01Who handles your information
Mikaela Jackson trading as She Almighty is the data controller responsible for personal information used through this website, Shop, Members Portal and service delivery. She operates as a sole trader in England, United Kingdom.
Business correspondence address:
Mikaela Jackson trading as She Almighty
c/o Suite 3, Dukes House
4–6 High Street
Windsor, Berkshire
SL4 1LD
United Kingdom
For general enquiries, privacy and data protection enquiries, data access requests or complaints, email mikaela@shealmighty.com.
02Information collected
- Enquiries: first/last name, email, optional organisation, enquiry category, message and submission records.
- Newsletter and waiting lists: first name, email and recorded subscription source/consent information; programme interest where applicable.
- Accounts: name, email, authentication credentials/session records, profile information and account/invitation status. The website’s account-creation journey uses a purchase or authorised invitation; programme access requires a separate access grant.
- Coaching and programme participation: engagement/package details, assigned coach, session allocations, appointment details, booking links, attendance/status records, optional preparation, reviews, goals, reflections, resources and follow-up.
- Purchases: product, amount/currency, payment status, payment-provider identifiers, instalment/subscription and refund records, access grants, and authorised manual payment ledger records where used.
- Gifts: buyer/recipient name and email as supplied, personal message, delivery choice/date, gift value, voucher code, payment and redemption records. We receive recipient information from the buyer before the recipient uses the site.
- Community: posts, comments, reactions, author display names, moderation records and optional directory/profile information.
- Technical information: browser/session storage and ordinary connection information sent to website and embedded-service providers, such as IP address and browser details.
Provide only what is needed. Do not include card details, another person’s confidential information or unnecessary health information in enquiries, gift messages or community posts. Card entry is handled by Stripe, not the coaching enquiry form.
03Purposes and lawful bases
Data protection law requires a lawful basis for using personal information. The basis depends on the activity:
- Steps towards or performance of a contract: answering service enquiries at your request, administering purchases, delivering programmes/coaching, member access and transactional communications.
- Legitimate interests, where appropriate and balanced against your rights: business-to-business enquiries, gift delivery requested by a buyer, service administration involving people who are not the purchaser, account security, proportionate moderation and resolving disputes.
- Legal obligations: records and disclosures required by applicable tax/accounting law or a valid legal requirement.
- Consent: optional newsletter marketing and any storage/access technology requiring consent. Withdrawing consent does not affect the lawfulness of earlier consent-based processing.
04Private coaching information and sensitive data
Private programme work and community sharing are different. The current portal is designed to keep personal Blueprint work and private goals/reflections owner-scoped. Coaching My Space is private by default; explicitly shared items and specified preparation/review forms can be accessible to the assigned coach or authorised Super Admin. Confidential coach notes have separate coach/Super Admin access, not general community visibility.
The standalone Intensive has separate access arrangements: authorised staff can review preparation and maintain confidential Intensive notes and follow-up. The member can read their own preparation and follow-up explicitly shared with them, but not the confidential staff notes.
Health, disability and other sensitive information need additional protection under data protection law. Please do not include unnecessary sensitive information in forms, gift messages or community posts. If this information is relevant to your coaching, contact us first about how it will be handled.
05Community visibility
Our Bigger Year community posts, comments, reactions and author names are shared with eligible community members and staff moderators. Directory inclusion is optional and defaults to not visible in the current design. Posting in a private community does not make content private to you or prevent another member from copying it.
Use private reflection areas for personal work you do not want to share. Contact us if a post discloses personal information inappropriately.
06Service providers and sharing
The website uses the following services:
- Lovable Cloud and managed Lovable services: website hosting/application services, account access, stored programme/enquiry/purchase records, assets and transactional email delivery.
- Stripe: payment checkout and payment-event information used to record purchases and manage access. Gift checkout also sends sender and recipient names, recipient email, personal message and delivery details to Stripe as payment metadata.
- Calendly: discovery and eligible coaching bookings. Booking information may include names, email, appointment details and scheduling answers. Live-client calendar synchronisation is not approved as active.
- Google (Analytics and Ads): only if you allow analytics or marketing in Cookie Settings, Google Tag Manager loads Google tags that receive page-visit information and, with marketing consent, measure contact enquiries, booking-link clicks, completed bookings and purchases so we can see which adverts work. Withdraw at any time through Cookie Settings.
- YouTube: the interview on Media & Insights loads only after external media consent; loading it sends technical information to the video service. The Contact booking widget also requires external media consent. Use Cookie Settings in the footer to withdraw that permission.
- Google Fonts: requests for font styles/files when pages load.
External book retailers and social platforms have their own notices when you follow their links. Staff and assigned coaches use information relevant to their authorised roles. We may also disclose information where a valid legal requirement applies.
07International transfers
Connected providers may process information outside the UK. The locations and transfer safeguards for the services used by this website have not been verified. Contact us with questions about where your information is processed.
08How long information is kept
There is no fixed deletion timetable implemented across all website records. How long information needs to be kept depends on the record: enquiries and invitations relate to your request; programme and coaching records relate to service delivery; community records relate to participation and moderation; purchase and voucher records relate to fulfilment, financial obligations and disputes.
Deletion requests must take account of ongoing services, financial or legal recordkeeping and unresolved complaints. Account closure, newsletter withdrawal and expiry of programme access do not necessarily delete all business or provider records.
09Access and security
The application includes member sign-in, programme access checks, database access policies intended to restrict records by ownership or authorised role, and status-oriented administrative audit records. These controls are intended to restrict access to authorised users; they are not a guarantee of complete security.
Coach assignment and reassignment require Super Admin authority. Authorised administrative enrolment does not itself assign a coach or grant access to confidential coach notes.
Keep your password private and contact us about suspected unauthorised access. No website or community can guarantee that information will never be compromised.
10Marketing choices
Newsletter sign-up is a separate affirmative action. The current form asks for first name and email and records subscription source/notice information. Buying a programme, receiving a gift or creating an account should not be treated as newsletter consent.
You can request withdrawal of newsletter consent by email at mikaela@shealmighty.com. A newsletter email-delivery and unsubscribe process has not been verified; you can email mikaela@shealmighty.com to ask us to stop using your details for marketing. Transactional purchase/account messages are separate from optional marketing.
11Your data protection rights
Depending on the circumstances and lawful basis, you may have rights to be informed, obtain access, correct inaccurate information, request erasure, restrict processing, receive certain information in a portable form and object to processing. You can object to direct marketing and withdraw consent at any time. Rights concerning solely automated decisions may apply where such processing occurs.
Rights are not absolute: information may need to be retained for a valid legal obligation or other applicable exception. Contact us by email at mikaela@shealmighty.com to exercise a right; proportionate identity verification may be needed. Requests are generally due a response within one month, subject to lawful timing rules and any permitted extension.
12Questions, complaints and updates
Contact She Almighty about how your information is used by email at mikaela@shealmighty.com. You can also complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113. You do not have to give up your right to complain to the regulator.
See our Cookie Policy for storage and embeds. We will update this notice when the website’s information handling changes.