Privacy Policy

 

At Little Owls Resources, we are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the new Data (Use and Access) Act 2025 (DUAA).

1. Data We Collect

We collect and process your personal data for specific purposes. This information is provided directly by you when you interact with our services.

  • Account Information: When you create an account, we collect your name and email address.

    • Purpose: We use this to create and manage your account and to provide you with access to our resources.

    • Legal Basis: This is necessary to perform our contract with you as a member.

  • Billing Information: When you subscribe, our third-party payment providers, MemberSpace and Stripe, collect and process your payment details.

    • Purpose: To process your subscription payments securely.

    • Legal Basis: This is necessary to perform our contract with you.

  • Website Usage Data: We collect anonymised data from all visitors to monitor traffic, fix bugs, and improve our services.

    • Data Collected: This includes your IP address, browser type, language, and the timestamp of your request.

    • Purpose: To monitor website performance and improve our service.

    • Legal Basis: We rely on our legitimate interest to maintain and improve our website's functionality and security.

  • Cookies and Tracking Technologies: We use cookies to collect information. Cookies are small data files stored on your device.

    • Purpose: Cookies help us remember your preferences, improve your experience, and analyse which features are most popular.

    • Legal Basis: We ask for your explicit consent when you first visit our site. Under the DUAA, some cookies for statistical analysis and website improvement may not require consent, but we will always be transparent about our use of them.

    • Please see our Cookie Policy for more information.

2. How We Use and Share Your Data

Your personal data is used to provide you with the best possible service, and we handle it with care. We will never share your personal information with third parties without your consent, unless legally required to do so.

  • To Provide Resources: We use your personal information to give you access to our resources, manage your account, and process payments.

  • To Communicate and Offer Support: We use your contact information to send you updates about your account, notify you of changes to our services, and provide technical support.

  • Third-Party Services:

    • Membership Management: Our membership system is provided by MemberSpace, which acts as our data processor. They handle your account information and integrate with our payment processors. MemberSpace's privacy policy can be found HERE.

    • Payments: We use Stripe (or PayPal for legacy accounts) to process your payments. We never have access to your full credit card details. Stripe's privacy policies can be found HERE and PayPal's privacy policy can be found HERE.

    • Analytics: We use third-party analytics services (e.g., Google Analytics) to help us understand how people use our website. This involves the use of cookies and other technologies to collect anonymised data such as your IP address and pages viewed.

    • Social Media: We use social media buttons for platforms like Facebook, BlueSky and Pinterest. Your use of these services is optional. Be aware that these services have their own privacy policies, which you should read and understand.

3. Your Rights and Preferences

In line with UK GDPR and the DUAA, you have strong rights over your data. We are committed to making it easy for you to exercise them.

  • Your Right to Access (DSAR): You have the right to request a copy of the personal information we hold about you. The DUAA clarifies that we are only required to conduct a "reasonable and proportionate" search to fulfil this request.

  • Your Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.

  • Your Right to Erasure: You can request that we delete your personal data.

  • Your Right to Object: You can object to us processing your data under certain conditions, such as for direct marketing purposes.

  • Your Right to Complain: If you have concerns about how we use your personal data, you have the right to make a complaint. The DUAA requires us to have a formal process for this. We will acknowledge your complaint within 30 days and respond without undue delay.

To exercise any of these rights, or to make a complaint, please contact us.

Communication Preferences

All memberships entitle you to to receive our optional inspirational newsletter service. During the sign-up process please ensure you check the appropriate box if you wish to ‘opt in’. If you wish to change your preference after the sign-up process, at any point you can go into 'Your Account' (click on the green button at the bottom of the screen), select 'Edit your profile' and check or uncheck the newsletter box (depending on your preference). Finally, click the green button which says 'Update profile'. You will find this by scrolling down to the bottom. Alternatively if you have ‘opted in’ and receive our emails, you can unsubscribe at any time by clicking the links provided in those emails.

Please note that in addition to the optional newsletters, we will also send you essential emails from time to time. These include transactional emails and customer communications related to your membership, which are necessary for the smooth running of your account.

4. Security and Data Retention

We take reasonable technical and organisational steps to protect your personal information from loss, misuse, and unauthorised access. However, no internet transmission is ever completely secure.

We retain your personal information for as long as your account is active or as needed to provide our services to you. We will also retain data for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Once your data is no longer needed, we will securely delete or anonymise it.

5. Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal data from anyone in this age group. If we discover that we have collected such information, we will take immediate steps to delete it.

6. Changes to this Policy

We may amend this privacy policy from time to time to reflect changes in our practices or the law. When we make a material change, we will notify you by posting an announcement on our website or sending you an email. Your continued use of our services after any changes indicates your acceptance of the updated policy.