Privacy Notice | Billy Smith Therapy

This Privacy Notice explains how Billy Smith Therapy(“we”, “us”) collects and uses personal data when you visit burnoutrecoveryhelp.com or buy our products. Billy Smith Therapy is the data controller for the personal data described below. You can contact us at billy@burnoutrecoveryhelp.com.

Personal data we collect

Assessment data — your burnout test responses, score, and (if you consent) the email address you submit, so we can send your results and weekly check-ins.
Account & purchase data — the email address you submit at checkout, used to grant access to products you buy.
Support correspondence — messages you send us via email or the contact form.
Technical & usage data — IP address, device/browser type, pages visited, referrer, collected via cookies and analytics for security and product improvement.

Payment card details are entered directly with our payment provider and are never stored or seen by us.

How and why we use your data

Deliver the burnout assessment, results, and any optional follow-ups you opt in to — legal basis: consent.
Process purchases and provide access to paid products — legal basis: performance of a contract.
Respond to support enquiries — legal basis: legitimate interests.
Keep the site secure, prevent fraud and abuse, and improve the product — legal basis: legitimate interests.
Meet legal, accounting and tax obligations — legal basis: legal obligation.

Who we share data with

Stripe Payments Europe, Ltd. — our payment processor. Stripe handles checkout, card processing, billing, tax calculation and refunds, and is an independent controller for that payment data. See Stripe’s Privacy Policy.
Hosting and infrastructure — Lovable Cloud for database and backend hosting.
Email delivery — providers used to send transactional and (if you opted in) reminder emails.
Analytics — Google Analytics 4 and similar tools, configured to minimise personal data.
Professional advisers — accountants and legal advisers where necessary.
Authorities — where required by law.

International transfers

Some processors are based outside the UK/EEA. Where data is transferred internationally we rely on UK/EU adequacy decisions or Standard Contractual Clauses to safeguard it.

How long we keep data

Assessment results are kept for as long as the email address remains subscribed, or until you ask us to delete them. Purchase records are kept for at least six years to meet UK tax requirements. Support messages are kept for up to three years. Anything no longer needed is deleted or anonymised.

Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw any consent you have given. Contact billy@burnoutrecoveryhelp.com to exercise these rights — we’ll respond within one month. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and row-level database security. No system is ever 100% secure, but we work to protect your data as if it were our own.

Cookies

We use essential cookies needed for the site to work and analytics cookies (Google Analytics) to understand usage. You can block or delete cookies through your browser settings.

Changes

We may update this notice from time to time. The “last updated” date above tells you when it last changed.