Privacy & Cookie Policy

As a business, there are occasions when Nicola Coulson will collect, use and store your data. As such, we are subject to the General Data Protection Regulation and Data Protection Act 2018, and are responsible as ‘controller’ of that personal information for the purposes of those laws. Our privacy notice will inform you how and why we process, store, and use your personal data, and explains your privacy rights and how the law protects you. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.

Our contact details:

E-mail: info@nicolacoulson.com

Information we hold:

We currently collect and process the following information:

  • Personal identifiers (first and last name)

  • Contact details (telephone number, email address, billing address, delivery address)

  • Financial details (through third party websites such as, but not limited to, ideal/PayPal/stripe, details from bank transfers)

  • Sensitive information (such as personal health related data; data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs; data concerning a person’s sex life or sexual orientation)

  • Profile data (if you create a profile this will record any purchases you have made and your details will be stored by the host platform)

  • Usage Data (information about how you use our website, products and services)

  • Technical Data (internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website)

How we get the information and why we have it:

We use a range of methods to collect data from you. This can be through our website, by email, at an event or course, at a one to one session, through social media, etc. The majority of the personal information we process is provided to us directly by you for one of the following reasons:

  • To purchase a product or service.

  • To provide you with updates and newsletters on our products and/or services.

  • As you interact with our website, we may use cookies to collect technical data about your equipment, browsing actions and patterns.

  • We may receive technical personal data about you from analytics providers.

  • We may receive contact, financial and transaction data from providers of technical, payment and delivery services.

Under the General Data Protection Regulation (GDPR), the lawful basis’ we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting us using the contact details above.

(b) We have a contractual obligation.

(c) You have a legitimate interest.

What we do with the information we have:

We use the information that you have given us in order to:

  • Provide a service to you.

  • To contact you from time to time with updates or information about our products or services.

  • For marketing purposes.

  • To process any payments or recover any debt.

  • To notify you about any changes to our policies.

  • To make suggestions and recommendations to you about goods or services that may be of interest to you.

How we store your information:

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Your information is securely stored within our digital and cloud database.

Data retention:

We only retain your personal data for as long as necessary to fulfil the purposes we collect it for.

When determining the appropriate retention period for personal data, we assess the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We keep your personal data for the time you are our client and for 3 years from the date of your last engagement with us. We will then dispose your information if it is no longer required by deleting it from our database.

We will keep basic information about our customers for 6 years after they cease being customers for tax purposes.

Disclosure of your data:

We respect your privacy and are committed to protecting your personal data. Subject to the exception below, we will not knowingly share your data with third parties.

There may be exceptional occasions where we need to disclose your data to others-where there is a requirement by law or where there is a threat to life.

Your data protection rights:

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.

  • Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

  • Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

  • You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please ensure that you have sent your request to us in writing, and have received a confirmation email to acknowledge receipt.

  • Please contact us using the details above if you wish to make a request.

Your duty to inform us of changes:

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-party links:

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we suggest that you to read the privacy notice of every website you visit.

Third-party marketing:

We do not share your personal data with any third parties unless you have given your consent for us to do so.

Use of cookies:

A cookie is a small text file which is placed onto your computer (or other electronic device) when you access our website. We use cookies on this website to: 

  • recognise you whenever you visit this website;

  • obtain information about your preferences, online movements and use of the internet;

  • carry out research and statistical analysis to help improve our content , products and services and to help us better understand our visitor requirements and interests;

  • target our marketing and advertising campaigns more effectively by providing interest-based advertisements that are personalised to your interests; and

  • make your online experience more efficient and enjoyable.

The information we obtain from our use of cookies will not usually contain your personal data. Although we may obtain information about your computer or other electronic device such as your IP address, your browser and/or other internet log information, this will not usually identify you personally. In certain circumstances we may collect personal information about you—but only where you voluntarily provide it (eg by completing an online form).

In most cases we will need your consent in order to use cookies on this website. The exception is where the cookie is essential in order for us to provide you with a service you have requested (eg to provide you with information).

