Outside & In (GDPR Compliant)
1. Introduction
Outside & In (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using our website, membership, consultations, or services, you consent to the practices described here.
2. Data We Collect
We may collect the following personal information:
- Name, email address, phone number
- Payment information (via Stripe or other payment processor)
- Membership usage and questions
- Consultation notes and preferences
- IP address and website activity (via cookies and analytics)
We only collect information necessary to provide our services and improve your experience.
3. How We Use Your Data
We use your personal information to:
- Provide health education and wellness services
- Process membership and consultation payments
- Respond to your questions and enquiries
- Send administrative emails, receipts, and updates
- Improve our services and website
- Comply with legal obligations
We never sell or rent your personal information to third parties.
4. Legal Basis for Processing
We process your data under the following legal bases:
- Contract: to provide memberships, consultations, and digital products you have requested
- Consent: where you have opted in to receive newsletters or updates
- Legal obligation: to comply with UK law
- Legitimate interests: to improve our services and protect the website
5. Sharing Your Data
Your personal information may be shared with trusted third parties only to:
- Process payments (Stripe, PayPal, etc.)
- Provide email communication (Mailchimp, ConvertKit, etc.)
- Host the website (WordPress, hosting provider)
All third parties are GDPR compliant and only use your data for the purposes outlined above.
6. Cookies
Our website uses cookies to:
- Improve website functionality
- Monitor traffic and usage
- Remember your preferences
You can manage cookies through your browser settings. A cookie notice banner will appear when you first visit the website.
7. Data Retention
We will keep your personal information only as long as necessary:
- Membership and consultation records: while you remain a client/member and for 6 years after (legal/accounting purposes)
- Email communications: until you unsubscribe
- Analytics/cookies: typically up to 2 years
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to certain processing
- Withdraw consent at any time
- Request data portability
To exercise your rights, contact us at dawn@outsideandin.me.
9. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Encrypted website forms
- Secure payment processing (Stripe/PayPal)
- Limited access to client data
- Regular backups
10. Children
Our services are not directed at children under 18. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the date updated.
12. Contact
If you have questions about this policy or how we handle your data, contact:
Dawn Williams
Outside & In
outsideandin.me
dawn@outsideandin.me
Effective date: 4 February 2026
Outsideandin.me 