Privacy Policy
Privacy Policy
Last updated: 11 June 2026
1. Introduction
This Privacy Policy explains how Samantha Jane Slater ("I", "me", "my") collects, uses, stores and protects your personal data when you visit or use this website.
I am committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data Use and Access Act 2025.
The data controller responsible for your personal data is:
Samantha Jane Slater
Leybourne, Southend Road, Bradfield Southend, RG7 6ES
2. Definitions
To help you understand this policy, here are some key terms used throughout:
We / I / Me refers to Samantha Jane Slater, the data controller responsible for this website.
You means the individual visiting or using this website.
Personal Data means any information that can identify you directly or indirectly — for example, your name, email address, or IP address.
Cookies are small files placed on your device when you visit a website. They store information about your visit and are explained in more detail in the Cookies section of this policy.
Usage Data means information collected automatically when you use the website, such as your IP address, browser type, pages visited, and time spent on the site.
Service Providers are third party companies or individuals who process data on my behalf — for example, my website platform or email marketing software.
The ICO is the Information Commissioner’s Office — the UK’s independent authority for data protection. You can contact them at ico.org.uk.
3. What Data I Collect and Why
Personal Data You Provide Directly
When you interact with this website — for example by completing a contact form, booking a call, or signing up to receive emails — I may collect the following information:
• Full name
• Email address
• Phone number
• Postal address
Why I collect it and my lawful basis:
Purpose
Responding to your enquiry
Delivering a service you have purchased or enquired about
Sending you marketing emails you have signed up for
Managing your account if you have registered on this site
Lawful Basis
Legitimate Interests
Contract
Consent
Contract
You are never required to provide personal data simply to browse this website. Where data is collected on the basis of consent, you have the right to withdraw that consent at any time.
Usage Data (Collected Automatically)
When you visit this website, certain technical information is collected automatically. This may include:
• Your IP address
• Browser type and version
• Pages visited and time spent on them
• The device you used to access the site
This data is collected to monitor website performance and improve the user experience. The lawful basis for this processing is Legitimate Interests. This data does not directly identify you in most cases.
Data Collected via Cookies and Tracking Technologies
Some data is collected via cookies placed on your device. Please see Section 4 (Cookies) of this policy for full details of what cookies are used and how to manage your preferences.
4. Cookies
What are cookies?
Cookies are small files placed on your device when you visit a website. They help websites function properly and can also collect information about how you use the site.
Types of cookies used on this website
Essential Cookies
These are necessary for the website to function and cannot be switched off. They do not store any personally identifiable information. No consent is required for these cookies as they are strictly necessary to deliver the service you have requested.
Examples include cookies that:
• Remember your progress through a form or checkout
• Keep you logged in to a members area
• Ensure the site loads correctly on your device
Non-Essential Cookies
These cookies are not strictly necessary for the website to work but help improve your experience or allow me to understand how the site is being used. These cookies will only be placed on your device with your consent.
Examples include cookies that:
• Collect anonymous analytics data about pages visited and time spent on the site
• Remember your preferences for future visits
• Support third party tools and integrations used on this website (such as the website platform and email marketing software)
How to manage your cookie preferences
When you first visit this website you will be presented with a cookie banner asking for your consent to non-essential cookies. You can:
• Accept all cookies
• Reject non-essential cookies
• Manage your preferences in more detail
You can change your cookie preferences at any time by clicking the cookie settings link at the bottom of this page. You can also configure your browser to refuse some or all cookies — please note that doing so may affect how some parts of this website function.
Third party cookies
This website uses third party tools and platforms to operate and deliver services. These providers may set their own cookies on your device. I only work with providers who handle data responsibly, but I recommend reviewing their privacy policies for full details of their cookie use.
5. How Your Data is Shared
I do not sell your personal data to third parties. Your data will only be shared in the following circumstances:
Service Providers and Data Processors
I work with a small number of trusted third party providers who process data on my behalf in order to deliver my services. These include:
Website and CRM platform — this website is hosted and managed through a third party platform which processes data as part of its normal operation.
Email marketing — if you sign up to receive emails from me, your contact details are stored and managed within my email marketing system.
Payment processors — if you purchase a service, your payment is handled securely by a third party payment provider. I do not store your payment card details.
Secure backup — business files, which may include personal data, are backed up to a secure server to protect against data loss. This provider processes data on my behalf and is required to handle it securely.
Virtual assistant and operational support — I work with a trusted VA who may have access to certain personal data in order to support the day to day running of my business. This is governed by a Data Processing Agreement.
All service providers are required to handle your data securely and only for the specific purposes for which it has been shared.
Legal Requirements
I may disclose your personal data if required to do so by law, or in response to a valid request from a public authority such as the police or a court.
Business Transfers
In the unlikely event that my business is sold or transferred, your personal data may form part of that transfer. If this happens, I will notify you in advance.
