Privacy Policy
Last updated: 18/08/2025
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit yvettemunasinghe.com or purchase digital products (such as the 7-Day Flower Reset) hosted on Payhip.
1. Who we are
Business name: Reflect – Reconnect – Bloom (trading as Yvette Munasinghe)
Website: https://yvettemunasinghe.com
Email: [email protected]
Trading address: 15 Blacklands Road, London, SE6 3AE
We are the data controller responsible for your personal information under UK GDPR.
2. What information we collect
We collect and process the following types of personal information:
Contact details (e.g. name, email) when you download a product, make a purchase, or contact us.
Transaction information (e.g. purchase amount, date) – note that we do not store or see your card details.
Technical data (e.g. IP address, browser type) automatically collected via cookies to help our website function and improve performance.
Email preferences if you subscribe to our mailing list via MailerLite.
3. How we collect your information
Directly from you – when you fill in forms, make purchases, or email us.
Automatically – via cookies when you visit our website.
Third-party platforms:
Payhip provides digital delivery of purchased products.
PayPal/Stripe securely process payments (we never see card details).
Create.net hosts our website and may log standard visitor data.
MailerLite stores your email details if you sign up for updates.
4. How we use your information
We use your personal data to:
Provide products or services you’ve requested.
Process transactions securely.
Send you emails (only if you have opted in).
Improve our website performance and user experience.
Comply with legal obligations (e.g. accounting records).
5. Sharing your information
We only share your information with trusted third-party providers who help us operate our business:
Create.net (website hosting)
Payhip (product delivery)
PayPal or Stripe (payment processing)
MailerLite (email subscriptions)
These companies are GDPR-compliant and only process your data as instructed by us. We never sell your data.
6. Cookies
Our website uses cookies:
Essential cookies ensure the site functions properly (e.g. checkout, security).
Non-essential cookies (e.g. analytics) are only used with your consent.
When you visit our website, you’ll see a cookie banner provided by Create.net allowing you to manage preferences. More detail is provided in this Privacy Policy.
7. Data retention
We keep your personal data only as long as necessary to:
Fulfil the purpose for which it was collected, or
Meet legal, tax, or accounting requirements.
After this period, your data will be securely deleted or anonymised.
8. Your rights under UK GDPR
You have the right to:
Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (where legally possible).
Restrict or object to certain types of processing.
Withdraw consent for email marketing at any time.
To exercise any of these rights, contact us at [email protected]
9. International transfers
Some service providers (e.g. MailerLite, Stripe) may store data outside the UK. In these cases, we ensure adequate protections (e.g. UK GDPR-approved safeguards or standard contractual clauses).
10. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our practices. The updated version will always be available on our website with a revised “last updated” date.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please email [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.