1. Introduction

This privacy notice provides you with details of how we collect and process your personal data through your use of our website www.thebusinesslifestyle.com.

Christina Curtis trading as The Business Lifestyle is the data controller and we are responsible for your personal data (referred to as "we", "us" or "our" in this privacy notice).

If any of your personal information changes (e.g., when you have changed your email address, moved house, or changed your name), please email us at the above email address and let us know how it has changed. From time to time we may email you to check that the personal data we hold for you is accurate and up to date.

2. What Personal Data We Collect About You

We may collect the following categories of personal data about you:

2.1 Identity and Contact Data

• Your name
• Your email address
• Your phone number
• Your address, town, postcode, city
• Your business name and details

2.2 Financial Data

Payment card details and billing information (processed by third-party payment processors)

2.3 Technical Data

• IP address
• Browser type and version
• Device information
• Time zone settings and location
• Cookie data

2.4 Usage Data

• Information about how you use our website and services
• Page views and navigation paths
• Length of visit to pages

2.5 Marketing and Communications Data

Your preferences in receiving marketing from us and your communication preferences

2.6 Client-Specific Data

For clients who work with us, we may collect additional information to provide our services effectively:

• Goals and aspirations
• Business information

Important: We do not collect any Special Category Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We do not collect any information about criminal convictions and offences.

3. How We May Use Your Data

We will use your data for the following purposes:

• To provide our products and services to you
• To process financial transactions and orders
• To send you customer communications about products or services you have purchased
• To respond to your enquiries and requests
• To send you marketing communications where we are legally permitted to do so
• To personalise your experience on our website
• To understand and improve our products and services
• To monitor the use of our website and analyse usage patterns
• To administer and protect our business and website
• To deliver relevant content and advertisements
• To comply with legal obligations
• To establish, pursue or defend legal claims
• To obtain professional advice and maintain insurance

4. Our Lawful Grounds of Processing

Under the UK General Data Protection Regulation (UK GDPR), we are only legally able to process your personal data if we have a lawful ground for doing so. Our lawful grounds of processing are:

4.1 Contract Performance

Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This includes processing Customer Data when you place an order with us, fulfilling that contract, and keeping records of the contract.

4.2 Legitimate Interests

Where processing is necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests. Our legitimate interests include:

• Running, growing and developing our business
• Operating and improving our website and services
• Marketing our services to existing and prospective customers
• Preventing fraud and ensuring the security of our systems
• Record keeping for responsible business operations
• Establishing, pursuing or defending legal claims

4.3 Consent

Where you have given your explicit consent to the processing of your personal data for specific purposes, such as receiving marketing communications or when you sign up for free resources. You have the right to withdraw your consent at any time.

4.4 Legal Obligation

Where processing is necessary for compliance with a legal obligation to which we are subject, such as tax or accounting requirements, or as required by a government authority.

We do not carry out automated decision-making or any type of automated profiling.

5. How We Collect Your Personal Data

We may collect data about you through:

5.1 Direct Interactions

You may provide data directly to us by filling in forms on our website, sending us emails, placing orders, subscribing to services, requesting information, or otherwise communicating with us.

5.2 Automated Technologies

We may automatically collect Technical Data about your equipment, browsing actions and patterns through cookies and similar technologies as you interact with our website. Please see our Cookie Policy for more details.

5.3 Third Parties

We may receive data from third parties including:

• Analytics providers such as Google (based outside the UK)
• Advertising networks such as Facebook (based outside the UK)
• Search information providers such as Google (based outside the UK)
• Payment and delivery service providers
• Fraud detection agencies
• Publicly available sources such as Companies House

6. Marketing Communications

Our lawful ground for processing your personal data to send you marketing communications is either your consent or our legitimate interests (namely to grow our business).

Under the Privacy and Electronic Communications Regulations (PECR), we may only send you email or text marketing communications if: (i) you made a purchase or asked for information from us about our goods or services, or (ii) you agreed to receive marketing communications, and in each case you have not opted out of receiving such communications.

