Privacy Policy

1. Who we are

The data controller for this website is:

If you have any questions about this privacy policy or how your personal information is used, you can contact us at the email address above.

2. What personal information we collect

We may collect the following information depending on how you use the website.

Contact form

If you use the contact form, we collect:

• your name
• your email address
• your comments or message

This information is used to receive, read and respond to your enquiry.

Email list or newsletter

If you sign up to receive emails from us, we may collect:

• your name, if requested
• your email address
• information about your subscription preferences
• basic information about how you interact with our emails, depending on the email platform used

You can unsubscribe from marketing or newsletter emails at any time by using the unsubscribe link in the email, or by contacting us through the contact form.

Digital products

If you buy a digital product from us, the payment or delivery platform may collect information such as:

• your name
• your email address
• payment details
• billing information
• order history

Payment details are usually handled directly by the payment provider or sales platform. We do not intend to store full card details ourselves.

The exact platform has not yet been chosen. Once a platform is in use, this policy should be updated to name it.

Website usage information

We may collect basic technical information when you visit the website, such as:

• IP address
• browser type
• device type
• pages visited
• approximate location based on technical information
• how you found or interacted with the website

This may be collected through hosting, security tools, analytics tools, cookies or similar technologies.

3. How we use your information

We use personal information to:

• respond to messages sent through the contact form
• send emails or newsletters where you have signed up for them
• provide digital products you have bought
• manage orders, refunds or customer support
• protect the website from spam, abuse or security threats
• understand how the website is used and improve it
• meet legal, tax, accounting or regulatory obligations

The ICO says privacy information should explain why personal data is used, how long it is kept for, and who it is shared with. It also says privacy notices should be easy to read and easy to access.

4. Our lawful bases for using personal information

Under UK data protection law, we need a lawful basis to use personal information. Depending on the situation, we rely on one or more of the following:

Consent

We rely on consent when you choose to sign up for email updates or where consent is required for non-essential cookies or marketing tools.

You can withdraw consent at any time.

Contract

We rely on contract where we need to process information to provide a digital product or service you have requested or bought.

Legitimate interests

We rely on legitimate interests to respond to enquiries, manage the website, prevent spam or abuse, and understand how the website is being used, provided those interests do not override your rights and freedoms.

Legal obligation

We may process information where necessary to comply with legal, tax, accounting or regulatory requirements.

5. Contact form and Resend

The contact form uses Resend to send your message to the Magical Thinking for Ordinary People inbox.

Contact form submissions are not intentionally stored in the website database. They are sent by email so that we can read and respond to them.

Your message may still exist in email systems, backups, server logs or the systems of relevant service providers for a limited time, depending on how those services operate.

6. Email list and newsletters

If you sign up to receive emails, your information will be handled by Kit, the email platform we use for newsletter and mailing list management.

Kit may process information such as your email address, name if provided, subscription status, and basic engagement information. You can read Kit's privacy information at kit.com/privacy.

Newsletter emails may include simple tracking, such as whether an email was opened or whether a link was clicked. If this is used, it helps us understand what is useful to readers and improve future emails.

You can unsubscribe at any time.

7. Analytics and cookies

We may use analytics to understand how people use the website. Analytics may tell us things like which pages are visited, how long people spend on the site, and which devices or browsers are used.

Analytics are not currently fully set up. Once an analytics provider is chosen, this policy should be updated to name it.

Some analytics tools use cookies or similar technologies. If we use non-essential cookies, we will provide appropriate information and, where required, ask for consent before using them.

The ICO explains that website visitors need to be told when cookies are used and what they do. It also says that consent is needed for cookies that are not strictly necessary for the website to run.

8. Spam prevention and security

We may use tools such as Cloudflare Turnstile to help protect the website from spam, bots and abuse.

These tools may process technical information about your visit, such as your IP address, browser information and interaction with the website, in order to decide whether the form is being used by a real person.

This is used for security and spam prevention.

9. Digital product sales

We may sell digital products through the website or through a third-party sales platform.

The sales platform may process your personal information to:

• take payment
• deliver digital products
• send receipts
• manage refunds
• prevent fraud
• meet tax or accounting requirements

Once the sales platform is confirmed, this privacy policy should be updated to name the provider.

10. Social media links

The website may link to social media profiles, including Instagram and TikTok.

At the moment, we only intend to link to these platforms rather than embed social media content directly on the website.

If you click a social media link, the relevant platform may collect information about you in line with its own privacy policy. We are not responsible for how those platforms use your data.

11. Who we share information with

We only share personal information where necessary. This may include sharing information with:

• website hosting providers
• email delivery services, such as Resend
• email newsletter platforms
• payment processors or digital product platforms
• analytics providers
• security and anti-spam providers, such as Cloudflare
• professional advisers, where necessary
• legal or regulatory authorities, where required

We do not sell your personal information.

12. International transfers

Some of the services we use may process personal information outside the United Kingdom.

Where this happens, we expect those providers to use appropriate safeguards, such as recognised data transfer mechanisms, contractual protections or equivalent arrangements required by data protection law.

13. How long we keep information

We keep personal information only for as long as reasonably necessary.

Contact form messages will usually be kept for up to 12 months after the last contact, unless we need to keep them longer for legal, accounting, safety, dispute or legitimate business reasons.

Newsletter information will be kept until you unsubscribe or ask us to delete it, unless we need to keep limited information for legal or suppression-list purposes.

Order and transaction records may need to be kept for longer where required for tax, accounting or legal reasons.

The ICO says privacy notices should explain retention periods, or at least the criteria used to decide how long information is kept.

14. Your rights

Under UK data protection law, you may have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct inaccurate information
• ask us to delete your information
• ask us to restrict how we use your information
• object to certain uses of your information
• ask for your information to be transferred to another service
• withdraw consent where we rely on consent

These rights do not apply in every situation, but you can contact us through the contact form if you want to make a request.

The ICO says privacy notices should include people's information rights and explain the right to withdraw consent where consent is used.

15. Complaints

If you are unhappy with how we use your personal information, please contact us first through the contact form.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office.

Website: www.ico.org.uk

16. Children

This website is primarily intended for adults.

The content on Magical Thinking for Ordinary People is general wellbeing and reflective content. It is not aimed specifically at children, and we do not knowingly collect personal information from children.

17. Changes to this policy

We may update this privacy policy from time to time, especially when we add analytics, email services, payment platforms or new website features.

The updated version will be posted on this page with a new "last updated" date.