PRIVACY POLICY

1. Who we are

ENOUGH AS YOU ARE!™ is run by Patrizia Galeota, a sole trader based in the UK. We’re the “data controller” for the personal information described here. Contact us at [email protected]

2. What we collect

When you buy: your name, email, delivery address and order details. Payment card details are handled by Stripe. We never see or store your card number.

When you contact us: your name, email and anything you choose to tell us.

When you apply to be an Ambassador: your name, email, social media handles and the payment details we need to pay your commission.

When you browse our site: with your permission, anonymous information about how you use the site (pages visited, device type, rough location) via Google Analytics.

3. Why we use it (and our legal basis)

To process and deliver your order (contract)

To answer your questions and support school orders (legitimate interests)

To run the Ambassador Program and pay commission (contract)

To understand and improve our website (consent, via our cookie banner)

To keep financial records as required by law (legal obligation)

We’ll only send you marketing emails if you’ve opted in, and you can unsubscribe at any time.

4. Who we share it with

We only share what’s needed with trusted services that help us run the business:

Stripe: payments

Evri: delivery

GoHighLevel: our website and customer records

Zapier: connects our order system to our customer records

Google Analytics: website statistics (only if you accept cookies)

Namecheap: email forwarding

We never sell your data. Some of these services may process data outside the UK. Where they do, they use approved safeguards such as standard contractual clauses.

5. Cookies

We use essential cookies to make the site work, and analytics cookies only if you say yes. You can change your choice any time using the cookie icon at the bottom left of the page.

6. Young People

Our cards are made for teens, but our website and shop are aimed at adults: parents, carers, teachers and schools. We don’t knowingly collect personal information from anyone under 13. If you think a child has given us their details, email us and we’ll delete them.

7. How long we keep it

Order and financial records: 6 years (required by HMRC)

Enquiries: up to 2 years

Ambassador records: for as long as you’re an Ambassador, plus 6 years for payment records

Analytics data: 14 months

8. Your rigths

You can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent at any time. Just email [email protected]. We’ll reply within one month.

9. Changes

We may update this policy from time to time. The date at the top shows when it last changed.

10. Governing law

These terms are governed by the law of England and Wales.

Questions: [email protected]