Natalie Milligan (“I”, “me”, “we” or “us”) respects your privacy and is committed to protecting it. This Privacy Policy explains what personal information I collect when you use nataliemilligan.com (the “Website”), why I collect it, how I use it, and the rights you have over it.
It applies to information collected on the Website, through forms and checkouts linked from it, and in email or other electronic messages between you and me.
Please read it before using the Website. By using the Website, requesting a resource, or making a purchase, you accept this Privacy Policy. If you do not agree with it, please do not use the Website.
Who is responsible for your data
The data controller is Natalie Milligan, a sole trader registered in the United Kingdom and operating from Porto, Portugal.
Email: nat@nataliemilligan.com
People under the age of 18
The Website is not intended for people under 18. I do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Website, sign up for anything, make a purchase, or send me any personal information.
If I learn that I have collected personal information from someone under 18, I will delete it. If you believe I may hold information about a person under 18, please email nat@nataliemilligan.com.
Information I collect
Information you give me
I collect information you choose to provide, for example when you:
- Request a free resource, such as a guide, by entering your name and email address
- Buy a product or service, including your name, email address, billing details and purchase history
- Book a call through the booking tool on the Website
- Email me, reply to one of my emails, or contact me through a form
- Leave a comment, review or testimonial
Information collected automatically
When you use the Website, my hosting provider automatically records standard technical information in server logs, such as your IP address, browser type, operating system, the pages you visit, and the time and date of your visit. This is used to keep the Website secure and running properly, and for aggregate statistics about how the Website is used. On its own it does not identify you.
I may in future use analytics tools, such as Google Analytics, and social media pixels, such as those from Meta or Pinterest, to understand how people use the Website and to show relevant content to people who have visited. If I introduce these, I will update this policy and, where the law requires it, ask for your consent through a cookie notice before they run.
Payment information
I never see or store your full card details. Payments are processed by Stripe and, where offered, PayPal, through my checkout provider, ThriveCart. Your card details go directly to the payment processor, who is responsible for keeping them secure. I receive confirmation that a payment was made, the amount, the last four digits of the card, and your billing details.
Why I collect it, and the legal basis
Under UK data protection law I need a lawful reason to use your personal information. These are the reasons I rely on:
| What I do | Legal basis |
|---|---|
| Send you a free resource you have requested, and related emails about it | Performance of a contract, and legitimate interests |
| Process your purchase, deliver the product, and provide customer support | Performance of a contract |
| Send you my newsletter and information about products and services I think you will find useful | Consent, which you can withdraw at any time, and, for existing customers, legitimate interests |
| Keep records of purchases for accounting and tax | Legal obligation |
| Keep the Website secure and improve it | Legitimate interests |
| Respond to your messages | Legitimate interests |
I only ask for the information reasonably needed for the purpose at hand. I will never make consent to marketing a condition of buying something from me.
Emails and marketing
When you request a free resource or buy a product, I will email you to deliver it. I will also add you to my email list and send you related content, tips and offers. You can unsubscribe at any time using the link at the bottom of every email, and I will stop straight away.
Every email I send clearly states who it is from and how to contact me, in line with the UK Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR).
I do not sell, rent or lease my email list to anyone.
If you ever have trouble unsubscribing, email nat@nataliemilligan.com and I will remove you by hand.
Cookies
Like most websites, this one uses a small number of cookies and similar technologies. A cookie is a small text file stored on your device.
At present the Website uses only cookies that are strictly necessary for it to work, for example to remember a form you were part way through, and any cookies set by the third-party tools listed below when you use them, such as the booking tool or the checkout.
If I add analytics or advertising cookies in future, I will ask for your consent before they are set, and you will be able to change your mind at any time.
You can also control cookies through your browser settings. Blocking all cookies may stop some parts of the Website from working.
Who I share your information with
I do not sell, rent or trade your personal information. I share it only with the service providers I use to run my business, and only as far as they need it to do their job for me. They are contractually required to protect your data and use it only for the purpose I have engaged them for.
| Provider | What they do for me |
|---|---|
| Gravity Flo | Email marketing and customer relationship management. Stores your name, email address and how you came to be on my list, and sends my emails |
| ThriveCart | Checkout, order processing and delivery of digital products, including hosting my customer library |
| Stripe | Card payment processing |
| PayPal | Payment processing, where offered at checkout |
| Calendly | Booking calls |
| Netlify | Website hosting |
| Google Workspace | Email and document storage |
I may also share your information:
- With professional advisers such as my accountant, where needed for tax and accounting
- To enforce my Terms and Conditions or any other agreement between us
- If I sell or restructure my business, in which case the buyer or successor would take on the same obligations under this policy
- When the law requires it, or to protect my legal rights, or when ordered to by a court or regulator
Where your data is stored, and international transfers
Some of the providers above process data outside the United Kingdom and the European Economic Area, including in the United States. Where that happens, I rely on the safeguards recognised under UK and EU data protection law, such as adequacy decisions, the UK International Data Transfer Agreement, or standard contractual clauses, so that your data receives a level of protection equivalent to the UK.
How long I keep your information
- Email list. For as long as you remain subscribed. When you unsubscribe, your address is suppressed so that I do not accidentally email you again, and otherwise removed within a reasonable period.
- Purchase records. For six years after the purchase, because UK tax law requires me to keep them.
- Customer accounts. For as long as you have access to a product you have bought, so that you can keep using it.
- Correspondence. For as long as reasonably needed to deal with your query and any follow-up.
- Server logs. Automatically, for a short rolling period set by my hosting provider.
You can ask me to delete your information at any time, subject to any records I am legally required to keep.
How I protect your information
I take reasonable technical and organisational steps to keep your information secure, including using reputable providers, encrypted connections (HTTPS) across the Website, and limiting access to those who need it.
No method of transmission over the internet is completely secure. Email in particular is not a secure medium, so please do not send me sensitive information such as card numbers by email. I will never ask you to.
Your rights
Under UK GDPR, and under EU GDPR if you are in the European Economic Area, you have the right to:
- Access the personal information I hold about you
- Correct anything that is inaccurate or incomplete
- Delete your information, in certain circumstances
- Restrict how I use it, in certain circumstances
- Object to my use of it, including for direct marketing, which you can do at any time
- Portability, meaning a copy of the information you gave me in a usable format
- Withdraw consent at any time where I am relying on consent, without affecting anything done before you withdrew it
To use any of these rights, email nat@nataliemilligan.com. I will respond within one month. I will not charge you, unless a request is clearly unfounded or excessive.
If you are unhappy with how I have handled your information, I would ask you to contact me first so I can put it right. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or, if you are in the EEA, to your local data protection authority.
Links to other websites
The Website contains links to other websites and services that I do not control, including the tools listed above. This policy does not cover them. Please read their own privacy policies before giving them any information.
Changes to this policy
I will post any changes to this policy on this page and update the effective date at the top. If a change materially affects how I use your personal information, I will also let you know by email if I have your address. Please check back from time to time.
Contact
Questions or comments about this Privacy Policy are welcome.
Email: nat@nataliemilligan.com