Nyla Kimberley is committed to protecting your personal data and being transparent about how it is used. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all visitors to nylakimberley.com and to anyone who purchases our products or services.
01
Who We Are
The data controller responsible for your personal data is Tramaine Kimberley, trading as Nyla Kimberley Ltd, registered in England and Wales.
If you have any questions about this policy or how your data is handled, please contact us at tramaine@nylakimberley.com.
02
What Data We Collect
We collect and process the following categories of personal data:
Data you provide directly
- ✦Contact information. Your name, email address, and phone number when you contact us, book a discovery call, join a waitlist, or register for a workshop.
- ✦Purchase information. Your name, email address, billing address, and order details when you make a purchase. Payment card details are processed securely by our payment provider and are not stored by us.
- ✦Communications. Any information you share with us by email, through our contact form, or in WhatsApp messages.
- ✦Workshop and coaching information. Information you provide during workshops, coaching sessions, or in workbooks and questionnaires as part of our programmes.
Data collected automatically
- ✦Usage data. Pages visited, time spent on the site, referring URLs, and browser and device information, collected via cookies and analytics tools.
- ✦Technical data. IP address, browser type, and operating system.
Data from third parties
- ✦Email marketing. If you subscribe to our mailing list via MailerLite, we receive your name and email address and information about how you engage with our emails.
03
How We Use Your Data
We use your personal data only for the purposes for which it was collected or where we have a legitimate reason to do so. Specifically:
- ✦To fulfil your purchase. Processing orders, sending confirmations, delivering digital products, and providing workshop or coaching access.
- ✦To deliver our services. Communicating with you about your booking, sending joining instructions, and providing coaching or workshop support.
- ✦To communicate with you. Responding to enquiries, sending updates about your purchases, and notifying you of relevant changes.
- ✦To send marketing communications. Where you have opted in, we may send you information about upcoming workshops, coaching offers, and resources. You can unsubscribe at any time.
- ✦To improve our website and services. Using analytics data to understand how our website is used and to improve the experience for visitors.
- ✦To comply with legal obligations. Where required by law, including tax and financial record keeping.
04
Legal Basis for Processing
We rely on the following legal bases to process your personal data under UK GDPR:
- ✦Contract. Processing necessary to fulfil a purchase or service agreement with you.
- ✦Legitimate interests. Where we have a legitimate business reason that does not override your rights, such as improving our services and communicating with existing customers.
- ✦Consent. Where you have given us explicit consent, such as when subscribing to our mailing list. You may withdraw consent at any time.
- ✦Legal obligation. Where we are required to process data to comply with the law.
05
How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. In general:
- ✦Purchase records are retained for seven years in accordance with HMRC requirements.
- ✦Marketing data is held until you unsubscribe or request deletion.
- ✦Coaching and workshop records are retained for three years after our last interaction.
- ✦General enquiry data is deleted within 12 months of our last contact.
06
Sharing Your Data
We do not sell your personal data. We may share it with the following trusted third parties where necessary to operate our business:
- ✦Payment processors. To process your payment securely.
- ✦Email marketing platforms. MailerLite, to manage our mailing list and send newsletters.
- ✦Booking platforms. Calendly, to manage discovery call bookings.
- ✦Video conferencing. Zoom, to deliver virtual workshops and coaching sessions.
- ✦Website hosting. Hostinger, who host this website and store website data.
- ✦Analytics. Google Analytics, to understand website usage.
All third parties we work with are required to handle your data in accordance with applicable data protection law. Where data is transferred outside the UK, we ensure appropriate safeguards are in place.
07
Cookies
This website uses cookies to improve your experience and to collect analytics data. Cookies are small files stored on your device. You can control cookies through your browser settings.
We use the following types of cookies:
- ✦Essential cookies. Required for the website to function, including session and shopping cart cookies. These cannot be disabled.
- ✦Analytics cookies. Used to understand how visitors use the website. These are set by Google Analytics and can be declined.
By continuing to use our website you consent to our use of essential cookies. Analytics cookies will only be set where you have given consent.
08
Your Rights
Under UK GDPR you have the following rights in relation to your personal data:
- ✦Right of access. To request a copy of the personal data we hold about you.
- ✦Right to rectification. To ask us to correct inaccurate or incomplete data.
- ✦Right to erasure. To request deletion of your data where we no longer have a lawful reason to hold it.
- ✦Right to restrict processing. To ask us to limit how we use your data in certain circumstances.
- ✦Right to data portability. To receive your data in a structured, machine readable format.
- ✦Right to object. To object to processing based on legitimate interests, including direct marketing.
- ✦Rights relating to automated decision making. We do not use automated decision making or profiling.
To exercise any of these rights, please contact us at tramaine@nylakimberley.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
09
Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS and we use reputable third party providers with their own security standards.
No data transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
10
Children
Our products and services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, please contact us immediately and we will delete it.
11
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.