Privacy Policy
Last updated: 10/5/26
1. Who We Are
This website and course are operated by:
Business name: Calm & Confident
Owner: Abigail Porumb
Contact email: [email protected]
Website: learn.calmandconfident.co.uk
We are the “data controller” for the personal data you provide to us.
We are registered with the Information Commissioner's Office (ICO) under registration number ZC143380.
2. What Data We Collect
We may collect and process the following personal data:
Information you provide directly:
- Name
- Email address
- Any information you enter when signing up for our free resources or courses
- Messages you send to us via email or contact forms
Information collected automatically:
- IP address
- Browser type and version
- Device information
- Pages visited and usage behaviour on our site
3. How We Use Your Data
We use your personal data to:
- Provide access to free resources and courses
- Deliver email updates and marketing communications (where you have opted in)
- Respond to enquiries
- Improve our website and content
- Analyse website performance and user behaviour
- Comply with legal obligations
4. Legal Basis for Processing (UK GDPR)
Under UK GDPR, we rely on the following lawful bases:
- Consent – when you sign up for emails or free resources
- Contract – when you purchase or access a course
- Legitimate interests – to improve our services, analyse performance, and communicate relevant information. We ensure our interests do not override your rights and freedoms
- Legal obligation – where required by law
5. Email Marketing
We use Kit and other services to manage email communications.
If you choose to subscribe, we will:
- Store your name and email address securely in Kit, and may also be securely accessed, transferred, or stored using other systems for business and operational purposes. We only use trusted providers and take reasonable steps to ensure your data is handled securely.
- Send you emails related to free resources, home education content, and course offers
- Track basic email engagement (e.g. opens and clicks) to improve content
You can unsubscribe at any time by clicking the “unsubscribe” link in any email.
We only send marketing emails if you have actively opted in.
6. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Withdraw consent at any time
- Object to processing in certain circumstances
- Request data portability
- Request restriction of processing in certain circumstances
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.
To exercise any of these rights, contact us at: [email protected]
7. Data Storage and Security
Your data is stored securely using trusted third-party providers, including:
- Thinkific (course hosting platform)
- Kit (email marketing platform)
We take reasonable steps to protect your data from loss, misuse, or unauthorised access.
However, no online system is completely secure.
8. Third-Party Services
We use third-party services to run our business, including:
- Thinkific
- Kit
- YouTube
- Payment processors (such as Stripe or PayPal)
These providers process personal data on our behalf to deliver services such as course hosting, email delivery, video content, and payment processing, in accordance with their own privacy policies.
Some of these providers are located outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.
9. Cookies
Our website uses cookies to improve your browsing experience.
We may use cookies to:
- Understand how visitors use our site
- Improve web performance
- Remember user preferences
- Measure marketing effectiveness
Types of cookies used:
- Essential cookies – required for the website to function
- Analytics cookies – help us understand site usage (e.g. page visits)
- Marketing cookies – may be used to measure ad performance
We will request your consent before placing non-essential cookies on your device, in accordance with the Privacy and Electronic Communications Regulations.
You can accept or reject non-essential cookies through our cookie banner when you first visit the site.
Non-essential cookies are only set after you have given consent via the cookie banner.
Managing cookies:
You can control or disable cookies through your browser settings.
Disabling cookies may affect how the website functions.
10. Data Retention
We keep personal data only for as long as necessary:
- Email subscribers – until you unsubscribe or request deletion
- Course students – for the duration of your access and as required for legal, tax, and accounting purposes (typically up to 6 years)
- Website analytics – retained for a limited period (typically up to 26 months)
11. Children’s Privacy
Our services are not intended for children under 16.
We do not knowingly collect personal data from children without parental consent.
If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.
12. Changes to This Policy
We may update this policy from time to time.
Any changes will be posted on this page with an updated revision date.
13. Contact Us
If you have any questions about this Privacy Policy or your data, contact:
Email: [email protected]