Privacy & Cookie Policy — Little Beatrice

This policy applies to the website operated by Little Beatrice & Eagle Works Design and covers the personal data we collect when you visit our site, purchase our products, or get in touch with us. Please read it carefully.

Section 1

Who We Are

This website is operated by Little Beatrice & Eagle Works Design ("we", "us", or "our"). We are the data controller responsible for any personal data you provide through this website.

For the purposes of UK GDPR and the EU General Data Protection Regulation (EU) 2016/679, the data controller is:

Little Beatrice & Eagle Works Design
Email: hello@littlebeatrice.co.uk
Website: littlebeatrice.co.uk

If you have any questions about how we handle your personal data, please get in touch using the contact details above or via the Contact section at the bottom of this page.

Section 2

What Information We Collect

We only collect information that is necessary for the legitimate running of our business. The types of data we may collect are:

Information you provide directly

Purchase information — when you buy our mini course, your payment is processed by Stripe. We do not store your card details. Stripe may share with us your name and email address in order to fulfil your order.
Contact information — if you email us or use a contact form, we collect your name and email address along with the content of your message.

Information collected automatically

Usage data — including your IP address, browser type and version, the pages you visit, the time and date of your visit, and the time spent on pages.
Cookie data — small files placed on your device that help us understand how you use our site. See our Cookie Policy for full details.

Information from third parties

Stripe — our payment processor may provide us with information related to completed transactions, including your name and email address, to enable fulfilment of your purchase.

We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Section 3

How We Use Your Information

We use the personal data we collect only for the purposes set out below:

To fulfil your purchase — processing your order, delivering digital products, and sending you a receipt or confirmation email.
To provide customer support — responding to enquiries, resolving issues with your order, and communicating with you about your purchase.
To improve our website — analysing how visitors use our site so we can make it better and more useful.
To comply with legal obligations — keeping records as required by law (e.g., for tax and accounting purposes).
To protect our legitimate interests — preventing fraud and ensuring the security of our website and services.

We do not use your personal data for automated decision-making or profiling that produces legal or significant effects on you.

We will never sell your personal data to third parties, and we will never use it for unsolicited marketing without your explicit consent.

Section 4

Our Legal Basis for Processing

Under UK GDPR and EU GDPR, we are required to have a lawful basis for processing your personal data. The bases we rely on are:

Contract (Article 6(1)(b)) — processing is necessary to fulfil our contract with you when you purchase our products.
Legal obligation (Article 6(1)(c)) — processing is necessary to comply with our legal obligations, such as financial record-keeping.
Legitimate interests (Article 6(1)(f)) — processing is necessary for our legitimate interests (such as fraud prevention and site security), provided those interests are not overridden by your rights and interests.
Consent (Article 6(1)(a)) — where we use non-essential cookies or analytics, we will ask for your consent and only process data if you agree. You may withdraw consent at any time.

Section 5

Third Parties We Share Data With

We share data only with trusted third parties where necessary to operate our business. These include:

Stripe (Payment Processing)

All payments are processed securely by Stripe, Inc.. When you make a purchase, Stripe collects your payment information directly under their own privacy policy. We do not store your card number, sort code, or account details on our systems. Stripe may share your name and email address with us to confirm your transaction.

Email and Customer Communications

If we use a third-party email service to send you order confirmations or respond to your enquiries, that provider will process your email address on our behalf under a data processing agreement.

Hosting and Infrastructure

Our website is hosted by a third-party provider. That provider may process access logs (including IP addresses) as part of normal server operations.

We do not share your personal data with any other third parties unless required to do so by law (for example, in response to a valid court order or legal obligation).

Section 6

International Data Transfers

Some of our third-party providers (including Stripe) are based outside the UK and the European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

Adequacy decisions by the UK Government or European Commission
Standard Contractual Clauses (SCCs) approved by the relevant authority
Other legally recognised transfer mechanisms

You can find details of the safeguards used by Stripe in their privacy policy.

Section 7

How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described in this policy, or as required by law:

Purchase records — retained for 7 years in line with HMRC requirements for financial records.
Customer support communications — kept for up to 2 years after our last correspondence, in case follow-up is needed.
Website usage data / analytics — retained for up to 26 months from the date of collection.
Cookie consent records — retained for 12 months from the date consent was given or withdrawn.

When data is no longer needed, it is securely deleted or anonymised.

Section 8

Your Rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your personal data in certain circumstances ("right to be forgotten").
Right to restriction — you can ask us to restrict how we process your data in certain circumstances.
Right to data portability — you can ask us to provide your data in a structured, machine-readable format where technically feasible.
Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@littlebeatrice.co.uk. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the relevant supervisory authority:

UK residents: Information Commissioner's Office (ICO) — ico.org.uk or call 0303 123 1113
EU residents: The supervisory authority in your country of residence

Section 9

Cookie Policy

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences and understand how you use it. This section explains what cookies we use and how you can control them.

What is a cookie?

A cookie is a small piece of data stored in your browser. Cookies cannot harm your device and do not contain personal information such as your name or payment details on their own. They can, however, be used in combination with other information to identify you.

Types of cookies we use

Category	Cookie Name / Provider	Purpose	Duration
Strictly Necessary	lb_cookie_consent	Stores your cookie consent preference so we don't ask again on every visit.	12 months
Strictly Necessary	Stripe (__stripe_mid, __stripe_sid)	Set by Stripe to enable secure payment processing. These are required for the checkout to function.	Session / 1 year
Analytics (optional)	_ga, _gid (Google Analytics)	Used to understand how visitors interact with the website — which pages are popular and how people navigate the site. Only set if you accept optional cookies.	Up to 2 years

Strictly necessary cookies

Some cookies are essential for the website to work properly and cannot be switched off. These include the cookies set by Stripe to enable payment processing. We do not require your consent to use these cookies as they are necessary to provide the service you have requested.

Optional / analytics cookies

If you accept optional cookies, we may use analytics tools such as Google Analytics to understand how visitors find and use our site. This helps us improve the experience for everyone. Analytics cookies collect information in an aggregated, anonymised way where possible — we do not use them to identify you personally.

We will only place optional cookies if you give your consent via the cookie banner when you first visit our site.

How to control or delete cookies

You can withdraw your consent to optional cookies at any time by adjusting your browser settings or clearing cookies from your device. You can also use the following links to opt out of specific third-party analytics:

Google Analytics: Google Analytics Opt-out

Please note that blocking all cookies may affect the functionality of some parts of our website, including the payment process. Most browsers allow you to manage cookie settings via their privacy or security preferences. Here are links to instructions for the most common browsers:

Section 10

Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last updated" date at the top of this page.

If we make material changes that significantly affect how we process your personal data, we will take reasonable steps to inform you (for example, by displaying a notice on our website). We encourage you to review this policy periodically to stay informed.

Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

Section 11

Contact Us

If you have any questions about this Privacy & Cookie Policy, wish to exercise your data rights, or have a concern about how we handle your personal information, please get in touch:

Little Beatrice & Eagle Works Design
Email: hello@littlebeatrice.co.uk
Website: littlebeatrice.co.uk

We aim to respond to all privacy-related requests within 30 days. If your matter is complex, we may extend this period by a further two months, but we will let you know promptly if that is the case.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.