Last updated 13 October 2026
Privacy notice
Who is responsible for your information
Jonathan Pretorius, trading as Vivienne Hart ("we", "us") is responsible for your personal information. Address: 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom. Email: hello.viviennehart@gmail.com.
What we collect and why
| When | Information | Why | Lawful basis |
|---|---|---|---|
| You request the free guide | Email address, and details Payhip records at checkout such as your country | To deliver the guide and keep a record of the order | Contract (providing what you asked for) |
| You buy the Toolkit | Email address, order details, country and tax details. Card details go to the payment provider (Stripe), not to us | To take payment, deliver the Toolkit, handle support and refunds, and keep tax and accounting records | Contract; legal obligation (tax records) |
| You tick the box for emails, or join the course-interest list | Email address, sign-up date, and whether you open or click emails | To send the emails you asked for | Consent. You can withdraw it at any time |
| You email us | Your name, email address and message | To reply and help | Legitimate interests (answering your questions) |
Asking for emails is always a separate, unticked choice. You never have to agree to marketing to get the free guide or to buy.
Who helps us, and where your information goes
These services handle some of your information. Where information leaves the UK, the safeguard shown is the one each provider states in its own published terms.
| Provider | What it does | Where, and the safeguard it states |
|---|---|---|
| Payhip (Payhip Limited, UK) | Checkout, file delivery, VAT and sales tax, acting as our processor. See also Payhip's privacy notice. | Payhip hosts its systems with Amazon Web Services in Ireland (EU); the UK recognises the EU as providing adequate protection. Payhip has told us that where its service providers process limited data outside the UK and EU, it uses UK adequacy regulations or appropriate contractual safeguards. |
| Stripe | Card payments. Stripe also acts independently for fraud prevention and financial regulation. | May be processed in the US. Stripe states it uses the ICO's UK International Data Transfer Addendum with standard contractual clauses, and is certified under the Data Privacy Framework. |
| MailerLite | Sends the emails you've agreed to receive, as our processor. | Hosted in the EU (Google Cloud, Netherlands). For any access from the US, MailerLite states it uses standard contractual clauses with the UK Addendum and the UK Extension to the Data Privacy Framework. |
| Google (Gmail) | Our email inbox. | Processed by Google LLC, including in the US. Google states it relies on the Data Privacy Framework, including the UK Extension. |
| Cloudflare (Cloudflare Pages) | Hosts this website and keeps basic technical logs, such as IP addresses, for security. We don't use its visitor statistics. | Global network, including the US. Cloudflare states it uses standard contractual clauses with the UK Addendum and the UK Extension to the Data Privacy Framework. |
AI tools and your messages
We don't put customer emails or messages into AI tools. If that ever changes, we'll update this notice first.
How long we keep it
- Order, refund and tax records: until 6 years after the end of the tax year (5 April) in which the order was made. For example, an order on 1 October 2026 falls in the tax year ending 5 April 2027, so its records are kept until 5 April 2033. This covers HMRC's minimum. We keep records longer only while HMRC is checking a tax return or a claim or dispute is unresolved.
- Emails you send us: 2 years from the last message in the conversation. Messages about an order, refund or complaint are kept with the order records instead.
- Data protection requests: the request and our reply are kept for 2 years after we close it.
- Email list and course news: until you unsubscribe. After that we keep only your email address and the date on a "do not email" list, so you aren't emailed again by mistake. Course-interest sign-ups that are never confirmed are removed after 30 days, and the list is deleted 12 months after any decision not to run the course.
- Payhip keeps its own transaction records for up to 10 years under its privacy policy; that is outside our control.
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, restrict how it's used, or receive a copy to move elsewhere. You can object at any time to your information being used for marketing, and you can withdraw consent to emails at any time by clicking "Unsubscribe" or emailing us. There are no exceptions to the right to stop marketing.
To make a request, email hello.viviennehart@gmail.com. We'll respond without undue delay and within one month of receiving it. If a request is complex, or you make several, we may extend this by up to two further months; if so, we'll tell you within the first month and explain why. We may need to confirm who you are first; the month then starts when we have that.
This legal time limit is separate from our everyday customer-service aim of replying within three working days.
Cookies and tracking
This website doesn't set cookies, doesn't use analytics or advertising trackers, and loads its fonts from this site rather than from Google. When you click through to Payhip's checkout or MailerLite's sign-up page, their own cookie policies apply there: Payhip, MailerLite.
Complaints
If you're unhappy with how we've handled your information, please email us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
This website and its guides are intended for adults.