Last updated: 04/04/2026
Stacey Barber Ltd, registered in England & Wales (Company No. 13919968), is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Notice explains what personal information we collect, how we use it, how it is stored, and your rights.
What personal information do we collect?
We may collect and process the following information:
• Your name
• Contact details (email address, telephone number, postal address)
• Information you provide via forms, emails, or correspondence
• Preferences and interests related to our services, including The Purposeful Professional Membership
• Technical data such as IP address and website usage (via cookies and analytics)
We do not intentionally collect sensitive personal data (such as health information).
How do we collect your information?
We collect your data when you:
• Contact us via our website
• Sign up for newsletters, free resources, or content
• Purchase or access The Purposeful Professional Membership
• Engage with our emails or website
How do we use your information?
We use your data to:
• Respond to enquiries
• Deliver membership content, resources, and live sessions
• Send relevant updates, newsletters, and offers (where you have opted in)
• Send transactional communications (e.g. confirmations, access details)
• Improve our website, services, and user experience
Lawful basis for processing
We rely on the following lawful bases under UK GDPR:
• Consent – for marketing emails and newsletters
• Contract – where you purchase or access the membership
• Legitimate Interests – to respond to enquiries and improve our services
You can withdraw consent at any time.
How we store and process your data
We use trusted third-party providers to securely process your data:
• Showit – website hosting and form submissions
• Kit (ConvertKit) – email marketing, automations, and transactional emails
• Microsoft Teams (Microsoft 365) – delivery of membership content, live sessions, and community interaction
• Google Analytics – website traffic and behaviour tracking
Offline data is stored securely on password-protected devices.
International data transfers
Some of our service providers (such as Kit, Microsoft, and Google) may process personal data outside the United Kingdom.
Where this occurs, these providers have appropriate safeguards in place to protect your data, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms in line with UK GDPR requirements.
Data sharing
We do not sell or share your personal data with third parties, except:
• Where required by law
• Where necessary to deliver our services via trusted providers
• Where you have given consent
Data retention
We retain your personal data only for as long as necessary:
• Contact enquiries: up to 12 months after resolution
• Membership/customer data: for the duration of your access and a reasonable period after
• Email subscribers: until you unsubscribe or withdraw consent
After this, your data is securely deleted or anonymised.
How we protect your data
We take appropriate security measures, including:
• Use of secure, reputable platforms
• Restricted access to personal data
• Password-protected devices and systems
• Encrypted systems where applicable
Cookies and analytics
What are cookies?
Cookies are small text files stored on your device to ensure the website functions properly and to help us understand how visitors use our site.
Types of cookies we use
• Essential cookies
Required for the website to function securely and correctly
• Analytics cookies
Used to understand how visitors interact with the site (via Google Analytics)
• Marketing cookies
May be used to support marketing and advertising activity (if applicable)
Managing cookies
When you visit our website, you can choose your cookie preferences via the cookie banner.
You can also control or disable cookies through your browser settings.
Children’s data
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.
Your rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to certain types of processing
• Request a copy of your data (data portability)
To exercise your rights, contact: contact@staceybarber.com
If you believe your data has been misused, you can contact the Information Commissioner's Office.
Third-party links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
Membership Terms
Access to The Purposeful Professional Membership is subject to our Membership Terms and Conditions, which form part of your agreement with us when purchasing or accessing the membership.
These terms outline important information including access, payments, cancellations, and acceptable use of content and community spaces.
You can view the full terms here:
[TPP Membership Terms & Conditions]
Data breach notification
In the unlikely event of a data breach, we will comply with applicable laws and notify:
• The Information Commissioner’s Office (ICO) within 72 hours where required
• Affected individuals where there is a risk to their data
Changes to this Privacy Notice
We may update this Privacy Notice from time to time. Any changes will take effect immediately upon posting on this page.
Contact
If you have any questions about this Privacy Notice or your data:
Email: contact@staceybarber.com
