She's a Peach

Start here

Privacy Policy

Privacy Policy
Last updated: 19 June 2026

At She’s a Peach (“we”, “us”, “our”), we are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit http://www.shesapeach.com, enquire about our services, sign up to our mailing list, purchase coaching, workshops, courses or digital products, or otherwise interact with us.

This policy is intended to help you understand your rights and how we meet our obligations under the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025 where applicable.

1. Who we are

Data controller: Aly Johnson trading as She’s a Peach
Trading name: She’s a Peach
Email address: aly@shesapeach.com
Website: https://www.shesapeach.com

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. The personal data we collect

We may collect, use and store the following categories of personal data:

Identity data

  • your name
  • business name
  • username or account information, where applicable

Contact data

  • email address
  • telephone number
  • billing address
  • correspondence address

Transaction data

  • details of products or services you purchase from us
  • billing and payment-related information
  • records of refunds, cancellations or disputes

Technical data

  • IP address
  • browser type and version
  • device type
  • time zone setting
  • operating system
  • pages viewed and website usage information
  • cookie and similar technology data

Marketing data

  • your email marketing preferences
  • whether you open emails or click links
  • download/sign-up history for lead magnets or freebies

Communications data

  • messages sent via contact forms, email, social media, DMs or enquiry forms
  • customer support history
  • testimonials, reviews or feedback you choose to provide

Course, coaching or client data

  • information you share with us in relation to SEO, content, business strategy or coaching services
  • booking details
  • session notes, where relevant and proportionate

We do not intentionally collect any special category personal data unless it is necessary and you choose to provide it. If special category data is ever collected, we will only process it where the law allows us to do so.

3. How we collect your personal data

We collect personal data in the following ways:

  • when you visit our website
  • when you fill in a contact form
  • when you sign up for our newsletter, free resources or waitlists
  • when you book or buy coaching, workshops, courses or digital products
  • when you contact us by email or social media
  • when you make a payment
  • through cookies and similar technologies
  • from third-party platforms you use to interact with us, such as payment, booking, email marketing or course platforms

4. How we use your personal data

We use your personal data to:

  • respond to enquiries and provide customer support
  • deliver our services, coaching, workshops, courses and digital products
  • take payment and manage transactions
  • send service-related emails, confirmations and updates
  • send marketing emails where you have consented or where we are otherwise permitted by law
  • administer and improve our website, services and content
  • monitor website performance, usage and security
  • keep business records and meet legal, tax and accounting requirements
  • establish, exercise or defend legal claims
  • handle complaints, including data protection complaints

5. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for using your personal data. Depending on the circumstances, we rely on one or more of the following:

Contract
Where we need to process your personal data to provide services to you, fulfil an order, or take steps before entering into a contract.

Legal obligation
Where we need to process your data to comply with legal obligations, such as tax, accounting or consumer law requirements.

Legitimate interests
Where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include:

  • running and improving our business
  • responding to enquiries
  • preventing fraud
  • securing our website and systems
  • keeping records
  • handling complaints
  • limited direct marketing where permitted by law

Consent
Where we rely on your consent, for example for certain email marketing activities and some cookies or similar technologies. You can withdraw consent at any time.

6. Marketing

If you sign up to receive our newsletter, free resources or other email updates, we may send you marketing communications about our services, offers, content, workshops, courses or products.

We will only send you marketing where:

  • you have consented, or
  • we are otherwise permitted to do so under PECR and data protection law.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at aly@shesapeach.com.

7. Payments

Payments made through our website or linked sales pages may be processed by third-party payment providers such as Stripe. We do not store full card details on our own systems unless explicitly stated.

Please review the relevant provider’s privacy notice for more information about how they process your data:

8. Third-party service providers

We may share personal data with trusted third-party service providers where necessary to run our business and provide our services. Depending on the tools we use, this may include providers for:

  • website hosting
  • website analytics
  • payment processing
  • email marketing
  • course or digital product delivery
  • booking or scheduling
  • cloud storage
  • customer relationship management
  • accounting or bookkeeping
  • legal or professional advice

These providers will only process your personal data on our instructions where required, or as independent controllers where that is part of their service.

STAN

9. International transfers

Some of our third-party service providers may store or process personal data outside the UK.

Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place, such as:

  • transfer to countries recognised as providing adequate protection, or
  • use of appropriate contractual safeguards, such as the UK International Data Transfer Agreement or other recognised mechanisms.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, insurance or reporting requirements.

Retention periods may vary depending on the type of data, but broadly:

  • enquiry data is kept for [12–24 months] unless a longer period is justified
  • client and transaction records may be kept for up to [6 years] to meet tax, accounting and legal obligations
  • marketing data is kept until you unsubscribe or ask us to stop
  • complaint records may be kept for as long as reasonably necessary to investigate, resolve and evidence compliance

When personal data is no longer required, we will securely delete or anonymise it.

11. Cookies and similar technologies

Our website may use cookies and similar technologies to:

  • make the site function properly
  • remember your preferences
  • keep the site secure
  • understand how visitors use the site
  • improve website performance and content
  • support marketing, where applicable

Under UK law, some storage and access technologies may be used without consent in limited low-risk situations, such as certain functionality, security or statistical purposes. However, where cookies are not strictly necessary or where consent is required, we will ask for your consent before placing them.

You can manage cookies through:

  • our cookie banner or preference tool, where available
  • your browser settings

If you use analytics, ad pixels or other non-essential cookies, make sure your cookie banner and cookie list match what is actually on the site.

12. Automated decision-making

We do not currently make decisions about you based solely on automated processing that produce legal effects or similarly significant effects.

If this changes, we will update this Privacy Policy and provide the safeguards required by law, including information about the decision-making, your right to make representations, and your right to request human review where applicable.

13. Children’s privacy

Our website, services and products are generally intended for business owners and adults. We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

14. Your data protection rights

Under UK data protection law, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate or incomplete data
  • request erasure of your personal data
  • request restriction of processing
  • object to processing
  • request transfer of your personal data in certain circumstances
  • withdraw consent where processing is based on consent
  • complain about how your personal data is handled

These rights are not absolute and may be subject to legal exemptions.

To exercise your rights, contact us at: aly@shesapeach.com

15. How to make a data protection complaint

If you are unhappy with how we have used your personal data, you have the right to complain to us.

You can submit a data protection complaint by:

  • emailing us at aly@shesapeach.com

When making a complaint, please include:

  • your name and contact details
  • enough information for us to identify you
  • details of your complaint
  • any relevant dates, correspondence or supporting information

We will:

  • acknowledge your complaint within 30 days
  • investigate it fairly and appropriately
  • respond without undue delay
  • let you know the outcome and any steps we propose to take

If we need more information from you, we may contact you to ask for it.

Making a complaint to us does not affect your right to complain to the Information Commissioner’s Office (ICO) at any time.

You can contact the ICO here:
https://ico.org.uk/make-a-complaint/

16. Security

We take appropriate technical and organisational measures to help protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

17. Links to other websites

Our website may contain links to third-party websites, platforms or social media pages. We are not responsible for the privacy practices of those third parties. Please review their privacy notices before providing personal data.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments.

The latest version will always be published on this page, and the “last updated” date will be amended accordingly.

19. Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact:

Aly Johnson Trading as She’s a Peach
Email: aly@shesapeach.com
Website: https://www.shesapeach.com