Privacy Policy

1. Who We Are

Soulful Horizons is operated by Sarah Howard, a sole trader based in the United Kingdom.

Data Controller: Sarah Howard, trading as Soulful Horizons

Website: soulfulhorizons.co.uk

Contact: sarah@soulfulhorizons.co.uk

If you have any questions about how we handle your data, please contact us at the address above.

2. What Personal Data We Collect

When you subscribe to our mailing list

• Your email address
• Your first name (if provided)
• The date and method of subscription, and your consent record

When you create an account on our website

• Your name
• Your email address
• Your password (stored in encrypted form — we never see your plain-text password)
• Your access key (the code linked to your purchase)
• The date your account was created

When you purchase a workbook or bundle

Purchases are processed through our Etsy store. Etsy acts as the payment processor and merchant of record. We do not receive or store your payment card details. Please refer to Etsy's Privacy Policy for information about how they handle your data during the purchase process.

After a purchase, Etsy may share your name and email address with us solely for the purpose of delivering your access key and providing customer support.

When you use the interactive workbooks

If you choose to use the web version of our workbooks, any written reflections or responses you enter are stored locally in your browser using a technology called localStorage. This data is kept on your own device and is not transmitted to or stored on our servers. We cannot access, read, or retrieve your personal reflections.

When you browse our website

Our website may collect certain technical information automatically, including your IP address (processed by Google Fonts — see Section 5), browser type, and pages visited. This information is used solely to deliver the website to you and is not used to identify you personally.

3. How We Use Your Data

We use your personal data only for the purposes for which it was collected:

• Email subscriptions: To send you our newsletter ("The Inner Circle") — thoughtful, infrequent writing from Sarah. You can unsubscribe at any time using the link in any email.
• Account management: To create and maintain your account, deliver your purchased content, and provide customer support.
• Order fulfilment: To send you your access key and link it to your account.
• Legal compliance: To keep records required by law (e.g. consent records for email marketing).

We do not use your data for profiling, automated decision-making, or targeted advertising.

4. Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Consent — for email marketing subscriptions. You may withdraw consent at any time by unsubscribing.
• Contract — to manage your account and deliver the content you have purchased.
• Legitimate interests — for basic website functionality and security, where this does not override your rights.
• Legal obligation — to retain records we are required by law to keep.

5. Third Parties and Data Sharing

We share your data with third parties only where necessary and only to the extent required:

Email service provider

We use a third-party email provider to send newsletters and transactional emails (such as your access key). Your email address and name are stored with this provider. We will update this policy with the specific provider's name and privacy policy link once it has been confirmed.

Etsy

Purchases are made through Etsy. Etsy processes your payment and may share limited order information (name and email) with us. Etsy's own privacy policy governs how they process your data. We do not control Etsy's data practices.

Google Fonts

Our website loads fonts from Google Fonts, which is hosted on Google's servers. When your browser loads a page on our site, it makes a request to Google's servers to retrieve the font files. This request may include your IP address, which Google logs. For more information, see Google's Privacy Policy.

No selling or sharing for marketing

We do not sell, rent, or share your personal data with any third party for marketing purposes.

6. How Long We Keep Your Data

• Email subscribers: Your data is held until you unsubscribe. After unsubscribing, we retain a suppression record (your email address only) to ensure we do not contact you again in error.
• Account data: Your account data is held for as long as your account remains active. If you request account deletion, we will delete your data within 30 days, except where legal retention requirements apply.
• Purchase records: We retain records of purchases as required for tax and legal purposes — typically 6 years from the end of the tax year in which the purchase was made.
• Consent records: We retain records of your consent for as long as we continue to contact you, plus 1 year thereafter.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten") — you can ask us to delete your data, where we are not required by law to retain it.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can ask for your data in a portable, machine-readable format.
• Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at sarah@soulfulhorizons.co.uk. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

8. Cookies and Local Storage

Our website uses cookies and similar technologies. For full details — including what we use, why, and how to control it — please read our Cookie Policy.

In summary: we use a strictly necessary cookie to remember your cookie consent preference. If you choose to use the interactive workbooks, your reflections are stored in your browser's localStorage (on your device only). We ask for your consent before setting any non-essential cookies.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted transmission of data (HTTPS)
• Encrypted password storage — passwords are never stored in plain text
• Restricting access to personal data to only those who need it

No method of internet transmission is completely secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Links to Other Websites

Our website may contain links to third-party websites (including our Etsy store and social media platforms). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Where changes are significant, we will take reasonable steps to notify you — for example, by email if you are subscribed to our list.