Privacy policy
Who we are
Please read this policy before using our website or buying from us. It covers how we handle your personal data, and the cookies our site uses.
Business: Savannah Rose Virtual Assets, a trading name of BeelieVA Business Support, 4 Colwyn Court, Aitken Street, Airdrie ML6 6LS ("we", "us", "our").
Website: https://savannahroseva.co.uk ("Website"), including its sales pages, checkouts and the emails that deliver your downloads.
Contact: [email protected]. Use this for any question about this policy or to exercise your rights.
Controller
The business above is the controller of your personal data and is responsible for it.
Complaints
You can complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection (ico.org.uk). We'd appreciate the chance to sort it out first, so please contact us before you go to the ICO.
About this policy
This policy explains how we collect and use your personal data when you visit the Website, buy a digital product, join our mailing list or get in touch. The Website is not intended for children and we don't knowingly collect data about children.
We review this policy regularly and may update it. Changes take effect when they're posted here. Please tell us if your details change while you're a customer.
Links to other sites
The Website links to other sites, including our sister brands BeelieVA and Neuro Buzz, and to tools our products work with. We don't control those sites and aren't responsible for their privacy practices, so please read their policies when you visit.
The data we collect
Personal data means any information that can identify you. It doesn't include data where your identity has been removed (anonymous data). We may collect, use and store these kinds of personal data:
- Identity data: first name, last name.
- Contact data: email address and, if you choose to give it, phone number.
- Transaction data: what you bought, when, the price paid and any discount code used.
- Payment data: your payment is handled by our payment provider, Stripe. We see the payment status, card type and last four digits. We never see or store your full card number.
- Technical data: IP address, browser and device type, time zone and pages visited, collected through cookies and similar technology (see Cookies and tracking).
- Marketing and communications data: whether you've signed up to our emails and how you prefer to hear from us.
We also use aggregated data, such as how many people visited a page. This doesn't identify you. If we ever combine it with your personal data, we treat the combined data as personal data under this policy.
We don't collect special category data about you (such as health, ethnicity, religion or sexual orientation), or information about criminal convictions.
If you don't give us the data we need to complete a purchase, such as your email address, we won't be able to deliver your product.
How we collect it
- When you give it to us. You enter your details at checkout, sign up to our emails or a waitlist, email us, or join one of our communities.
- Automatically. When you browse the Website, our website platform and payment provider collect technical data through cookies, browser storage and server logs (see Cookies and tracking).
- From service providers. Stripe tells us whether your payment went through. Our website platform, HighLevel, records which pages you visited and which forms you filled in.
How and why we use it
We only use your personal data when the law allows us to. Most of the time that's because we need it to deliver what you bought, because we have a legitimate business interest that doesn't override your rights, or because the law requires it. We ask for your consent before sending marketing where the law needs it, and you can withdraw consent at any time.
| What we do | Data used | Lawful basis |
|---|---|---|
| Take your payment and email you your download | Identity, Contact, Transaction, Payment | Performance of a contract with you |
| Reply to your questions and handle refunds or problems | Identity, Contact, Transaction | Performance of a contract; legitimate interests (looking after customers) |
| Keep records for tax and accounting | Identity, Contact, Transaction | Legal obligation |
| Tell you about changes to our terms or this policy, and ask for reviews | Identity, Contact, Marketing and communications | Performance of a contract; legitimate interests (keeping records up to date, improving our products) |
| Send you emails about new products, offers and tips | Identity, Contact, Marketing and communications | Consent, or legitimate interests where you've bought from us and not opted out |
| Run, secure and fix the Website, and prevent fraud | Identity, Contact, Technical | Legitimate interests (running the business, security, fraud prevention); legal obligation |
| Understand how people use the Website so we can improve it | Technical | Legitimate interests (improving the Website and our products) |
If we need to use your data for a new purpose that isn't compatible with the one we collected it for, we'll tell you first and explain the legal basis.
Marketing
If you buy from us or sign up to our emails, we may send you news about new products, offers and useful tips. Every marketing email has an unsubscribe link, and you can also email us to stop them at any time.
Opting out of marketing doesn't stop the emails you need about something you bought, such as your download link or a receipt.
We never sell your personal data, and we'll get your clear opt-in before sharing it with anyone else for their marketing.
Cookies and tracking
Cookies are small files stored in your browser. Our site also uses browser storage, which works in a similar way. This is what the Website sets today:
| Name | Set by | What it's for | Type |
|---|---|---|---|
| __stripe_mid, __stripe_sid | Stripe | Spotting and preventing card fraud at checkout | Strictly necessary |
| msgsndr_id | HighLevel (our website platform) | Recognising a returning visitor so we can see which pages lead to a purchase | Analytics |
| Session and page-history storage | HighLevel | Recording the pages you viewed in a visit, linked to any form you fill in | Analytics |
We also use Cloudflare Web Analytics, which counts visits without setting cookies. Our fonts load from Google Fonts, which means your browser shares your IP address with Google to fetch them.
You can block or delete cookies in your browser settings. If you block strictly necessary cookies, checkout may not work. To find out more about managing cookies, visit aboutcookies.org.
Who we share it with
We share your personal data only with the people and services that help us run the business, and only for the purposes in this policy:
- HighLevel (LeadConnector), based in the USA: hosts the Website, runs our checkouts and contact records, and sends our emails.
- Stripe, based in the USA and Ireland: processes payments and prevents fraud.
- Cloudflare, based in the USA: keeps the Website fast and secure, and counts visits.
- Google, based in the USA: serves the fonts on our pages.
- Professional advisers in the UK, such as our accountant, where they need it to do their job.
- HM Revenue & Customs and other authorities where the law requires it.
- A buyer of our business, if we ever sell or merge all or part of it. They could use your data in the same way as this policy describes.
We require everyone we share data with to keep it secure and to use it only on our instructions, never for their own purposes.
Transfers outside the UK
Some of these providers are based outside the UK, so your data may be transferred abroad. When that happens, we make sure it's protected by at least one of these safeguards: the country has been approved by the UK as giving adequate protection, or we use contracts approved for use in the UK that give your data the same protection it has here. Contact us if you'd like details.
Keeping it safe, and for how long
We have security measures in place to stop your personal data being lost, misused, accessed without permission, changed or disclosed. Only people and services who need it to run the business can access it, and they must keep it confidential. If there's ever a data breach, we'll tell you and the ICO where the law requires it.
We keep your personal data only as long as we need it for the purposes in this policy, including legal, tax and accounting requirements. By law we keep basic customer records (identity, contact and transaction data) for six years after your last purchase. We may keep data longer if there's a complaint or a likely legal claim.
If you unsubscribe from marketing, we keep a note of your email address so we don't email you again.
Your rights
Under UK data protection law you have the right to:
- Access your personal data: ask for a copy of what we hold about you.
- Correct it: have anything incomplete or wrong put right.
- Erase it: ask us to delete it where there's no good reason for us to keep it. We may not always be able to, for example where tax law says we must keep a record. We'll tell you why if so.
- Object to us using it: where we rely on legitimate interests, or for direct marketing at any time.
- Restrict how we use it: for example while we check it's accurate.
- Transfer it: receive it in a common, machine-readable format, or have it sent to someone else.
- Withdraw consent at any time, where we rely on consent. This doesn't affect anything we did before you withdrew it.
To use any of these rights, email us at [email protected]. There's usually no fee. We may ask you to confirm your identity first, so your data doesn't go to the wrong person. We aim to reply within one month, and we'll let you know if a complex request needs longer.