Privacy Policy

Effective Date: 18-July-2025
Last Updated: 28-July-2025

This Privacy Policy outlines how ThryvSoul Ltd (“ThryvSoul”, “we”, “our”, “us”) collects, uses, stores, and protects your personal information in accordance with the UK GDPR, EU GDPR, and other applicable data protection laws. It applies when you use our website (www.thryvsoul.com), book services, participate in coaching programs, or interact with us in any way.

By using our website and services, you agree to the terms of this Privacy Policy.

1. Who We Are

ThryvSoul is a wellness and coaching platform dedicated to supporting women through menopause and life transitions with expert-led resources, events, and personalised support.

Data Controller:
ThryvSoul Ltd
📩 su*****@*******ul.com

2. What Personal Data We Collect

We only collect the personal data necessary to deliver our services, improve your experience, and comply with legal requirements.

a. Information You Provide Directly:

• Name
• Email address
• Phone number (if provided for coaching or reminders)
• Billing details (processed securely via third-party payment gateways)
• Account login credentials (if you register an account)
• Session preferences (topics of interest, coaching goals)
• Feedback, testimonials, or communications sent to us
• Wellness forms or assessments (optional, based on informed consent)

b. Automatically Collected Data:

• IP address
• Browser type and device data
• Pages visited and interaction history
• Date and time of access
• Cookies and tracking pixels (see Section 8)

We do not collect or store sensitive payment details (like card numbers)—these are handled securely by Stripe or PayPal.

3. How We Use Your Data

We process your data lawfully under the basis of consent, contract, legitimate interest, or legal obligation.

We use your data to:

• Deliver coaching, digital products, and membership services
• Manage bookings, payments, and customer support
• Tailor your user experience and content recommendations
• Send important service updates, booking reminders, or newsletters (you can unsubscribe at any time)
• Improve website performance and troubleshoot issues
• Comply with legal and tax obligations

We do not use your data for profiling or automated decision-making.

4. Lawful Basis for Processing

We process your data under the following lawful bases:

• Consent – When you opt in to newsletters or wellness updates
• Contract – When you purchase or book a service from us
• Legal obligation – For invoicing, tax, or regulatory purposes
• Legitimate interest – To improve our services and user experience

You have the right to withdraw consent at any time by contacting su*****@*******ul.com.

5. Sharing Your Data

We do not sell, rent, or trade your data. We only share your information with trusted third-party service providers who help us operate the platform:

• Payment processors (e.g., Stripe, PayPal)
• Email marketing platforms (e.g., Mailchimp, Systeme.io)
• Scheduling tools (e.g., Calendly)
• Analytics tools (e.g., Google Analytics)

All partners are GDPR-compliant and process data strictly on our instructions.

We may disclose data if legally required (e.g., court order, legal process, fraud prevention).

6. Data Retention

We keep your data only as long as necessary for the purposes outlined in this policy:

• Account and coaching data: Retained for 6 years for tax and audit purposes
• Inactive accounts: Removed after 24 months of inactivity
• Email subscribers: Until you unsubscribe or withdraw consent
• Cookies: Retention varies (see Cookie Policy)

You may request early deletion by contacting our support team (see Section 10).

7. Your Rights Under GDPR

As an EU or UK resident, you have the following rights:

• Right to access – Request a copy of your personal data
• Right to rectification – Correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing – Limit how we use your data
• Right to data portability
• Right to object – For direct marketing or processing based on legitimate interest
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (e.g., ICO in the UK)

📩 To exercise any of these rights, email su*****@*******ul.com

8. Cookies and Tracking Technologies

We use cookies to enhance user experience, gather analytics, and remember preferences. Cookies may include:

• Essential cookies – For login, security, and session management
• Performance cookies – To track usage (Google Analytics)
• Marketing cookies – For retargeting or campaign effectiveness (only with consent)

You may manage or disable cookies via your browser settings or via the cookie banner on your first visit.

🔗 View Full Cookie Policy

9. Data Security

We take appropriate technical and organisational measures to protect your data:

• Encrypted data transmission (SSL)
• Secure third-party platforms
• Two-factor authentication for admin areas
• Access restrictions and password protection

Despite our efforts, no system is 100% secure. We encourage you to use strong passwords and notify us immediately of suspicious activity.

10. International Transfers

Our website and services may be hosted or supported by partners located outside the EEA. In such cases, we ensure that:

• Adequate safeguards are in place (e.g., Standard Contractual Clauses)
• The third party is based in a country with an adequacy decision or certified under a data protection framework (e.g., UK-US Data Bridge)

11. Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect or store data from children. If we discover such data, it will be promptly deleted.

12. Changes to This Privacy Policy

We may update this policy from time to time to reflect legal changes or improvements to our practices. Any significant changes will be announced on the site or by email.

The “Effective Date” at the top of this policy reflects the most recent version.