PRIVACY, COOKIE & GDPR POLICY

PRIVACY, COOKIE & GDPR POLICY
Last updated: [01 October 2025]
Elevated Life (“we”, “us”, “our”) is committed to protecting your privacy and handling your data transparently and securely. This policy explains how we collect, use, and store your personal information when you visit our website (https://www.elevatedlife.co.uk), join our membership, purchase products or services, or interact with us in other ways.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
________________________________________
1. Who we are
Elevated Life is operated by Bianca Flood [trading as “Bianca Valenta” and “Elevated Life”].
Business address: 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, UK
Email: hello@elevatedlife.co.uk
________________________________________
2. Information we collect
We may collect the following types of information:
•    Identity and contact data: name, email address, postal address, phone number.
•    Transaction data: purchase history, billing details (collected and processed securely by third-party payment providers such as Stripe/PayPal — we do not store full card details).
•    Account data: login details, username, passwords (encrypted).
•    Technical data: IP address, browser type, operating system, referring website, device type.
•    Usage data: how you interact with our website, courses, and membership areas.
•    Marketing preferences: whether you’ve opted in to receive newsletters or promotional emails.
•    Coaching/course contributions: any personal information you voluntarily share in coaching calls, group discussions, or community forums.
________________________________________
3. How we use your information
We process your personal data for the following purposes:
•    To provide the products, services, courses, or memberships you’ve purchased.
•    To set up and administer your account or membership.
•    To communicate with you about your purchases, account, or community updates.
•    To send you newsletters and marketing emails only if you have given consent (you may unsubscribe at any time).
•    To improve our website, services, and customer experience.
•    To comply with legal obligations (e.g., tax records, accounting).
________________________________________
4. Mailing list & marketing
•    If you subscribe to our mailing list, we collect your name and email address with your consent.
•    You can withdraw consent at any time by clicking the unsubscribe link in any email or contacting us at hello@elevatedlife.co.uk.
•    We use trusted third-party email service providers (e.g., namecheap site builder, Zapier, Zoho Mail and Email Octopus, etc.) to deliver emails.
________________________________________
5. Cookies and tracking
Cookies are small text files placed on your device when you visit our site.
•    Essential cookies: required for the site to function (e.g., login, checkout).
•    Analytics cookies: help us understand how visitors use the site (e.g., Google Analytics).
•    Marketing cookies: track browsing to deliver personalised advertising (only if consent is given).
When you first visit our site, you’ll see a cookie banner where you can manage your preferences. You can also disable cookies in your browser, but this may affect website functionality.
________________________________________
6. Legal basis for processing data
We process data under the following lawful bases:
•    Contract – to provide services you’ve purchased.
•    Consent – for newsletters, marketing, and non-essential cookies.
•    Legal obligation – for record-keeping, tax, and regulatory requirements.
•    Legitimate interests – to improve services, prevent fraud, ensure network security.
________________________________________
7. Sharing your information
We do not sell your data. We may share information with:
•    Payment processors (e.g., Stripe, PayPal).
•    Course/membership platforms (e.g., FreshLearn, Delenta or Heartbeat).
•    Email service providers (e.g., Email Octopus).
•    Professional service providers (e.g., accountants, IT support).
All providers are required to safeguard your data and process it only on our instructions.
________________________________________
8. Data retention
We keep personal data only as long as necessary for the purposes collected, including legal and accounting requirements.
•    Customer and transaction data: up to 7 years (for tax/legal reasons).
•    Mailing list data: until you unsubscribe or withdraw consent.
•    Coaching/course contributions: for the duration of the programme plus 12 months, unless you request earlier deletion.
________________________________________
9. International transfers
Some service providers may transfer data outside the UK (e.g., US-based email or course platforms). Where this occurs, safeguards such as Standard Contractual Clauses or equivalent protection are in place.
________________________________________
10. Security
We use appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. However, no system is completely secure, and you acknowledge that you provide data at your own risk.
________________________________________
11. Your GDPR rights
You have the following rights under UK GDPR:
•    Access – request a copy of the data we hold about you.
•    Rectification – correct inaccurate or incomplete data.
•    Erasure – request deletion of your data (“right to be forgotten”), subject to legal requirements.
•    Restriction – limit how we process your data.
•    Objection – object to processing based on legitimate interests or marketing.
•    Portability – request data transfer to another provider.
To exercise any of these rights, contact us at hello@elevatedlife.co.uk. We will respond within 30 days.
________________________________________
12. Complaints
If you believe your data has not been handled properly, please contact us first at hello@elevatedlife.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.
________________________________________
13. Updates to this policy
We may update this Privacy, Cookie & GDPR Policy from time to time. The latest version will always be posted on this page.