Your data, HANDLED PROPERLY.

1. Who we are

This site is operated by Katie Lyth, trading as WedPro CEO ("we", "us", "our"). We are the data controller for personal data processed through this website, our newsletter, our podcast community, and our coaching programmes.

Contact: hello@katielyth.com

2. What we collect

Information you give us

• Name and email when you join the newsletter, take a quiz, or apply to a programme
• Business details you share in applications, intake forms, or coaching calls
• Payment details when you purchase (processed directly by Stripe / Paddle — we never see full card numbers)
• Messages you send us by email or contact form

Information collected automatically

• Device, browser and approximate location (city level) via privacy-respecting analytics
• Pages visited, referring site, and time on page
• Strictly necessary cookies to keep the site running

We do not use cross-site tracking pixels or sell behavioural profiles. We do not knowingly collect data from anyone under 18.

3. Why we use it (and our lawful basis)

• To deliver what you asked for — contracts, programmes, downloads, quiz results. Lawful basis: contract.
• To send the newsletter and podcast updates — only after you opt in. Lawful basis: consent.
• To improve the site and content — aggregate analytics. Lawful basis: legitimate interest.
• To meet legal and tax obligations — invoicing, accounting, dispute records. Lawful basis: legal obligation.
• To keep accounts and payments secure — fraud prevention. Lawful basis: legitimate interest.

We do not use automated decision-making or profiling that produces legal effects. We do not train third-party generative AI models on your personal data.

4. Who we share it with

We use a small set of vetted processors who are contractually bound to UK / EU GDPR standards:

• Hosting and database (Lovable Cloud / Supabase, EU region)
• Email delivery (e.g. Resend / ConvertKit)
• Payment processing (Stripe, Paddle)
• Scheduling and video calls (e.g. Calendly, Zoom)
• Analytics (privacy-first, IP-anonymised)

We never sell your data. We will only disclose data to law enforcement when legally compelled.

5. International transfers

Some processors are based outside the UK / EEA (primarily the US). Where that's the case, we rely on the UK International Data Transfer Addendum, EU Standard Contractual Clauses, and the UK–US / EU–US Data Privacy Framework where the processor is certified.

6. How long we keep it

• Newsletter subscribers: until you unsubscribe, plus 30 days in suppression list
• Customer and programme records: 7 years (UK tax/accounting requirement)
• Contact form messages: 24 months
• Analytics: 14 months, aggregated thereafter

7. Your rights

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Ask us to delete it ("right to be forgotten")
• Restrict or object to processing
• Withdraw consent at any time (one-click unsubscribe on every email)
• Portability — receive your data in a machine-readable format
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority

Email hello@katielyth.com to exercise any of these. We respond within 30 days.

8. Cookies

We use strictly necessary cookies (for session and security) without consent, as permitted by PECR. Any analytics or marketing cookies are loaded only after you accept them in our cookie banner. You can change your choice at any time by clearing site data in your browser.

9. Security

Data is encrypted in transit (TLS 1.3) and at rest. Access is restricted to Katie and named contractors under NDA. Passwords are hashed; payment data never touches our servers.

10. Changes to this policy

We will post material changes here and, where appropriate, notify subscribers by email at least 14 days before they take effect.

11. Contact

Questions, requests, or complaints: hello@katielyth.com.

← Back to home