GDPR:

Information collected by us will be kept securely for 3 months then permanently deleted unless you give permission for us to keep this information longer this must be in writing so we have proof of your permission. The information we gather will only be used for revelant purposes such as for the work we do together, whether client, customer or freelancer and will not be passed on to third parties or used for marketing without your clear written consent.