Privacy Policy

Who we are

This website is owned and operated by Naomi Morgan, trading as Naomi Morgan, a sole trader based at Avenida de Almeria 27, Turre, 04639, Almeria, Spain. For the purposes of data protection law, Naomi Morgan is the “data controller” of the personal data described in this policy.

If you have any questions about this policy or how your data is used, you can contact us at [email protected].

The personal data we collect

We collect personal data when you interact with this website or our programmes, including when you:

• Register for a free training, challenge or opt-in, such as The Audacity Experiment.
• Enquire about, apply for, or purchase a coaching programme or mastermind, such as Delusional Wealthy Woman or the Freedom & Fire Mastermind.
• Join a private community linked to one of our programmes, such as our Telegram groups.
• Attend a live call or masterclass hosted on Zoom.
• Send us a message through a contact form or email.

The personal data we collect typically includes your name, email address, phone number (where provided), and any information you choose to share with us in messages, applications or during coaching. Where you make a payment, our payment processor Stripe collects and processes your payment card details directly; we do not see or store your full card details ourselves.

How we use your data and our legal basis for doing so

We use your personal data for the following purposes, and rely on the legal bases shown against each:

• To deliver a free training or challenge you've registered for (sending you access details, reminders and related community information) — legal basis: consent, and our legitimate interest in running the event you asked to join.
• To deliver a paid coaching programme or service you've purchased — legal basis: performance of a contract with you.
• To send you marketing emails about future programmes, offers or events — legal basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
• To respond to enquiries and provide customer support — legal basis: legitimate interest in running our business responsively.
• To meet our legal and accounting obligations (for example, keeping records of payments) — legal basis: legal obligation.

Who we share your data with

We use a small number of trusted third-party services to run our business and deliver our programmes. These providers process personal data on our behalf, and we only share what each service needs to do its job:

• Hey Client / GoHighLevel — our website, opt-in forms, CRM and email delivery platform.
• Telegram — used to run our private community groups for challenge and programme participants.
• Zoom — used to host our live masterclasses, calls and coaching sessions.
• Stripe — used to process payments securely for any paid programmes or services.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We do not currently use any analytics or advertising tracking tools on this website.

Where your data is stored and processed

The services listed above may store and process data outside the UK and European Economic Area (EEA), including in the United States. Where this happens, those providers maintain their own safeguards for international data transfers (such as Standard Contractual Clauses), as set out in their own privacy policies.

How long we keep your data

We keep personal data for as long as necessary to provide our services, maintain our business records, and meet our legal and accounting obligations. If you unsubscribe from marketing emails, we will stop using your data for that purpose, though we may retain a record that you unsubscribed to respect your preference.

Cookies

This website does not currently use analytics or advertising cookies. Some of the third-party services we use to run the site and process payments (such as Hey Client/GoHighLevel and Stripe) may set essential cookies needed for the site and checkout to function and to prevent fraud. These are not used to track you across other websites.

Your rights

Under UK and EU data protection law, you have the right to:

• Ask us what personal data we hold about you, and request a copy of it.
• Ask us to correct any inaccurate or incomplete data.
• Ask us to delete your data, in certain circumstances.
• Ask us to restrict or object to how we use your data, in certain circumstances.
• Withdraw your consent to marketing at any time.
• Request that we transfer your data to another provider, where technically possible.

To exercise any of these rights, contact us at [email protected]. If you're not satisfied with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

Children

Our website and programmes are intended for adults. We do not knowingly collect personal data from anyone under the age of 18.

Changes to this policy

We may update this policy from time to time to reflect changes in our business or the law. We'll update the “last updated” date at the top of this page whenever we do.

Contact us

If you have any questions about this policy, please contact us at [email protected].