PRIVACY POLICY
Last Updated: 22.09.2025
www.nellyghaffar.com (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [insert website URL] and use our services, including subscription services, personalised video messages, and the purchase of physical goods (collectively, the “Services”).
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Important Information and Who We Are
Data Controller:
www.nellyghaffar.com is the data controller responsible for your personal data.
Contact Details:
Nelly Ghaffar
If you have questions about this Privacy Policy or our data practices, please contact us using the details above.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.
2. Data We Collect About You
We may collect, use, store and transfer different kinds of personal data, including:
-
Identity Data: name, username or similar identifier, title, date of birth.
-
Contact Data: email address, billing address, delivery address, telephone numbers.
-
Financial Data: payment card details (processed securely via our payment processor— we do not store full card details).
-
Transaction Data: details about payments to and from you and other details of products and services you have purchased.
-
Technical Data: internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access our Site.
-
Profile Data: your username and password, purchases or orders, preferences, feedback and survey responses.
-
Usage Data: information about how you use our Site and Services.
-
Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences.
-
Content Data: any content you submit, such as instructions for personalised video messages or product reviews.
We may also collect aggregated data such as statistical or demographic data, which is not considered personal data as it does not reveal your identity.
3. How We Collect Your Data
We collect data in the following ways:
-
Direct interactions: when you register an account, subscribe, purchase goods or services, request video messages, or contact us.
-
Automated technologies: as you interact with our Site, we automatically collect Technical Data using cookies, server logs and similar technologies.
-
Third parties: such as analytics providers (e.g. Google Analytics), advertising networks, and payment processors.
4. How We Use Your Personal Data
We will only use your personal data when permitted by law, including:
-
To register you as a customer and provide the Services.
-
To process and deliver your orders, including managing payments and collecting money owed.
-
To manage our relationship with you, including notifying you about changes to our Terms or Privacy Policy.
-
To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting).
-
To deliver relevant website content and advertisements and measure their effectiveness.
-
To use analytics to improve our website, products/services, marketing and customer relationships.
-
To send you marketing communications if you have opted in (or where we have another lawful basis to do so).
Our lawful bases for processing may include performance of a contract, consent, legal obligation, and legitimate interests (for running our business and improving our services).
5. Marketing
You can ask us to stop sending you marketing messages at any time by following the unsubscribe link in emails or by contacting us at enquiries@nellyghaffar.com
We will not share your personal data with any third party for marketing purposes without your explicit consent.
6. Cookies
Our Site uses cookies and similar technologies. For more information on how we use cookies and how to manage your preferences, please see our Cookies Policy.
7. Disclosures of Your Personal Data
We may share your personal data with:
-
Service providers acting as processors who provide IT, system administration and payment services.
-
Professional advisers including lawyers, bankers, auditors and insurers.
-
HM Revenue & Customs, regulators and other authorities where required by law.
-
Third parties to whom we may choose to sell, transfer or merge parts of our business.
We require all third parties to respect the security of your personal data and to process it in accordance with the law.
8. International Transfers
If we transfer your personal data outside the UK (for example, to cloud hosting providers or service providers in other countries), we will ensure that appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses, to ensure a similar degree of protection.
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We limit access to your personal data to employees, contractors and service providers who have a business need to know.
10. Data Retention
We will keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including for legal, accounting or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm, and our legal obligations.
11. Your Legal Rights
Under the UK GDPR you have the following rights:
-
Right to access your personal data.
-
Right to rectification of inaccurate or incomplete data.
-
Right to erasure (“right to be forgotten”) where there is no good reason for us to continue processing it.
-
Right to restrict processing in certain circumstances.
-
Right to data portability to obtain and reuse your data across different services.
-
Right to object to processing based on legitimate interests or direct marketing.
-
Right to withdraw consent at any time where we rely on consent.
To exercise any of these rights, please contact us at [contact email]. We may need to verify your identity before fulfilling your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
12. Children’s Privacy
Our Services are not intended for children under 18 and we do not knowingly collect data from them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated “Last Updated” date. Please review this policy periodically for updates.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact:
Nelly Ghaffar