Privacy policy

The privacy of your information is important. Your use of this Website and any of its content, including but not limited to programs, products, services, e-books, videos, blog posts, video coaching, social media and/or other communication (collectively referred to as “Website”), may require the collection of your information. The below Agreement (“Agreement”) sets out what information is collected and how it is used, and this Agreement, along with the T&C and the Disclaimer, governs your use of this Website. By viewing, accessing and using this Website, you agree to accept all parts of this Privacy Policy. If you do not agree to this Privacy Policy, do not access or use this Website.

Note that this Privacy Policy may be revised at any time. Your continued use of this Website means that you agree to be bound by the revised Agreement. Any modifications will become effective on the date they are first posted to this Website. In the event of a material change, Hanne Arts will let you know via email and/or a prominent notice on this Website.

Note that visitors of this Website are referred to as “you”, and the owner of the Website is “Hanne Arts”, “Hanne”, “me” or “I”.

Who is responsible for your data

Hanne Arts is the data controller for the personal information described in this policy. This means I decide why and how your information is used. I am based in the United Kingdom, and any questions about your data can be sent to hanne@hannearts.co.uk.

How information is collected and used

My intent is to keep your information as safe as possible. Information is used in good faith, with your best interests in mind. Please read the details below carefully.

This Website is hosted on Cloudflare Pages. The course, private community and checkout run on the Wix.com platform, so your data may also be stored through Wix.com’s data storage, databases and general Wix.com applications. They store your data on secure servers behind a firewall, and all direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

Anonymous information

Hanne Arts uses Cloudflare Web Analytics to collect aggregate information about how the Website is used — for example, page views and referrers. Cloudflare Web Analytics is cookieless and does not identify individual visitors. I do not use advertising or cross-site tracking.

Cookies

The Website itself does not set non-essential tracking cookies. Some embedded forms (for example, Systeme.io) and third-party links may set cookies when you interact with them, and those providers’ own privacy policies apply. You can block or delete cookies in your browser at any time. Because I do not run non-essential tracking cookies, I do not display a cookie banner.

Third-party links on this Website may also use cookies or collect other information when you go to their website. Hanne Arts does not control the collection or use of your information on these external websites and shall not be held accountable. Please read the privacy policy of these websites separately should you make use of them.

Personally identifiable information

The only personally identifiable information that may be collected from you when accessing this Website includes that which you explicitly provide when contacting me and/or when accessing, using or purchasing any of the content and services — for example, when you book a coaching session or join a waiting list. The information collected will be kept to a minimum and may include, but is not limited to, your name and your email address. In the case that you purchase an e-book, program or any other content available for a fee, Hanne Arts may also request billing information, including name, address and payment details, solely for processing the payment in order to deliver the content to you under our contractual obligation (more on this below).

The purpose of collecting personally identifiable information is to provide the core functionality of this Website, to provide the requested or purchased content and services, and to respond to any queries and other communications made by you. Details of how marketing messages are sent, and how to opt in or out of them, are set out under “Marketing” below.

When you submit personally identifiable and other information through the Website, you agree to allow Hanne Arts to access, store and use these details for those purposes.

Coaching and program information (including health-related data)

If you become a coaching or program client, I collect and process more than basic contact details. This includes your name, contact details, payment details, our agreements and correspondence, session notes, and the goals, progress and challenges you choose to share with me.

Some of this is special category personal data under UK GDPR — that is, information relating to your health, including your eating disorder and your recovery. I only collect this because you provide it voluntarily and because it is necessary to deliver the coaching services you have asked for, and on the basis of your explicit consent, which you give when you sign a coaching agreement. You can withdraw that consent at any time by contacting hanne@hannearts.co.uk, although this may mean I can no longer deliver the services to you.

This information is stored in password-protected locations. It is never sold, and it is never shared with third parties except in the circumstances set out under “Confidentiality” below.

Assessment information (including health-related data)

When you complete the recovery assessment, I collect your name, email, age band, answers and any optional note. Some of this is special category health data under UK GDPR. I rely on your explicit consent, which you give by ticking the consent box before your result is shown. I use it to send your result and, if you book a clarity call, to prepare for that call and suggest suitable support. Marketing emails are separate and optional. Only I can access the responses unless you ask me to share them. You can withdraw consent and ask me to delete your responses at any time by emailing hanne@hannearts.co.uk.

