. Who we are

This Privacy Policy explains how Trisha Talks collects, uses, shares, and protects personal information when you use our website, place an order, book a service, or contact us.

For privacy questions, contact us at trishaguk@gmail.com.

2. Information we collect

When you place an order, we may collect your name, contact details, billing or delivery information, order details, and payment-related information.

When you make a booking, we may collect your name, contact details, and booking information.

When you contact us through a form, we collect the information you provide, such as your name, email address, telephone number, and message.

Our website also uses essential cookies and similar technologies for security, sessions, site functionality, and performance.

3. How we use information

We use personal information to:

1. Provide products and services you request.

2. Process orders, bookings, and payments.

3. Respond to enquiries and provide customer support.

4. Send marketing communications where you have permitted us to do so.

5. Keep records required for legal, tax, and accounting purposes.

6. protect our website and help prevent fraud or misuse.

7. Use AI or automated tools involving visitor or customer data.

Where UK data-protection law applies, we rely on contractual necessity for providing requested products or services, legal obligations for required records, consent for optional marketing and non-essential cookies, and legitimate interests for security, administration, and service improvement.

We will provide further information about any significant automated decision and its effects where required by law.

4. Who we share information with

We share information with service providers that help us operate the business, including:

• PayPal and Stripe, which process payments.

• Mailchimp, which supports email marketing.

• Wix, which hosts and supports the website and its business features.

Wix may use infrastructure and service providers to operate its platform. Further information is available in Wix’s sub-processor list:
https://support.wix.com/en/article/list-of-wixs-sub-processors

We may also share information where required by law, to protect our rights, or to prevent fraud or security threats.

We do not sell or share visitor data for advertising purposes.

5. Payments

Payments are processed by PayPal or Stripe. We do not store your full payment-card number.

6. International processing

Because our visitors are global and our service providers operate internationally, personal information may be processed outside the United Kingdom. We use the safeguards provided by Wix, PayPal, Stripe, and Mailchimp under their applicable privacy terms and data-processing arrangements.

7. Cookies

Our website uses essential cookies for security, sessions, stability, and performance. We also use a cookie banner and consent mode so visitors can manage non-essential cookies.

You can also control cookies through your browser settings. Blocking some cookies may affect site functionality.

8. Email communications

We may send marketing emails through Mailchimp where permitted. You can unsubscribe at any time by using the unsubscribe link in the email.

We may still send necessary service or transaction messages, such as booking or order communications.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information. You may also object to certain uses or withdraw consent where processing relies on consent.

To make a privacy request, email trishaguk@gmail.com. We may need to verify your identity before completing the request.

You may also complain to the privacy regulator in the country where you live or work. UK residents can contact the Information Commissioner’s Office.

10. How long we keep information

We keep digital order and invoice records for one month.

We keep physical order and invoice records for one month.

Other information is kept only for as long as needed for the purposes described in this policy and for applicable legal, tax, or accounting obligations, after which it is deleted or anonymised where appropriate.

11. Security

We use Wix to host and operate our website. Wix provides security for its underlying infrastructure. We also take reasonable steps to protect personal information within our business.

No online service can guarantee absolute security.

12. Children

Our website is not directed to children under 16, and we do not knowingly serve children under 16.

13. Changes to this policy

We may update this policy when our services, technology, or legal obligations change. The updated version will be posted on this website with a new effective date.

14. Contact

For questions or privacy requests, contact:

Trisha Talks
Email: trishaguk@gmail.com

Additional information for global visitors

Privacy rights vary between countries. If you use our website from outside the United Kingdom, local laws may give you additional rights or protections.

Blocking issues to resolve before publication

• Confirm that the one-month retention rule applies to all digital and physical order and invoice records and is operationally enforced.

• Confirm the AI tools used, the information they receive, whether humans review outputs, and whether data is used to train models.

• Confirm international-transfer safeguards for PayPal, Stripe, and Mailchimp.

• Confirm whether the UK business’s global customer activity requires an EU representative.

Important confirmations still needed

• Confirm the exact Mailchimp account and data practices.

• Confirm whether Wix Members Area, chat, gift cards, invoices, or other installed features collect information beyond the interview answers.

• Confirm the live cookie banner matches the policy and does not advertise tracking or advertising cookies.

• Confirm whether customer data is deleted after one month in both digital and physical systems.

Recommended operational improvements

• Document retention and deletion procedures for every data category.

• Keep a current list of providers receiving personal information.

• Record how privacy requests are verified and completed.

• Maintain a record of the AI tools and their data-use settings.

Questions for legal review

• What legal basis applies to each processing purpose under UK GDPR?

• Is an EU representative required for services offered to global visitors?

• Are the stated PayPal, Stripe, Mailchimp, and Wix transfer safeguards accurate?

• Does the use of AI or automated decisions require additional disclosures or safeguards?

• Are any US state privacy laws triggered by the business’s activities or threshold