Privacy Policy - O Dan y Dderwen

Effective Date: 02/09/2025

This Privacy Policy explains how Lisa Mair, sole trader, trading as O Dan y Dderwen (“we,” “us,” or “our”) collects, uses, stores, and protects personal information when you access or use our website, services, and transmissions (the “Services”). We are committed to protecting your privacy in compliance with global data protection standards, including the UK Data Protection Act, EU GDPR, US CCPA, and other international laws.

1. Legal Entity

O Dan y Dderwen is a trading name of Lisa Mair, Sole Trader.
Contact: lisa@odanydderwen.com
Mailing Address: Suite 917, 37 Westminster Buildings, Theatre Square, Nottingham NG1 6LG, United Kingdom

2. Information We Collect

We may collect the following personal data:

  • Contact information (name, email address).

  • Booking details (session type, date, time).

  • Payment data (processed securely via Stripe - we do not store full card details).

  • Technical data (IP address, browser type, device identifiers, cookies).

  • Information you voluntarily provide when booking or communicating with us.

3. How We Use Information

We use personal data to:

  • Deliver Services (1-1 and group sessions)

  • Process payments and manage bookings.

  • Communicate confirmations, reminders, and updates.

  • Maintain security and prevent fraud.

  • Comply with legal obligations.

4. Legal Basis for Processing

We process data under the following bases:

  • Consent (where you opt-in).

  • Contractual necessity (fulfilling bookings).

  • Legal obligation (accounting, compliance).

  • Legitimate interests (improving services, protecting field integrity).

5. Data Sharing

We do not sell personal data. We share limited information only with trusted providers strictly necessary to deliver the Services:

  • Stripe (payments).

  • Zoom (video sessions).

  • Podia/Acuity Scheduling (website hosting, scheduling and payments).
    All third parties are contractually bound to confidentiality and legal compliance.

  • Google (Google Search Console, Google Tags, Google Analytics for traffic analysis).

6. International Transfers

Personal data may be transferred outside your country of residence. Where this occurs, we ensure safeguards such as EU-approved standard contractual clauses, encryption, and global compliance.

7. Data Retention

We retain personal data only as long as necessary to deliver Services and meet legal or accounting obligations. When no longer required, data is securely deleted.

8. Security

We apply technical and organisational measures (encryption, access controls, firewalls) to protect personal data against unauthorised access, loss, or misuse.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your data.

  • Rectify inaccuracies.

  • Request deletion (right to be forgotten).

  • Restrict or object to processing.

  • Request portability.

  • Withdraw consent at any time.

To exercise rights, contact us at: lisa@odanydderwen.com

10. Cookies and Tracking

We use cookies and similar technologies to improve functionality and user experience. For full details, see our Cookie Policy.

11. Minors

Our Services are not directed to children under 18. We do not knowingly collect data from minors. If discovered, such data will be erased immediately.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Updates take effect when posted on our website.

13. Contact Information

For all questions or concerns, contact us at:

Email: lisa@odanydderwen.com

Address: Suite 917, 37 Westminster Buildings, Theatre Square, Nottingham, NG1 6LG.

© 2026 O Dan y Dderwen. All rights reserved.