Privacy Policy

PRIVACY POLICY

Effective Date: 7th April, 2025

1. Introduction Inkygoodness Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.inkygoodness.com (the “Site”), including any other media form, media channel, mobile website, or mobile application related or connected thereto. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.  

2. Who We Are (Data Controller) Inkygoodness Ltd is the controller and responsible for your personal data.  

• Full name of legal entity: Inkygoodness Limited

• Registered Address: Inkygoodness c/o Harrison Partners Masonic Building, 9 Mill St, Sutton Coldfield B72 1TJ

• Email address for data protection queries: hello@inkygoodness.com

• Company Registration Number: 12201825

3. What Personal Data We Collect We may collect various types of personal data about you, including:

• Identity Data: First name, last name, username or similar identifier.

• Contact Data: Billing address, delivery address, email address, telephone numbers.  

• Financial Data: Payment card details (typically processed securely by a third-party payment processor – specify which one, e.g., Stripe, PayPal).

• Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us (e.g., memberships, course sign-ups, shop orders).  

• Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.  

• Profile Data: Your username and password (if applicable), purchases or orders made by you, your interests, preferences, feedback, and survey responses.  

• Usage Data: Information about how you use our website, products, and services.  

• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.  

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.  

We do not typically collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.  

4. How We Collect Your Data We use different methods to collect data from and about you including through:

• Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • Create an account on our website;  

  • Purchase products or services (e.g., shop items, memberships, courses);

  • Subscribe to our service or publications (e.g., newsletter);

  • Request marketing to be sent to you;

  • Enter a competition, promotion or survey; or

  • Give us feedback or contact us.

• Automated technologies or interactions: As you interact with our website, we will automatically collect Technical Data about your equipment, Browse actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our Cookie Policy [Link to Cookie Policy] for further details.  

• Third parties or publicly available sources: We may receive personal data about you from various third parties such as analytics providers (e.g., Google based outside the UK), advertising networks, search information providers, and providers of technical, payment and delivery services.  

5. How and Why We Use Your Personal Data (Legal Bases) We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:  

• To Perform a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your order, managing your membership, delivering a course).

  • Data used: Identity, Contact, Financial, Transaction Data.

• Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example:

  • Managing our relationship with you (e.g., notifying you about changes to our terms or privacy policy).

  • To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).  

  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.  

  • To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.  

  • To communicate opportunities or information we believe may be of interest to you, based on your previous engagement with us (e.g., related courses, events, or membership benefits). You can opt-out of these communications at any time.

  • Data used: Identity, Contact, Technical, Usage, Profile, Marketing and Communications Data.

• Consent: Where you have provided specific consent for us to use your data for a particular purpose (e.g., sending you direct marketing newsletters via email). You have the right to withdraw consent at any time by contacting us or using opt-out links.

  • Data used: Identity, Contact, Marketing and Communications Data.

• Legal Obligation: Where we need to comply with a legal obligation (e.g., tax reporting).

  • Data used: Identity, Contact, Financial, Transaction Data.

We will generally only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.  

6. Data Sharing and Third Parties We may share your personal data with trusted third parties for the purposes set out above, including:

• Service providers acting as processors who provide IT and system administration services.

• Payment processors (e.g., [Stripe, PayPal] – specify which).

• Email marketing platforms (e.g., [Mailchimp, ActiveCampaign] – specify which).

• Analytics providers (e.g., Google Analytics).

• Professional advisers including lawyers, bankers, auditors and insurers.

• HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances. 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.  

7. International Data Transfers

• Some of our external third parties (e.g., [Name specific services like Google Analytics, Mailchimp, etc.]) are based outside the UK/EEA so their processing of your personal data will involve a transfer of data outside the UK/EEA. Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:  

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.  

  • Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (e.g., Standard Contractual Clauses or the UK Addendum). Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK/EEA.  

8. Data Security We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include [briefly mention types of measures, e.g., encryption, access controls, staff training]. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator (like the ICO) of a breach where we are legally required to do so.  

9. Data Retention We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements. For example:  

• By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.  

• Data collected via website analytics may be kept for [e.g., 26 months].

• Data provided for marketing consent will be kept until you withdraw consent.

In some circumstances, you can ask us to delete your data: see “Your Legal Rights” below.

10. Your Legal Rights Under UK data protection law, you have rights including:

• Right of access: Request access to your personal data.

• Right to rectification: Request correction of the personal data that we hold about you.

• Right to erasure: Request erasure of your personal data (‘right to be forgotten’).

• Right to restrict processing: Request restriction of processing of your personal data.

• Right to data portability: Request the transfer of your personal data to you or to a third party.  

• Right to object: Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party).

• Right to withdraw consent: Withdraw consent at any time where we are relying on consent to process your personal data.  

If you wish to exercise any of the rights set out above, please contact us at [[email address removed] or other specified contact]. You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).  

11. Cookies and Tracking Technologies Our website uses cookies and similar technologies to distinguish you from other users, provide functionality, and analyse website usage. For detailed information on the cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please see our separate Cookie Policy.  

12. Links to Other Websites Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.  

13. Children’s Privacy Our Site is not intended for children under the age of 13, and we do not knowingly collect data relating to children.

14. Changes to This Privacy Policy We keep our privacy policy under regular review. This version was last updated on 01.04.2024. We may update this policy from time to time by publishing a new version on our website. We will notify you of significant changes via email and/or via a prominent notice on our website].  

15. How to Contact Us If you have any questions about this privacy policy or our privacy practices, please contact us at:

• Email: hello@inkygoodness FAO Company Director Lisa Hassell

16. Right to Complain You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.