Financial information

The information I collect will always be kept to a minimum. However, financial information may be collected in the event that you purchase any of the content and services. This information is collected and stored by the third-party vendors used to sell this content, and will not be collected or saved by me personally. Although Hanne Arts makes efforts to select vendors that will respect and protect your privacy, Hanne has no control over any third parties and makes no guarantees about, and assumes no responsibility for, the information or services provided by these third parties. Please read the privacy policy of any third parties and consider this your personal responsibility.

Where your information comes from

The information I hold is provided directly by you — through forms on this Website, emails, WhatsApp messages, booking forms, payment details and our conversations. I do not buy data, and I do not collect information about you from third parties other than the payment and analytics data described above.

Other information

Hanne may collect and analyse other anonymous information, including but not limited to the number of users, traffic patterns and demand for certain content, for the purpose of monitoring server and software performance and improving the Website.

Use of your information

Your information will only ever be used for the following purposes:

• Contacting you. Hanne may contact you using the contact details you provide, based on one of these lawful grounds for processing:
  • Consent. Hanne may contact you if you give clear, unambiguous, affirmative consent — for example, by ticking an unticked opt-in box for the newsletter.
  • Contract. Hanne will contact you under the contractual obligation to deliver goods or services that you have purchased through the Website.
  • Legitimate interest. Hanne may contact you where this is in your legitimate interest and expected of the service — for example, sending you practical information about a program you have joined, or following up on an enquiry you made. You can always opt out of communications.
• Notifying you regarding your account or any problems with your account.
• Resolving disputes or responding to queries.
• Collecting fees or money owed for a service or resource.
• Processing payment — as set out above, payment details may be collected by third-party vendors if and when you purchase any content from or through this Website.
• Improving the quality and content of this Website — anonymous user data may be collected and analysed to improve this Website.
• Aggregating demographic information — anonymous demographic information may be shared with third parties. This would never include personal or confidential data.
• Assisting in providing better services to you by tailoring the services to meet your needs.
• Informing you of any changes to the Website, or, if requested, sending you additional information or responding to queries.
• Carrying out marketing and promotional purposes, where you have opted in (see “Marketing”).
• As otherwise necessary to enforce the T&C, Disclaimer, Privacy Policy and any other applicable laws.

This may be done through email, mail, telephone, or text/WhatsApp messages.

Note that whenever you voluntarily make your data available for viewing by others online through this Website — for example in the form of social media comments or other public comments — it may be seen, collected and used by others. Hanne Arts will not be held responsible for any unauthorised or improper use of the information collected in this manner.

Marketing

Marketing messages are optional and are sent only where you have given clear, affirmative consent — for example, by ticking an unticked box when joining the newsletter or a waiting list. Every marketing email includes an unsubscribe link, and you can withdraw your consent at any time by contacting hanne@hannearts.co.uk or clicking unsubscribe.

Withdrawing consent will not affect the lawfulness of processing carried out before you withdraw it, and will never affect any coaching or program you have already purchased.

Who the information is shared with

I do not sell your information. Where necessary to run the business, your information is processed by the following categories of service provider:

• Cloudflare — website hosting and cookieless analytics
• Wix — course, community and checkout
• Google (Google Meet, Google Sheets and Google Apps Script) — video calls and assessment responses
• Systeme.io — newsletter, email delivery and contact forms
• Calendly — scheduling
• Stripe, PayPal, Wise and my bank — payments
• WhatsApp (Meta) — client messaging, where you have chosen to use it

I only share the minimum information each provider needs to do its job, and I have no control over how these providers use your data beyond what their own privacy policies permit. Please review those policies.

Your information will not be disclosed to anyone else except: with your express written permission; where required by a court order or legal subpoena; or where in good faith it is believed that this is necessary to comply with the law, or to prevent an emergency involving danger of death or serious physical injury to you or any other person.