If you visit our website when your browser is set to accept cookies, we will interpret this as an indication that you consent to our use of cookies and other similar technologies as described in this website cookie policy. If you change your mind in the future about letting us use cookies, you can modify the settings of your browser to reject cookies or disable cookies completely.

Description of cookies

Listed below is more information about the cookies we use and why:

Functional and Required Cookies

Squarespace uses some necessary cookies because they allow visitors to navigate and use key features on your site. These cookies vary from site to site depending on the features it uses. For example, Functional and Required Cookies help these features work:

_acloggedin

  • Supports login by Scheduling client if the client has an account.

  • Cookie

  • January 1, 2025

_client_acloggedin

  • Supports login by Scheduling client if the client has an account.

  • Cookie

  • January 1, 2025

algoliasearch-client-js

  • Adds auto-populated suggestions to address fields in Scheduling to help clients complete forms faster.

  • localstorage

  • Persistent

CART

  • Shows when a visitor adds a product to their cart

  • Cookie

  • 2 weeks

CHECKOUT_WEBSITE

client_username

  • Remembers a logged in Scheduling client's username between visits

  • Cookie

  • 1 year

Commerce-checkout-state

  • Stores state of checkout while the visitor is completing their order in PayPal

  • sessionstorage

  • Session

Crumb

hasCart

  • Tells Squarespace that the visitor has a cart

  • Cookie

  • 2 weeks

Locked

  • Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password. 

  • Cookie

  • Session

PHPSESSID

  • Securely authenticates a visitor during their checkout in Scheduling.

  • Cookie

  • 1 month

RecentRedirect

  • Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO.

  • Cookie

  • 30 minutes

remember_client

  • Remembers Scheduling client’s login details if they have an account.

  • Cookie

  • 365 days

siteUserCrumb

SiteUserInfo

SiteUserSecureAuthToken

  • Authenticates a visitor who logs into a customer account

  • Cookie

  • 3 years

squarespace-announcement-bar

  • Prevents the announcement bar from displaying if a visitor dismisses it

  • localstorage

  • Persistent

squarespace-likes

  • Shows when you've already "liked" a blog post.

  • localstorage

  • Persistent

squarespace-popup-overlay

  • Prevents the promotional pop-up from displaying if a visitor dismisses it

  • localstorage

  • Persistent

ss_cookieAllowed

  • Remembers if a visitor agreed to placing analytics cookies on their browser if a site is restricting the placement of cookies

  • Cookie

  • 30 days

ss_sd

Test

  • Investigates if the browser supports cookies and prevents errors.

  • Cookie

  • Session

TZ

  • Allows a Scheduling client’s appointments to display correctly based on their time zone preferences.

  • localstorage

  • Persistent

Cross-site request forgery (CSRF)

CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

Analytics and Performance Cookies

We use analytics and Performance cookies to collect information on your behalf about how visitors interact with your site. Storing these cookies is how we populate the data you find in Squarespace analytics, such as traffic sources, unique visitors, and cart abandonment.

You can disable Squarespace analytics and Performance cookies at any time.

Cookie: ss_cid
Duration: 2 years
Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site

Cookie: ss_cpvisit
Duration: 2 years
Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site

Cookie: ss_cvisit
Duration: 30 minutes
Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site

Cookie: ss_cvr
Duration: 2 years
Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site

Cookie: ss_cvt
Duration: 30 minutes
Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site

How to turn off cookies

If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this website. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout. For further information about cookies and how to disable them please go to the Information Commissioner’s webpage on cookies: https://ico.org.uk/for-the-public/online/cookies/.

Changes to this privacy notice:

We may make changes to this privacy notice and if we make any changes we will inform you through our website.

How to complain:

Customer satisfaction is important to us. Please contact us directly in the first instance if you are dissatisfied with our service(s). We will endeavour to rectify your complaint by working with you; however if you are not satisfied with the outcome you can also complain to the ICO at the address below.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF