🔒 Privacy Policy

Effective Date: 08/04/2025

This Privacy Policy outlines how Esterria (trading name of Jan Mayfield) collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and other applicable privacy laws.

By using this website and engaging with our services, you agree to the terms outlined below.

1. Data Controller

Name: Janet Mayfield
Trading As: Esterria (Jan Mayfield)
Location: United Kingdom
Email: jansmail@hotmail.co.uk

2. Information We Collect

We may collect and process the following personal data:

Full name

Email address

Telephone number (if provided)

Postal or billing address (where applicable)

Payment details (processed securely via trusted third-party providers)

Information relating to services purchased, sessions booked, or course participation

Any personal messages or details voluntarily submitted through our contact form, email, or communication platforms

3. How We Use Your Data

Your data is collected and processed to:

Fulfil contractual obligations for services, courses, or product delivery

Respond to inquiries and provide client support

Manage appointments, sessions, and client relationships

Send administrative or service-related communications

Provide email updates or newsletters (with your consent)

Comply with legal, tax, and financial record-keeping obligations

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent – when you opt-in to newsletters or marketing communication

Contract – when processing is necessary to deliver services/products you’ve purchased

Legal Obligation – for tax or regulatory compliance

Legitimate Interest – to operate and improve our services, where your rights are not overridden

5. Data Storage & Security

Data is stored securely with appropriate administrative, technical, and physical safeguards to prevent unauthorised access, disclosure, or loss.

Payment data is never stored directly on our website or servers. All payments are securely processed by trusted third-party providers (e.g., PayPal, Stripe).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Typically, data related to financial transactions is kept for six years in accordance with UK tax law.

7. Third-Party Sharing

We do not sell, trade, or rent your personal information.

We may share data with third parties only when necessary, such as:

Email marketing platforms (e.g., Mailchimp, ConvertKit), with your consent

Payment processors (e.g., Stripe, PayPal)

Web hosting and service platforms that support our operations

All third-party services used comply with relevant data protection regulations.

8. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

Access the personal data we hold about you

Request correction of inaccurate or incomplete data

Request deletion of your data under certain circumstances

Object to processing or request restriction

Withdraw your consent at any time for marketing communications

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at: jansmail@hotmail.co.uk