Store Start Here About

ImPerfect Ltd Privacy Policy


Who We Are

 IMPERFECT.LOVE LTD is committed to protecting your privacy and handling your personal data securely, responsibly and transparently.

This Privacy Policy explains how we collect, use, store, protect and share your personal information when you use our website, purchase our products, access our digital resources, join our mailing list, contact us, attend our events or workshops, enrol in our courses, engage with our community spaces, or use any of our services.

IMPERFECT.LOVE LTD operates in accordance with the UK General Data Protection Regulation, also known as UK GDPR, and the Data Protection Act 2018.

Business name: IMPERFECT.LOVE LTD
Website: www.imperfect.love
Email: [email protected]
Registered office: 3 Pemberton Street, Manchester, England, M16 9JY
Company number: 17011155

For the purposes of data protection law, IMPERFECT.LOVE LTD is the data controller for the personal data we collect and use for our own business purposes.

Where we process personal data solely on behalf of a business or organisation under its documented instructions, that client may be the data controller and IMPERFECT.LOVE LTD may act as its data processor. In those circumstances, the client’s privacy information and our contract with the client will also apply.

 

Scope of This Privacy Policy

 This Privacy Policy applies to personal data collected through:

  • Our website
  • Online forms
  • Mailing list sign-ups
  • Purchases and checkouts
  • Digital products and downloadables
  • Mental fitness tools
  • Courses
  • Workshops
  • Events
  • Community spaces
  • Coaching-style personal development support
  • Email, phone, social media and website enquiries
  • Feedback forms, surveys and testimonials
  • Partner Programme applications, affiliate accounts, referral
  • tracking and commission payments
  • Bespoke-resource, co-creation, workshop, event and collaboration enquiries, agreements and project delivery
  • Analytics, cookies and similar website technologies

This Privacy Policy should be read alongside our Terms & Conditions, Disclaimer Policy, Refund Policy and Cookie Policy where applicable.

 

Age Requirement

 Our products, services, courses, workshops, events, digital products, downloadables, mental fitness tools, community spaces and online resources are intended for individuals aged 18 and over, unless otherwise clearly stated.

We do not knowingly collect personal data from children for our general services.

If we become aware that personal data has been provided by a person under 18 without appropriate consent or a clear lawful reason, we may delete that information and restrict access to our products or services.

Where we run a service, workshop, event or activity that is specifically intended for young people, additional safeguarding, consent and privacy arrangements may apply.

 

Personal Data We May Collect

 We may collect personal data when you:

  • Visit our website
  • Sign up to our newsletter or mailing list
  • Download a free resource
  • Purchase a digital product, downloadable, mental fitness tool, course or service
  • Register for events, workshops or community activities
  • Create an account or access a private online area
  • Complete forms, assessments, surveys, quizzes or feedback forms
  • Contact us by email, phone, social media, website forms or other communication channels
  • Participate in our online community spaces, events, workshops or courses
  • Provide a testimonial, review or feedback
  • Apply to or participate in the ImPerfect Partner Programme
  • Enter into or discuss a collaboration, commissioned service or other business relationship with us
  • Submit payout, invoicing, VAT or other supplier or partner information
  • Interact with our website, emails, adverts or social media content

The personal data we may collect includes:

  • Name
  • Email address
  • Phone number
  • Postal address or billing address
  • Account or login information
  • Purchase history and transaction details
  • Payment information, which is processed securely by third-party payment providers and is not stored by us as full card details
  • Event, workshop or course booking information
  • Communication records, including enquiries, emails and messages
  • Feedback, reviews, testimonials and survey responses
  • Preferences, interests and marketing choices
  • Accessibility needs or support requirements you choose to tell us about
  • Wellbeing-related information you choose to share with us
  • Safeguarding or duty of care information where necessary
  • Partner Programme application information, such as your legal or business name, role, website, social media profiles, audience, relevant experience, proposed promotional approach and application-review records
  • Contract, agreement, signature and business-authority information
  • Payee and financial information for affiliate, partner, collaborator or supplier payments, including payee address, bank-account holder name, sort code, account number, building society reference, VAT status and VAT registration number where applicable
  • Affiliate account, referral link, discount code, click, attributed sale, refund, commission, payout and payment-statement information
  • Website usage data, including IP address, browser type, device information, pages visited, referral links and interaction data
  • Cookie and analytics data, depending on your cookie choices

 

Special Category Data

Some information you choose to share with us may be classed as special category data under UK GDPR. This may include information relating to your physical health, mental health, wellbeing, disability, accessibility needs, personal experiences or other sensitive circumstances.

We only collect this type of information where it is relevant and necessary, such as where:

  • You choose to share it with us
  • It is needed to support accessibility or reasonable adjustments
  • It is relevant to safeguarding, duty of care or participant safety
  • It helps us understand whether a workshop, service, community space or activity is appropriate for you
  • It is needed to respond to a concern, risk, complaint or support need

Where required, we will rely on an appropriate lawful basis under UK GDPR and an additional special category condition under Article 9 of UK GDPR. This may include explicit consent, substantial public interest, vital interests, legal claims, or another appropriate condition depending on the circumstances.

