Privacy policy

Who we are

The 80:20 Pathway is the training and consultancy practice of Dr Emma Heywood, based in the United Kingdom. For the purposes of UK data protection law, we are the “data controller” for the personal data described in this policy, which means we decide how and why it is used.

You can contact us about anything in this policy, or about your data, at hello@the80-20pathway.com. Our postal address is available on request.

The personal data we collect, and why

We keep data collection to a minimum and only use what we collect for the purpose we collected it for.

1. Enquiry details. When you use our contact form or email us, we collect your name, email address, your organisation (if you give it), and the content of your message.

• Why: to read and respond to your enquiry and, where relevant, to discuss working together.
• Lawful basis: our legitimate interests in responding to enquiries about our services; and, where you ask us to take steps towards an agreement, taking steps at your request before entering a contract.

2. Technical and usage data. Like any website, when you visit, our hosting provider automatically processes limited technical data, such as your IP address, browser type, and the pages you request, recorded in server logs.

• Why: to deliver the site reliably, keep it secure, and prevent abuse.
• Lawful basis: our legitimate interests in operating a secure, functioning website.

3. Cookies and similar storage. We currently use only strictly necessary and functional storage, for example to remember your light or dark theme preference and your cookie choice. We do not currently use analytics, advertising or tracking cookies. Our cookie policy explains this in full.

We do not collect special category data (such as health or political opinions), we do not use your data for automated decision-making or profiling, and we never sell your data.

Newsletter and analytics (not yet active)

We are preparing to add a newsletter, and we may in future enable privacy-friendly website analytics. Any sign-up forms you see on the site are not yet connected, so they do not currently store or send your details. Before either feature goes live we will update this policy and, where the law requires it, ask for your consent: your consent for marketing emails, and your consent before setting any non-essential cookies. You will always be able to unsubscribe from the newsletter, or change your cookie choice, at any time.

Who we share your data with

We never sell your personal data. We share it only with the service providers (“processors”) that help us run the site and respond to you, under contracts that require them to protect it and use it only on our instructions:

• Formspree: processes contact-form submissions and delivers them to us by email.
• Vercel: hosts the website and processes server logs.
• Our email provider: stores and delivers the messages in our inbox.

We may also disclose data where we are required to by law, or to establish, exercise or defend legal claims.

International transfers

Some of our providers (including Formspree and Vercel) are based outside the United Kingdom, including in the United States. Where your data is transferred outside the UK, we rely on the safeguards recognised under UK data protection law, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement (or Addendum to the Standard Contractual Clauses), so that your data receives an equivalent level of protection.

How long we keep your data

We keep your data only for as long as we need it:

• Enquiry correspondence: for as long as needed to deal with your enquiry, and for up to 24 months after our last contact, unless we need to keep it longer to meet a legal obligation or to resolve a dispute.
• Server logs: kept for a short period by our hosting provider for security and diagnostics.

You can ask us to delete your data sooner (see your rights below).

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data (the “right to erasure”);
• ask us to restrict or object to how we use it;
• request a copy of certain data in a portable format; and
• withdraw your consent at any time where we rely on consent (this does not affect anything we did before you withdrew it).

To exercise any of these rights, email us at hello@the80-20pathway.com. We will respond within one month, and there is normally no charge.

Complaints

If you are concerned about how we handle your data, please contact us first at hello@the80-20pathway.comso we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

How we protect your data

We take reasonable technical and organisational measures to keep your data safe, including serving the site over a secure (HTTPS) connection and working only with reputable providers. No method of transmission over the internet is completely secure, but we take care to protect your data and review our measures.

Children

This website and our services are intended for professionals and organisations, not children, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed, and we will highlight any significant changes on this page.