Privacy Policy

1. Who We Are

This website, iamchloelawless.com, is operated by Chloe Lawless (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal data transparently.

For any privacy-related questions, contact us at [email protected]

2. What Data We Collect

We may collect the following information:

• Contact information — name and email address when you submit an enquiry form
• Usage data — pages visited, time spent, referral source, device type and browser (collected via Google Analytics with your consent)
• Cookie preferences — your consent choice stored locally on your device

We do not collect payment information directly. Any bookings made through Calendly are subject to Calendly’s Privacy Policy.

3. How We Use Your Data

We use your personal data to:

• Respond to enquiries you submit through the website
• Understand how visitors use the site so we can improve it
• Send communications you have opted into (e.g. newsletters)

We will never sell your data to third parties, and we will never share it except as described in this policy.

4. Cookies & Analytics

We use Google Analytics 4 (GA4) to understand site traffic. GA4 uses cookies to distinguish unique visitors and track page views.

These cookies are only set after you give consent via the cookie banner. If you decline, no analytics cookies are placed and no data is sent to Google. You can change your preference at any time by clearing your browser’s local storage for this site.

IP addresses are anonymised before being sent to Google. We do not use Google Signals or advertising features.

5. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

• Consent — for analytics cookies and marketing communications
• Legitimate interests — for responding to enquiries and improving the website

6. Third-Party Services

We use the following third-party services:

• Google Analytics (Google LLC) — website analytics. Data may be transferred to the US under EU-US Data Privacy Framework.
• Calendly — appointment scheduling

7. Data Retention

We retain enquiry data for as long as necessary to respond to your request and for up to 12 months afterwards for follow-up purposes. Analytics data is retained in Google Analytics for 14 months, after which it is automatically deleted.

8. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Restrict processing — ask us to limit how we use your data
• Object — object to our processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Children’s Privacy

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority.

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.