This Privacy Policy explains how Empowered By Poppy ("we", "us", "our") collects, uses and protects your personal information when you visit this website or get in touch with us. We're committed to handling your data responsibly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how your information is handled, you can contact us at hello@empoweredbypoppy.com at any time.
Who we are
Empowered By Poppy is an online fitness and nutrition coaching business. For the purposes of data protection law, Empowered By Poppy is the "data controller" of the personal information described in this policy — meaning we decide how and why it's collected and used.
Information we collect
We only collect personal information that you choose to give us, through the forms on this website. Depending on which form you use, this may include:
- Your first name
- Your last name
- Your email address
- Your phone number
- The fact that you've submitted a general coaching enquiry, together with any information included in that enquiry
- The fact that you've joined the EBP Challenge waitlist, together with the information provided when joining it
We do not collect payment or financial details through this website, and we do not currently use analytics, advertising or tracking cookies anywhere on this site (see "Cookies and similar technologies" below for more on this).
How we collect your information
We collect personal information directly from you when you:
- Complete the enquiry form on the "Enquire" page to ask about 1-1 online coaching
- Join the EBP Challenge waitlist via the form on the EBP Challenge page
We don't collect personal information about you from any other source.
Why we collect it, and our legal basis for using it
We use your information for the following purposes:
- Responding to your enquiry. If you submit a coaching enquiry, we use your details to get in touch with you (by email and/or WhatsApp, using the phone number you provide) to discuss your goals and how we might be able to help. Our legal basis for this is legitimate interest — responding to a direct request you've made — and taking steps towards a contract with you if you go on to become a client.
- Managing the EBP Challenge waitlist. If you join the waitlist, we use your details to keep a record of your interest and to email you when the next EBP Challenge launches and enrolment opens. Our legal basis for this is your consent, given when you submit the waitlist form.
- Operating and securing the website. We use limited technical information as part of running the website itself (see "Cookies and similar technologies" below). Our legal basis for this is legitimate interest in keeping the site functional and secure.
We do not use your information for automated decision-making or profiling.
How we use WhatsApp
Where you've provided a phone number — whether through the Enquire form or the EBP Challenge waitlist form — we may use it to contact you via WhatsApp about the enquiry or waitlist you've submitted. Sending a WhatsApp message involves your phone number being processed by WhatsApp (owned by Meta) in order to deliver the message; this is subject to WhatsApp's own privacy policy, which we encourage you to review.
Marketing communications
If you join the EBP Challenge waitlist, we'll only email you about the EBP Challenge itself — for example, letting you know when the next challenge launches and enrolment opens. We will not automatically add you to any other Empowered By Poppy marketing or newsletter emails, and we won't use your waitlist details for unrelated marketing, unless you separately opt in to that elsewhere.
Every marketing email we send will include a clear way to unsubscribe, and you can also ask us to stop at any time by emailing hello@empoweredbypoppy.com. Unsubscribing from EBP Challenge waitlist emails won't affect any other, separate relationship you may have with us (for example, as an existing 1-1 coaching client).
Who we share your information with
We use a small number of trusted third-party services to help run this website and communicate with you. We don't sell your information to anyone, and we only share it with these third parties as necessary to provide the service described:
- Brevo — an email marketing and communications platform. Brevo sends the transactional emails that notify us when you submit an enquiry or join the EBP Challenge waitlist, and — for waitlist sign-ups only — stores your name, email address and phone number as a contact on a dedicated "EBP Challenge Waitlist" list, so we can email you when the challenge launches. General coaching enquiries are never added to this or any other Brevo list.
- Netlify — our website hosting provider. Netlify hosts the website and runs the backend functions that process form submissions before they're passed to Brevo. Netlify may process technical data (such as server request logs) as part of hosting the site.
- WhatsApp (Meta) — where we contact you via WhatsApp, as described above.
Where any of these providers process personal information outside the UK, they do so under data protection safeguards intended to ensure your information continues to receive an appropriate level of protection (such as adequacy decisions or standard contractual clauses).
We may also disclose your information if required to do so by law, or to protect our rights, property or safety, or that of others.
Cookies and similar technologies
This website does not currently use analytics, advertising or marketing cookies of any kind.
The site may use browser local storage for a small number of strictly functional purposes that don't identify you personally — for example, remembering that you've closed a promotional pop-up, so it doesn't reappear on your next visit. This information stays in your own browser and is not sent to us or any third party.
If this ever changes — for example, if we introduce website analytics in the future — we will update this section and put an appropriate cookie notice and consent mechanism in place first.
How long we keep your information
We only keep personal information for as long as it's reasonably needed for the purpose it was collected for:
- Coaching enquiries are sent to us by email and kept for as long as reasonably necessary to respond to you and for our own record-keeping, after which they're deleted in the ordinary course of managing our mailbox.
- EBP Challenge waitlist entries are kept on our Brevo contact list until the challenge you registered interest in has launched and been dealt with, until you unsubscribe or ask us to remove you (whichever is sooner), or until we periodically review and remove waitlist entries that are no longer needed.
You can ask us to delete your information sooner at any time — see "Your rights" below.
Data security
We take reasonable technical and organisational steps to protect your personal information, including sending data over an encrypted (HTTPS) connection and limiting access to your information to what's needed to respond to you or run the website. Our third-party providers (Brevo and Netlify) are also required to maintain appropriate security measures of their own.
No method of transmission or storage is ever 100% secure, but we take your information's security seriously and act promptly if we become aware of any issue.
Children's privacy
This website is not directed at, and we do not knowingly collect personal information from, children under the age of 16.
Your rights under UK data protection law
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Correct any information that's inaccurate or incomplete
- Erase your information ("the right to be forgotten"), in certain circumstances
- Restrict how we use your information, in certain circumstances
- Object to us using your information, in certain circumstances
- Data portability — receive a copy of your information in a portable format, in certain circumstances
- Withdraw consent at any time, where we're relying on consent (for example, EBP Challenge waitlist emails)
To exercise any of these rights, just email us at hello@empoweredbypoppy.com. We'll respond as promptly as we can.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe we haven't handled your information properly. You can find out how to do this at ico.org.uk. We'd appreciate the chance to address any concerns directly first, so please do get in touch with us too.
Changes to this policy
We may update this Privacy Policy from time to time — for example, if we start using a new tool or third-party service. Any changes will be posted on this page with an updated date at the top, so please check back periodically.
Contact us
If you have any questions about this Privacy Policy or how your personal information is handled, please contact us at hello@empoweredbypoppy.com.