International transfers

My clients are located around the world, and some of the providers listed above operate outside the UK. Where your personal information is transferred outside the UK, I rely either on UK adequacy regulations (for countries and organisations confirmed as providing an adequate level of protection) or on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Data retention

Hanne Arts retains your personal data for the minimum amount of time necessary to provide you with the information and/or content that you requested or purchased. In practice:

• Marketing and newsletter data — kept until you unsubscribe or ask me to delete it.
• Website analytics — Cloudflare Web Analytics is aggregate and cookieless; I do not keep individual visitor profiles.
• Assessment responses — kept for up to two years and then deleted. If you become a coaching client, the coaching record retention period applies.
• Financial and accounting records — kept for six years, as required by UK tax law.
• Coaching records (agreements, session notes and our messages) — kept for up to seven years after our work together ends, so that I can defend any potential complaint or claim and meet my professional and insurance record-keeping obligations; after that they are deleted or anonymised.

Hanne may retain certain information for longer periods where necessary for legal, contractual and/or accounting obligations.

Confidentiality

Your information will remain confidential and used only for the purposes described in this Agreement. If you enter into a separate agreement with Hanne Arts — for example when accessing content such as 1:1 coaching — you will also be subject to the terms of that agreement, which prevail in the event of disagreement or conflict. I will never disclose any confidential information except with your express written permission, wherever required by court order or legal subpoena, or where in good faith it is believed that this is necessary to comply with the law or to prevent an emergency involving danger of death or serious physical injury to you or any other person.

Testimonials

I only publish testimonials where the person has given specific, separate consent for me to do so, and I will not publish a testimonial together with your name, photograph, video or any other identifying detail unless you have separately and explicitly agreed to that. You can ask me to remove a testimonial at any time. Nothing on this Website will be treated as a condition of using my services.

Security

Hanne Arts takes reasonable technical and organisational precautions to prevent the loss, misuse or unauthorised access, use or alteration of your personal information. However, due to the nature of email and the internet, I cannot guarantee the privacy or confidentiality of your personal information. You agree that Hanne Arts may store and process your information in networked or electronic storage, on servers that may be accessible from various countries via an internet connection. As such, it is not always practicable to know in which country your information may be stored or accessed.

If a personal data breach is likely to result in a risk to your rights and freedoms, I will assess it promptly and, where UK GDPR requires it, notify the Information Commissioner’s Office and, if appropriate, affected individuals.

Automated decisions

I do not use automated decision-making or profiling that produces legal effects or similarly significant effects about you. Every decision relating to your coaching or your purchase is made by me.

Your rights

Under UK GDPR you have the right to:

• Request information about how your data and information is being used, and request a copy of the personal data I hold about you;
• Restrict processing if you believe the information is inaccurate, unlawful, outdated or no longer needed;
• Request at any time the correction or deletion of any personal information that may be held by Hanne Arts;
• Withdraw your consent at any time to the processing of your information;
• Object to processing, or to data portability, where applicable;
• Object to or submit a complaint if you feel that your data is being used in a way that is unlawful.

To exercise any of these rights, contact hanne@hannearts.co.uk. Hanne Arts aims to respond as soon as reasonably practicable, but note that this may take up to one calendar month from the date your communication is received. Hanne Arts will inform you if this timeframe is not achievable and may extend it as agreed and/or as permitted by applicable law. Hanne Arts may charge a fee to cover the costs of meeting your request if it is considered unfounded or excessive.

You also have the right to lodge a complaint with the UK supervisory authority at any time: Information Commissioner’s Office (ICO) — ico.org.uk · 0303 123 1113 · casework@ico.org.uk

In some circumstances, and subject to legal obligations, Hanne Arts may not be able to grant access to your personal information or otherwise meet your requests with respect to your personal information.

Children

Hanne Arts does not collect any information from anyone under the age of 18, in compliance with the Children’s Online Privacy Protection Act (COPPA) and the UK GDPR. By using this Website, you affirm that you are 18 years old or over and that you are legally able to enter into this Agreement. Viewing and using this Website if under the age of 18 is unauthorised, unlicensed and in violation of this Agreement.

European Union General Data Protection Regulation (GDPR)

The GDPR establishes a uniform data protection law across the European Economic Area (EEA) and aims to protect the privacy and use of EEA residents’ personal data. This Website aims to comply with all applicable GDPR and UK GDPR requirements. If you believe that any of its regulations are not adhered to, please contact hanne@hannearts.co.uk.

Contact

By using the Website you agree to all parts of the above Privacy Policy, as well as the Disclaimer and T&C. If you have any questions about this Agreement, please contact Hanne Arts at hanne@hannearts.co.uk.