PRIVACY

PRIVACY POLICY

Last updated: 15 May 2026

Who I am

The data controller for this website is Ann Theato. You can contact me at ann@anntheato.com or via the contact form at www.anntheato.com.

What information I collect

I collect personal information in the following ways:

• Name and email address when you subscribe to my newsletter or mailing list
• Name, email address, and any details you provide when you contact me via a contact form
• Booking and payment information when you purchase a course, coaching session, or other product
• Scheduling information when you book an appointment
• Usage data collected automatically when you visit this website, including your IP address, browser type, operating system, and pages visited

Lawful basis for processing

Under UK GDPR, I process your personal data on the following lawful bases:

• Consent: when you subscribe to my newsletter or agree to receive marketing communications
• Contract: when you purchase a product or service, I process your data to fulfil that contract
• Legitimate interests: I use website analytics to understand how visitors use this site and to improve it

How I use your information

I use your personal data to:

• Respond to your enquiries and provide customer support
• Send newsletters and marketing communications you have subscribed to
• Process and fulfil purchases of courses, coaching sessions, and other products
• Schedule and manage appointments
• Analyse and improve this website
• Comply with legal obligations

How long I keep your data

• Newsletter and mailing list data: until you unsubscribe or request deletion
• Purchase and transaction records: 7 years, as required for tax and accounting purposes
• Contact form enquiries: 2 years
• Website analytics data: 26 months (standard Google Analytics retention)

Third-party processors

I use the following services which may process your personal data on my behalf:

• Kajabi (website, course delivery, and email marketing): kajabi.com/privacy
• Stripe (payment processing): stripe.com/gb/privacy
• Calendly (appointment scheduling): calendly.com/legal/privacy-notice
• Zoom (video consultations and sessions): zoom.us/privacy
• PayPal (payment processing): paypal.com/uk/legalhub/privacy-full
• Google Analytics (website analytics): policies.google.com/privacy

Each service operates under its own privacy policy.

International transfers

Some services I use, including Kajabi and Google Analytics, operate servers outside the UK and European Economic Area, including in the United States. Where your data is transferred internationally, appropriate safeguards are in place in accordance with UK GDPR requirements.

Cookies

This website uses cookies, including cookies set by Google Analytics, to collect anonymous information about how visitors use the site. You can manage your cookie preferences in your browser settings.

Your rights

Under UK GDPR you have the right to:

• Access the personal data I hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Request data portability where applicable
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

To exercise any of these rights, contact me at ann@anntheato.com.

Data sharing

I will not sell or share your personal data for third-party marketing purposes. Data is only shared with the service providers listed above, where required by law, or to protect the rights and safety of myself or others.

Security

I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

Changes to this policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with a revised date.

Contact

For any questions about this Privacy Policy or your personal data, contact me at ann@anntheato.com.

By using www.anntheato.com, you agree to the terms of this Privacy Policy.