If you are a limited company, we may send you marketing emails without your consent under PECR. However, you can still opt out of receiving marketing emails from us at any time.

Before we share your personal data with any third party for their own marketing purposes, we will obtain your express consent.

You can opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of our emails
• Emailing us at [email protected]

If you opt out of receiving marketing communications, this does not apply to personal data provided as a result of other transactions, such as purchases or service registrations.

7. Disclosures of Your Personal Data

We may share your personal data with the following parties:

• Service providers who provide IT, system administration, payment processing, and delivery services
• Professional advisers including lawyers, bankers, accountants, auditors and insurers
• Government bodies that require us to report processing activities
• Third parties to whom we sell, transfer, or merge parts of our business or assets

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

8. International Transfers

Some of our service providers are based outside the United Kingdom, which means that the processing of your personal data may involve a transfer of data outside the UK.

We ensure that appropriate safeguards are in place when transferring your data internationally:

• We may transfer your personal data to countries that the UK authorities have approved as providing an adequate level of protection for personal data
• If we use US-based providers that are part of a recognised privacy framework (such as the successor to the US Privacy Shield), we may transfer data to them as they have equivalent safeguards in place
• Where we use service providers established outside of the UK, we may use specific contracts, codes of conduct, or certification mechanisms approved by UK authorities which give personal data the same protection it has in the UK

If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We limit access to your personal data to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

However, please note that no method of transmission over the internet or method of electronic storage is 100% secure. Whilst we strive to use reasonable measures to protect your personal data, we cannot guarantee absolute security.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When deciding what the correct retention period is, we consider:

• The amount, nature and sensitivity of the personal data
• The potential risk of harm from unauthorised use or disclosure
• The purposes for which we process your data
• Whether we can achieve those purposes through other means
• Legal and regulatory requirements

For tax purposes, the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.

In some circumstances, we may anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

11. Your Legal Rights

Under data protection laws, you have rights in relation to your personal data including:

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data
• Right to restriction: Request restriction of processing of your personal data
• Right to data portability: Request transfer of your personal data to you or a third party
• Right to object: Object to processing of your personal data
• Right to withdraw consent: Where lawful ground is consent, you can withdraw it at any time

For more information about these rights, please visit: ICO - Individual Rights

If you wish to exercise any of these rights, please email us at [email protected].

You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

12. Cookies

Our website uses cookies and similar technologies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy available at: www.thebusinesslifestyle.com/cookie-policy

13. Third Party Services

13.1 Analytics

We use Google Analytics to track and report website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. You can opt out of having your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on available at: https://tools.google.com/dlpage/gaoptout

13.2 Advertising

We may use third-party service providers to show advertisements, which may include targeted advertisements after you have visited our website. We work with Google AdSense and Facebook advertising services. You can opt out of interest-based advertising by visiting your ad preferences in these services.

13.3 Payment Processors

We use Stripe for payment processing. We do not store or collect your payment card details. That information is provided directly to Stripe, whose use of your personal information is governed by their Privacy Policy. Stripe adheres to PCI-DSS standards.

14. Links to Other Websites

Our website may contain links to other websites that we do not operate. If you click on a third-party link, you will be taken directly to that site, which is governed by its own privacy policy. We strongly encourage you to read the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

15. Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children under 16 without verification of parental consent, we will take steps to remove that information from our servers.

16. How to Complain

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at [email protected].

17. Changes to This Privacy Policy

We may update this privacy policy from time to time. If we make changes, we will post the updated policy on this page and update the "Last Updated" date at the top of this policy.

If we make significant changes to how we treat your personal data, we will provide more prominent notice or obtain your consent as required by law. We encourage you to review this privacy policy periodically to stay informed about how we are protecting your information.

Your continued use of our website and services after any changes to this privacy policy will constitute your acceptance of such changes.

18. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us by email at [email protected].

We will respond to all enquiries within a reasonable timeframe.