operate the Site and deliver our services (Squarespace, Acuity Scheduling, Stripe, HoneyBook) — these providers are contractually required to protect your data
With professional advisers (lawyers, accountants) where necessary
Where required by law or to protect the rights, property, or safety of Grace Editorial or others
International Data Transfers
Grace Editorial is based in Portugal (EU). Some of our service providers are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.
How Long We Keep Your Information
Contact and enquiry information: up to 2 years from last contact
Client engagement records (editorial letters, manuscript notes, correspondence): up to 7 years for business record purposes
Payment records: as required by applicable tax and accounting law
Marketing consent records: until you withdraw consent
Your Rights
Depending on where you are located, you may have the following rights in relation to your personal data:
Right of access — to request a copy of the personal data we hold about you
Right to rectification — to ask us to correct inaccurate data
Right to erasure — to ask us to delete your data in certain circumstances
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a portable format
Right to object — to object to certain types of processing
Right to withdraw consent — where processing is based on consent
To exercise any of these rights, contact us at [your contact email]. EU and UK residents also have the right to lodge a complaint with their local data protection authority (in Portugal: Comissão Nacional de Proteção de Dados, www.cnpd.pt).
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no internet transmission is completely secure and we cannot guarantee the security of data transmitted to the Site.
Third-Party Links
The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
Children
The Site and our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on the Site with a revised effective date. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please contact us.
Last updated: May 2026