Privacy Policy

I am Lottie, trading as Naturally Lottie, a sole trader based in England. I am the "data controller" for the personal information you give me, which means I am responsible for how it is used. If you have any questions about this policy, or about your information, send me a message from the contact page.

• Contact details: your first name and email address, when you fill in a form on this site or join my mailing list.
• What you tell me: your answers on the free coaching application, the Deeper Work application, the Healing Path questionnaire or the Bridging the Gap waitlist.
• Client information: if we work together, brief factual notes of our sessions, your booking details and your payment plan if you have one.
• Payment information: handled entirely by Stripe or your bank. I never see or store your card details.

Some of what you choose to share may be sensitive in nature, for example about your health, healing or personal history. Sensitive information is treated as such.

• To deliver the services you ask for, such as applications, sessions and programmes. This is my performance of a contract with you, or steps you take before one.
• To reply to you, and to follow up once if you start a form but do not finish it, so I can help you complete it. This is my legitimate interest in responding to people who reach out to me.
• To send my mailing list, only where you ticked the box to say yes. This is consent, and you can withdraw it at any time.
• To keep accurate records, meet my legal obligations, and maintain my professional insurance. This is my legal obligation and legitimate interest.

If you complete a form but do not tick the mailing list box, you will never be added to my mailing list. You will only hear from me about the thing you actually got in touch about.

I never sell your information, and I do not share it for anyone else's marketing. I use a small number of trusted third party providers built for this kind of work:

• Kit, my newsletter and email platform, which stores mailing list subscribers and sends my emails.
• Stripe, which takes payments and holds payment details under its own privacy policy.
• My website hosting and its security provider, which keep the site running and store your form responses on my behalf.
• A private spreadsheet where I keep my own working record of form responses. It is not public and only I can open it.

These services may process information outside the UK. Where that happens, standard contractual protections are in place, in line with UK data protection law.

• Mailing list subscribers: until you unsubscribe, or ask me to remove you.
• Form responses and applications: for up to two years, unless we go on to work together.
• Client notes and records: for up to six years after our work ends, which my professional insurance requires.
• Anything else: only for as long as there is a good reason to keep it.

You can ask me to delete your information sooner. Where I still hold something I am legally required to keep, I will tell you honestly what and why.

Your information is stored with password protected accounts, two factor authentication where available, and restricted access on my side. Form responses are held in a private area of this site that only I can reach, behind a passcode. If anything ever went wrong, I would tell you straight away.

Under UK data protection law, you have the right to:

• Ask for a copy of the information I hold about you.
• Ask me to correct anything that is wrong.
• Ask me to delete your information.
• Ask me to limit how I use your information.
• Object to me using your information, including for direct marketing.
• Ask for your information in a portable format, where this applies.
• Withdraw consent at any time, where I rely on consent, such as for the mailing list.

To use any of these rights, send me a message from the contact page. I will respond within one month. You do not have to explain why.

If you are unhappy with how I have handled your information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

If I change this policy, the current version will always live on this page. If a change is significant, I will say so clearly, and I will never use your information in a new way without a lawful basis for doing so.