Privacy Policy

1. Who We Are

Data Controller: Sarah Howard, trading as Soulful Horizons

Website: soulfulhorizons.co.uk

Contact: sarah@soulfulhorizons.co.uk

2. What Personal Data We Collect

When you subscribe to our mailing list

• Your email address
• Your first name (if provided)
• The date and method of subscription, and your consent record

When you purchase a product

Payments for digital products such as workbooks are processed through PayPal. PayPal collects your name, email, and payment details directly — we do not receive or store your payment card details. Please see PayPal's Privacy Policy for details. After a purchase, PayPal shares your name and email with us so we can deliver your purchase and provide support.

When you book a call

Discovery calls and free Clarity Sessions are booked through Calendly. When you book, Calendly collects your name, email, and any details you choose to share, and adds the appointment to our calendar. See Calendly's Privacy Policy for details.

When you browse our website

If you consent to analytics, Google Analytics 4 collects information about pages visited, time on site, and general location (by country). Your IP address may be processed by Google. See Section 5 for details.

3. How We Use Your Data

• Email subscriptions: To send our newsletter — honest, infrequent writing from Sarah. Unsubscribe at any time via the link in any email.
• Order fulfilment: To deliver purchased content and provide customer support.
• Analytics: To understand how visitors use our site so we can improve it. Only collected with your consent.
• Legal compliance: To keep records required by law.

We do not use your data for profiling, automated decision-making, or targeted advertising.

4. Our Lawful Basis for Processing

• Consent — for email marketing and analytics. Withdraw at any time.
• Contract — to fulfil purchases and deliver content you have bought.
• Legitimate interests — for basic website functionality and security.
• Legal obligation — to retain records required by law.

5. Third Parties and Data Sharing

Email — MailerLite

We use MailerLite to send newsletters and transactional emails. Your email and first name are stored with MailerLite. See MailerLite's Privacy Policy for details. MailerLite is GDPR-compliant.

Payments — PayPal

Purchases are made through PayPal, which processes your payment and shares limited order information (your name and email) with us so we can deliver what you have bought. PayPal's own privacy policy governs their data practices.

Bookings — Calendly

We use Calendly to schedule discovery calls and free Clarity Sessions. When you book, the name, email, and any notes you provide are stored with Calendly and added to our calendar. See Calendly's Privacy Policy. Calendly is GDPR-compliant.

Google Analytics

We use Google Analytics 4 to understand how visitors use our site — only if you consent via the cookie banner. GA4 sets cookies persisting up to 2 years. Your IP address is processed by Google. See Google's Privacy Policy for details. You can opt out at any time using the Google Analytics Opt-out Add-on.

Google Fonts

Our site loads fonts from Google's servers. Your IP address may be processed by Google as a standard part of this request. See Google's Privacy Policy.

No selling or sharing for marketing

We do not sell, rent, or share your personal data with any third party for marketing purposes.

6. How Long We Keep Your Data

• Email subscribers: Until you unsubscribe. We then retain a suppression record (email only) to prevent accidental re-contact.
• Purchase records: 6 years from the end of the relevant tax year, as required by law.
• Consent records: For as long as we contact you, plus 1 year thereafter.

7. Your Rights Under UK GDPR

• Right of access — request a copy of the data we hold.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data where we are not legally required to retain it.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — request your data in a portable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — withdraw at any time without affecting prior lawful processing.

To exercise any of these rights, contact sarah@soulfulhorizons.co.uk. We will respond within one month.

To lodge a complaint with the UK's data protection authority:

• ico.org.uk
• Helpline: 0303 123 1113

8. Cookies and Local Storage

For full details please read our Cookie Policy. In summary: we store your consent preference locally in your browser. If you accept, we use Google Analytics and load fonts from Google — both may process your IP address.

9. Security

We use HTTPS for encrypted transmission and restrict access to personal data to those who need it. No internet transmission is completely secure. We will notify you and the ICO of any breach likely to affect your rights, as required by law.

10. Children's Privacy

Our site and services are for adults aged 18 and over. We do not knowingly collect data from anyone under 18. Contact us if you believe we have done so and we will delete it promptly.

11. Links to Other Websites

We are not responsible for the privacy practices of third-party sites we link to. Please read their own policies before sharing personal information.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date above will reflect any changes. We will notify subscribers of significant changes by email.