1. About this policy

This policy explains how I, Leah Wren, collect, use and protect your personal information when you visit leahwren.com, apply for or join my programmes and events, book a call, work with me, or join my email list.

Business name

Leah Wren

Business type

Sole trader

Location

United Kingdom

Data controller

Leah Wren. I decide how and why your personal information is used.

Contact

comeback@leahwren.com

I follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), as amended by the Data (Use and Access) Act 2025.

2. Information I collect

I only collect what I need to run my business and support you. This may include:

• Contact details: your name, email address, phone or WhatsApp number, and social media handles.
• Business details: your website, business type, current and target income, and the challenges you share when you book a call, book a VIP Day or join a programme.
• Booking and event details: the events you book, attendance, and any dietary or access needs you tell me about.
• Payment details: billing name and address, and the postal address you give when you book a VIP Day. Payments are handled securely by third-party providers such as Stripe or PayPal. I never see or store your full card details.
• Coaching and mentoring information: session notes, forms you complete, feedback, and anything you choose to share during our work together.
• Recordings: live group sessions are recorded on Zoom so members can watch them back. If you join live, your name, image, voice and anything you share may appear in the recording. You can turn off your camera, change your display name or use the chat instead.
• Testimonials: your words, name, business name, photo or video, only with your permission.
• Website information: technical details such as your IP address, browser type and the pages you visit.
• Marketing preferences: whether you want to hear from me by email.

3. How I use your information, and why

The law requires a lawful basis for each use of your information. Here’s what I do and the basis I rely on.

I never sell your personal information, and I don’t use it for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Who I share your information with

I use trusted service providers to run my business. They only process your information on my instructions and must keep it secure.

I may also share information:

• With event co-hosts, when you book an event I run with partners, so we can deliver it (for example, names and dietary needs).
• With professional advisers, such as my accountant, where necessary.
• With authorities, if the law requires it, or if I believe someone is at serious risk of harm.

In group spaces, other members can see what you share, and your phone number is visible to members of WhatsApp groups. Please only share what you’re comfortable with, and respect other members’ privacy.

International transfers. Some providers store data outside the UK, including in the United States. When this happens, I make sure appropriate safeguards are in place, such as the UK–US data bridge, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

5. My website, cookies and embedded content

My website keeps cookies and tracking to a minimum.

• Essential cookies and server logs: my host records basic technical information, such as IP addresses and pages visited, to keep the site secure and working. These don’t need your consent.
• Google Fonts: when a page loads, your browser connects to Google to display the fonts, which shares your IP address with Google.
• YouTube videos: testimonial videos use YouTube’s privacy-enhanced mode, which doesn’t set YouTube cookies until you press play. Once you play a video, YouTube’s own privacy policy applies.
• Links to other sites: my booking calendar, application form, Eventbrite and social media pages have their own privacy policies.

I don’t currently use analytics or advertising cookies. If I add them, I’ll update this policy and ask for your consent where the law requires it. You can block or delete cookies in your browser settings at any time.

6. How long I keep your information

7. Your rights

You have the right to:

• access the personal information I hold about you
• ask me to correct anything inaccurate or incomplete
• ask me to delete your information, in certain circumstances
• object to, or ask me to restrict, how I use it
• withdraw your consent at any time, including for emails and testimonials
• receive your information in a portable format, where this applies

To use any of these rights, email comeback@leahwren.com. I’ll reply within one month. There’s normally no charge.

8. Keeping your information safe

I use secure, password-protected systems and reputable service providers, and I limit access to your information to what’s needed. No system is completely secure, but I take reasonable steps to protect your information from loss, misuse and unauthorised access.

9. Children

My services are for adults aged 18 and over. I don’t knowingly collect information about children.

10. Changes to this policy

I may update this policy from time to time. The latest version will always be on this page, with the date it took effect.

11. Contact and complaints

If you have a question or concern about how I handle your information, please contact me first so I can put it right: comeback@leahwren.com

If you’re not happy with my response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk or 0303 123 1113.