6. How Long I Keep Your Data
I will only keep your personal data for as long as is necessary for the purpose it was collected, or as required by law.
Type of Data
Client data
Course purchaser and lifetime access data
Email marketing data
Website usage and analytics data
Financial transaction records
Retention
6 years from end of contract
For the duration of the lifetime access entitlement
Until you unsubscribe or withdraw consent
26 months
6 years
Period Reason
Legal requirement for financial and contractual records
Necessary to honour contractual obligation of lifetime access
Consent-based processing ends when consent is withdrawn
Standard analytics retention period
HMRC legal requirement
Lifetime access products: Where a product or service has been sold with lifetime access, I will retain the personal data necessary to fulfil that commitment for as long as the access entitlement remains active. This is on the lawful basis of contract — it is necessary to keep this data in order to deliver the service you have purchased.
What happens when data is no longer needed
When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you.
Your right to erasure
You have the right to request that I delete the personal data I hold about you at any time, subject to certain legal exceptions. See Section 7 (Your Rights) of this policy for more details on how to make this request.
7. Your Rights
Under UK GDPR you have the following rights in relation to your personal data. All requests should be submitted by email to sam@samanthajaneslater.com. I will respond to all requests within one month of receipt. In some circumstances this deadline may be extended by a further two months where requests are complex or numerous — if this is the case I will let you know within the first month.
There is no charge for exercising any of these rights in most circumstances.
The Right of Access (Subject Access Request)
You have the right to request a copy of the personal data I hold about you. This is known as a Subject Access Request or SAR. To make a SAR, please contact me by email at sam@samanthajaneslater.com with as much detail as possible about what information you are requesting so that I can locate it efficiently.
I may need to verify your identity before processing your request. If I need further information from you in order to process your request, the one month response deadline will be paused until that information is received.
The Right to Rectification
If you believe that any personal data I hold about you is inaccurate or incomplete, you have the right to request that it is corrected. I will action this as soon as reasonably possible.
The Right to Erasure
You have the right to request that I delete the personal data I hold about you. This is sometimes called the “right to be forgotten.” I will action erasure requests promptly unless there is a legitimate legal reason to retain the data — for example where I am required to keep financial records for HMRC purposes, or where data must be retained to honour a contractual commitment such as lifetime access to a purchased product.
Where erasure is not possible in full, I will explain why and delete everything that can lawfully be removed.
The Right to Restrict Processing
You have the right to request that I limit the way I use your personal data in certain circumstances — for example whilst the accuracy of data is being contested, or where you have objected to processing and a decision is pending.
The Right to Data Portability
Where data has been processed on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, commonly used, machine readable format so that it can be transferred to another provider if you wish.
The Right to Object
You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have the absolute right to object to your personal data being used for direct marketing purposes at any time. If you object to direct marketing, I will stop processing your data for that purpose immediately.
Rights Related to Automated Decision Making
I do not currently use automated decision making or profiling in a way that produces legal or similarly significant effects on individuals. If this changes, this policy will be updated accordingly.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact me at:
Email: sam@samanthajaneslater.com
Post: Leybourne, Southend Road, Bradfield Southend, RG7 6ES
I will acknowledge your request promptly and respond within one month. If I am unable to action your request I will explain why.
If you are not satisfied with my response, you have the right to complain to the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
8. Complaints Procedure
Your right to complain
If you believe that I have not handled your personal data in accordance with UK GDPR or your rights under data protection law, you have the right to make a formal complaint directly to me. This right is established under the Data Use and Access Act 2025 and is in place from 19th June 2026.
How to make a complaint
You can submit a complaint by emailing me at sam@samanthajaneslater.com. Please include as much detail as possible about your concern, including:
• Your name and contact details
• A description of the issue
• The date or approximate timeframe when the issue occurred
• Any relevant correspondence or reference numbers if applicable
You can also write to me at:
Leybourne, Southend Road, Bradfield Southend, RG7 6ES
What happens next
Once I receive your complaint I will:
1. Acknowledge receipt within 30 days of receiving your complaint
2. Investigate the matter thoroughly and fairly
3. Respond to you promptly with the outcome of my investigation and any steps I am taking to resolve the matter
4. Keep a record of your complaint and how it was resolved
If your complaint involves a data breach
If your complaint relates to an unauthorised disclosure or loss of your personal data, please be aware that I am also required to notify the ICO of certain types of data breach within 72 hours of becoming aware of it. I will handle any such situation as a matter of urgency.
If you are not satisfied with my response
If you are unhappy with how I have handled your complaint, or if you do not receive a response within a reasonable time, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
9. Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in the law or in how I operate. When I make significant changes, I will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.
I recommend reviewing this policy periodically to stay informed about how I protect your data.
10. Contact
If you have any questions about this Privacy Policy or how I handle your personal data, please get in touch:
Email: sam@samanthajaneslater.com
Post: Leybourne, Southend Road, Bradfield Southend, RG7 6ES