Rachel Grosvenor: Author, Coach & Editor
Who we are
Our website address is: https://rachelgrosvenorauthor.com. This policy covers all services, including coaching and editing. Other services are used provided by third parties to fufil coaching, editing, and other services. These third party services have their own privacy policies and compliances that should be reviewed by the purchaser/user. Rachel Grosvenor is not responsible for any third party processes. These include but are not limited to:
- Zoom
- Paypal Business
- Docusign
- Thinkific
- Patreon
- WordPress
- Mailchimp
- Gmail
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Data protection policy
This policy sets out how this website and Rachel Grosvenor Author, Coach, Editor handles the personal data of its employees, customers, suppliers and other third parties.
This policy is intended to ensure that we:
• Comply with data protection law and follow good practice;
• Protect the rights of team members, customers and partners;
• Are transparent about how we store and process individuals’ data;
•Are protected from the risks of a data breach.
Protecting the confidentiality and integrity of personal data is a critical responsibility that we take seriously at all times. This policy is therefore intended to apply to the personal data that we process about you. It also applies to you in situations where your role involves you processing data on our behalf. This policy does not form part of any employee’s contract of employment, and we may amend it at any time. It does not override any applicable national data privacy laws and regulations in countries where we operate.
Data protection principles
We adhere to the principles relating to the processing of personal data, as set out in the GDPR. These require personal data to be:
- Processed lawfully, fairly and in a transparent manner;
- Collected only for specified, explicit and legitimate purposes (“purpose limitation”);
- Adequate, relevant and limited to what is necessary in relation to the purposes for which it is
- processed (“data minimisation”);
- Accurate, and where necessary, kept up to date (“accuracy”);
- Not kept in a form which permits identification of data subjects for longer than is necessary (“storage limitation”);
- Processed in a way which ensures its security, using appropriate technical and organisational measures to protect against unauthorised or unlawful processing, and against accidental loss, destruction or damage (“integrity and confidentiality”);
In addition to these 6 core principles there are a number of other obligations on us (as the controller of your data) and rights that you have in relation to your data (as data subject). These include requirements that your personal data is:
• Not transferred to another country without appropriate safeguards in place;
• Made available to data subjects, who must be allowed to exercise certain rights in relation to their personal data.
Fair, lawful and transparent processing
We process your personal data lawfully, fairly and in a transparent manner. What this means is that we can only process your data fairly and lawfully and for one of the specified purposes (or legal bases) set out in the GDPR. These include the following:
• The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation to which the controller is subject;
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
When we collect personal data about you, whether directly from you or from a third party, then we are obliged to provide you with certain information about that personal data including what we will do with it, who we will share it with and what our legal basis for processing is. That information is set out in this policy.
Consent
Data subjects can withdraw their consent at any time. Email [email protected], for example, if you no longer wish to be a part of the newsletter.
Data Minimisation
The data that we collect and process is limited to what is strictly necessary and relevant for the intended purposes. When any data is no longer needed for these purposes, we either delete or anonymise it.
Storage Limitation
Personal data must not be kept in an identifiable form for any longer than is necessary for the stated purposes for which the data is processed. Therefore, when personal data is no longer needed, it is deleted or anonymised.
Sharing personal data
We only share personal data with third parties, such as service providers, under the following circumstances:
• The third party needs to hold the data in order to provide the contracted services (the Masterclass is purchased via Thinkific, the platform on which it is provided, Discovery Calls are taken over Zoom, and purchases of workbooks are processed via WordPress, payments for services are processed via Paypal Business).
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.