This privacy notice tells you what to expect us to do with your personal information.

Contact details

Email: kim@kimberlythorne.com.au

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

• Names and contact details

• Addresses

• Purchase or account history

• Payment details (including card or bank information for transfers and direct debits

• Health information (including dietary requirements, allergies and health conditions - collected only from coaching clients as necessary)

• Website user information (including user journeys and cookie tracking)

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

• Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

• Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent – where you have given clear permission (e.g., marketing emails). You can withdraw your consent at any time.

• Contract – where processing is necessary to provide services or deliver goods you have requested.

• Legal obligation – where we are required to comply with the law.

• Legitimate interests – where processing is necessary for running our business, improving services, preventing fraud, or marketing relevant products (balanced against your rights).

Where we get personal information from

Information that you directly submit to us through our Services may include:

• Contact details including your name, address, phone number, and email.

• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.

• Account information including your username, password, security questions and other information used for account security purposes.

• Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information Collected Automatically

We collect certain usage data automatically when you interact with our Services (see Information We Collect About Your Usage below).

Information From Third Parties

We may also receive information about you from third parties, including website hosting providers (e.g. Squarespace), payment processors, delivery partners, advertising networks (e.g. Meta/Facebook/Instagram), and analytics providers.

How long we keep information

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

Information we collect about your ssage

We may automatically collect certain information about your interaction with our Services (“Usage Data”). To do this, we use cookies, pixels, and similar technologies.

Usage Data may include details about how you access and use our Site, such as:

• Device and browser information

• IP address and general location (derived from IP)

• Information about your network connection

• Pages viewed, time spent on pages, clicks, and navigation paths

• Referring website or source (such as an ad you clicked on)

This information helps us understand how visitors use our Services, improve our website functionality, and provide a more personalised experience.

Information we obtain from third parties

We may also receive personal information about you from third parties, including:

• Service providers who support our Site and Services, such as Squarespace (website hosting, analytics, and security).

• Payment processors, who collect payment details (such as credit or debit card information, bank account details, and billing address) in order to process payments securely and complete your orders.

• Advertising and marketing partners (e.g., Meta/Facebook/Instagram), who may use cookies or tracking tools to show you relevant ads

• Analytics providers, who help us understand how visitors use our website and measure marketing effectiveness

Any data obtained from third parties will be handled in accordance with this Privacy Notice.

How we use your personal information

We use your personal information to:

• Provide products and services – process payments, fulfil orders, arrange delivery, manage your account, and communicate with you about your transactions

• Marketing and advertising – send promotional communications by email, text, or post, and show you relevant adverts online (you can opt out at any time)

• Security and fraud prevention – detect, investigate, and prevent fraudulent or unlawful activity

• Customer support and service improvement – respond to your queries and improve the services we provide

How we disclose personal information

We may disclose your personal information with third parties when necessary to provide our Services, comply with legal obligations, or improve your experience. This may include:

• Squarespace, which powers our website and provides hosting, analytics, and security features.

• Payment processors, to securely process transactions and manage billing.

• Delivery and fulfilment partners, to deliver goods you have purchased.

• With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

• Analytics providers, to help us understand user behaviour and improve our Services.

• Legal authorities, where required by law or to protect our rights, safety, or property.

• Business transfers, in the event of a sale, merger, or restructuring of our business.

All third-party service providers are required to handle your personal information securely and only use it for the purposes described in this Privacy Policy.

We respect your privacy. We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

Links to other websites

Our website may link to other websites. We are not responsible for the content or privacy practices of those sites. Please review their privacy notices before sharing personal data.

Changes in privacy policy

We may update this privacy notice occasionally. Changes take effect immediately upon posting. Please check this page periodically for updates.

Cookies

We use cookies to enhance your browsing experience and analyse how the website is used. You can manage your cookie preferences through your browser settings.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated August 2025