Privacy Policy

Last updated: 26/06/2026

This Privacy Policy explains how we collect, use, store and protect your personal data, and your rights under UK data protection law.

1. Who We Are

This website and the products and services offered through it are operated by:

Business name: Design Boss Diary Ltd

Owner / Data Controller: Lisa-Marie Elkhadraoui

Business address: available upon request

Contact email: teamdesignbossdiary@gmail.com

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the “data controller” of the personal data you provide to us. This means we are responsible for deciding how and why your personal data is processed.

What we do: We provide business mentoring, coaching programmes, digital products and online courses for interior designers, home stagers, show home designers, creative business owners and anyone in business. 

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity data – your name and any details you provide when contacting us or making a purchase.
  • Contact data – your email address and, where applicable, your phone number.
  • Payment data – details necessary to process your payments. Card and bank details are collected and processed directly by our payment providers (Stripe and PayPal); we do not store your full card details on our systems.
  • Technical and usage data – your IP address, browser type, device information, and information about how you use our website, collected via cookies and similar technologies.
  • Marketing and communications data – your preferences in receiving marketing from us and your communication preferences.

We do not knowingly collect any “special category” data (such as data revealing health, race, religion or political opinions) and ask that you do not send us such information.

3. How We Collect Your Data

We collect personal data through the following methods:

  • Website contact and enquiry forms, including landing pages and funnel pages hosted on Kartra.
  • Email sign-ups, newsletter subscriptions and lead magnet downloads.
  • Purchases and checkout pages when you buy a product or service.
  • Cookies and tracking technologies, including Meta Pixel and Google Analytics (where used).

  • Direct correspondence, such as when you email us or message us directly.

     

4. How We Use Your Data

We use your personal data for the following purposes:

  • To deliver the products, services and programmes you have requested or purchased.
  • To process payments and manage your orders.
  • To send you marketing emails, newsletters, helpful resources and occasional promotional offers where you have actively opted in to receive them.
  • To respond to your enquiries and provide customer support.
  • To improve our website, products and marketing performance.
  • To meet our legal and regulatory obligations.

5. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

 

Consent – where you have actively agreed to receive marketing communications or accepted non-essential cookies. You can withdraw your consent at any time.

 

How We Obtain Your Consent

Where you request a free resource, subscribe to our newsletter or join our mailing list through one of our website forms, we will ask you to actively confirm that you wish to receive marketing communications by ticking an opt-in checkbox before submitting your details.

By doing so, you consent to receive emails from us containing helpful resources, updates, newsletters and occasional promotional offers. You can withdraw your consent at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

We keep a record of your consent, including when it was provided, to help demonstrate our compliance with UK data protection law.

 

Contract – where processing is necessary to fulfil a contract with you, such as delivering a product, service or programme you have purchased.

 

Legitimate interests – where processing is necessary for our legitimate business interests, such as improving our services, securing our website and understanding how our content performs, provided these interests do not override your rights and freedoms.

 

Legal obligation – where we are required to process your data to comply with the law, such as keeping financial records for tax purposes.

6. How Your Data Is Stored and Protected

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration.

Your data is stored on secure platforms (including those listed in the section below), which maintain their own security and compliance standards. Access to your personal data is limited to those who need it to carry out their role.

Some of our service providers may store or process data outside the UK. Where this happens, we take steps to ensure your data is protected by appropriate safeguards, such as UK-approved standard contractual clauses or an adequacy decision.

7. Third-Party Services We Use

We use trusted third-party platforms to operate our business. These providers process personal data on our behalf and have their own privacy policies:

  • Kartra – website hosting, landing pages, funnels, email marketing and customer management.
  • Wix – website hosting
  • Stripe – secure payment processing.
  • PayPal – secure payment processing.
  • Meta Pixel – website analytics and advertising measurement (where used).
  • Google Analytics – website usage analytics (where used).

We recommend reviewing the privacy policies of these providers to understand how they handle your data. We do not sell your personal data to any third party.

8. Data Retention

We will only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

  • Marketing data is kept until you unsubscribe or withdraw consent.
  • Customer and order records are typically kept for at least six years to comply with UK tax and accounting obligations.
  • Enquiry data is kept only as long as needed to respond and for a reasonable period afterwards.

When your data is no longer needed, we will securely delete or anonymise it.

9. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

  • The right to be informed – to know how your data is being used (as set out in this policy).
  • The right of access – to request a copy of the personal data we hold about you.
  • The right to rectification – to have inaccurate or incomplete data corrected.
  • The right to erasure – to request that we delete your personal data in certain circumstances.
  • The right to restrict processing – to ask us to limit how we use your data.
  • The right to data portability – to receive your data in a portable format.
  • The right to object – to object to certain processing, including direct marketing.
  • The right to withdraw consent – to withdraw your consent at any time where we rely on it.

To exercise any of these rights, please contact us using the details below. We will respond within one month.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to help it function, to analyse how it is used, and to support our marketing.

Types of cookies we use

  • Essential cookies – necessary for the website to function correctly.
  • Analytics cookies – such as Google Analytics, which help us understand how visitors use our site.
  • Marketing cookies – such as Meta Pixel, which help us measure and improve our advertising.

Non-essential cookies are only set with your consent. You can manage or disable cookies at any time through your browser settings or through our cookie consent banner where provided. Disabling certain cookies may affect how the website functions.

11. How to Contact Us

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us:

Name: Lisa-Marie Elkhadraoui

Email: teamdesignbossdiary@gmail.com

Address: available upon request

12. How to Make a Complaint

We hope to resolve any concern you may have about how we handle your personal data. If you are not satisfied, you have the right to lodge a complaint with the UK supervisory authority for data protection, the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO)

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

This policy may be updated from time to time. Any changes will be posted on this page with an updated revision date.