PRIVACY POLICY

Last updated: December 2025

1. Who I am
For the Brave Co.
Owner: Esther Bathers
8 Harvest Street, Cheltenham, UK
Email: hello@forthebrave.co

2. What information I collect
I collect information in a few different ways:

Information you provide directly

• Name and email address (e.g. through contact forms, newsletter sign-ups)
• Project or enquiry details
• Billing information (processed securely through third-party platforms)
• Files or content you submit for design work

Information collected automatically
Through analytics tools:

• IP address
• Device type
• Pages viewed
• Time spent on the site
• Referring website

This helps me understand how people use the website so I can improve it.

Information from purchases

• If you buy a Showit template or digital product:
• Name
• Email
• Payment confirmation

 Payment details such as card numbers are handled by third-party processors — I never see or store them.)

3. How your data is used
I use your personal data to:

• Respond to enquiries
• Deliver design projects
• Send newsletters or updates (if you opt in)
• Process purchases and provide access to digital downloads
• Improve the website and customer experience
• Comply with legal or tax obligations

I will never sell your data or share it for marketing purposes with third parties.

4. Legal basis for processing
Under UK GDPR, I process your data on the basis of:

• Contract (to deliver a service or digital product you have purchased)
• Consent (newsletter sign-ups)
• Legitimate interest (website analytics, improving services)
• Legal obligation (tax and accounting requirements)

For any data protection questions, you can contact hello@forthebrave.co.

5. How your information is stored
Your data is stored securely using trusted systems:

• Showit (website host)
• Flodesk (email marketing)
• Google Workspace (email + file storage)
• ThriveCart / Shopify Lite / Stripe (digital product sales, where relevant)
• Google Analytics

All providers use industry-standard security and are compliant with UK GDPR.

6. Sharing your data
Your data may be shared with trusted service providers who support the running of my business, including:

• Website hosting providers
• Payment processors
• Email marketing software
• Analytics platforms

These services are only permitted to use your data as necessary to perform their work and cannot use it for their own purposes.

7. Data retention
I keep personal information only for as long as necessary:

• Client projects: up to 7 years (to comply with UK accounting law)
• Email addresses (newsletter): until you unsubscribe
• Digital product purchases: for the lifetime of your access

8. Your rights
You have the right to:

• Access the data I hold about you
• Request corrections
• Request deletion (in certain cases)
• Object to processing
• Withdraw consent at any time
• Request a copy of your data in a portable format

To exercise any of these rights, email hello@forthebrave.co.

9. Children
This website is not intended for children under 16, and I do not knowingly collect data from them.

10. External links
If you click links to other websites (e.g. client sites, Instagram, Flodesk), their privacy practices apply, not mine.

11. Updates to this policy
This Privacy Policy may be updated occasionally. Any changes will be posted on this page.