We will not ask you to share sensitive personal information unless it is necessary for a clear purpose.

Please avoid sharing highly sensitive information with us unless it is relevant and necessary. 

 

How We Use Your Personal Data

We may use your personal data to:

  • Provide our website, products, services, digital products, downloadables, mental fitness tools, courses, workshops, events and community spaces
     
  • Process purchases, bookings, payments and access to products or services
  • Deliver digital resources, course access, downloads, emails and customer support
  • Manage accounts, login access and user participation
  • Communicate with you about your purchase, booking, enquiry, account, access or participation
  • Respond to enquiries, questions, complaints or support requests
  • Send newsletters, updates, resources, offers or marketing communications where permitted
  • Manage events, workshops, community activities and participation
  • Support accessibility, reasonable adjustments, safeguarding and duty of care responsibilities
  • Improve our website, products, services, resources, events and community spaces
  • Analyse website performance, user behaviour and email engagement
  • Request feedback, reviews or testimonials
  • Maintain business records, accounting records and legal compliance
  • Assess and manage Partner Programme applications and collaboration enquiries
  • Create and administer affiliate, partner and collaborator accounts and agreements
  • Track eligible referrals, attributed sales, refunds and commission
  • Verify payee and bank-account information, make commission or other business payments, manage VAT and resolve payment queries
  • Monitor compliance with Partner Programme, advertising, disclosure and brand requirements
  • Prevent misuse, fraud, unauthorised access, security risks or breaches of our terms
  • Protect the rights, safety and wellbeing of IMPERFECT.LOVE LTD, our users, our community and others 

 

 Lawful Bases for Processing

Under UK GDPR, we only process personal data where we have a lawful basis to do so.

Depending on the circumstances, we may rely on one or more of the following lawful bases:

Consent

We may rely on your consent where you have given clear permission for us to use your personal data for a specific purpose, such as signing up to our mailing list, agreeing to receive marketing communications, submitting optional sensitive information, or allowing non-essential cookies.

You can withdraw consent at any time.

Contract

We may process your personal data where it is necessary to take steps at your request before entering into a contract, or to provide and administer a product, service, course, workshop, event, download, account, Partner Programme relationship, collaboration, commission payment or resource under a contract with you.

Legal Obligation

We may process personal data where we are required to do so by law, including for accounting, tax, company record-keeping, safeguarding, regulatory, consumer rights or legal compliance purposes.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests do not override your rights and freedoms.

This may include improving our services, responding to enquiries, keeping business records, protecting our website and services, preventing misuse and payment fraud, verifying new or changed payout instructions, administering the Partner Programme, monitoring compliance with programme and promotional requirements, managing customer and partner relationships, understanding how people use our website, and communicating with existing customers about similar products or services where legally permitted.

Vital Interests

In rare situations, we may process personal data where it is necessary to protect someone’s life, safety or vital interests.

 

Email Marketing and Communications

We may send you marketing emails, newsletters, updates, resources or offers where you have signed up, given consent, or where we are otherwise permitted to contact you under applicable law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us directly.

Unsubscribing from marketing emails will not stop necessary transactional or service-related emails, such as order confirmations, purchase access, booking updates, account information, customer support responses or important service notices.

If you apply to or participate in the Partner Programme, we may also send operational communications needed to review your application, complete agreements, verify payout information, administer your affiliate account, communicate programme changes, issue commission statements and manage compliance or off-boarding. These are service or contractual communications, not general marketing emails.

 

Payments and Financial Information

Payments may be processed by trusted third-party payment providers.

We do not store your full card details.

Payment providers may process your payment information in accordance with their own privacy policies and security standards.

We may retain limited payment and transaction information, such as purchase date, product purchased, amount paid, refund status, invoice information and billing details, for accounting, customer service, legal and tax purposes.

 

Affiliate, Partner and Collaborator Information

Where you apply to or participate in the ImPerfect Partner Programme, or enter into another paid partner, collaborator or supplier relationship with us, we may collect your legal or business name, contact details, role or authority, payee address, business or organisation status, VAT status and registration number, and UK bank-account details, including the account holder name, sort code, account number and any applicable building society reference.

We may also collect and create records relating to your application, review outcome, signed agreement, affiliate account, referral links, discount codes, attributed sales, refunds, commission, invoices, payout statements, compliance reviews and communications with us.

We use this information to:

  • Assess applications and collaboration enquiries
  • Take steps before entering into an agreement and administer the agreement once completed
     
  • Verify your identity, authority and nominated payee account
  • Create and manage your affiliate or partner account
  • Track referrals, eligible sales, refunds and commission
  • Calculate and make commission or other agreed payments
  • Maintain accounting, company and tax records
  • Prevent fraud, investigate discrepancies and resolve payment queries
  • Monitor and enforce agreement, disclosure, advertising and brand requirements
  • Manage suspension, termination and off-boarding

Depending on the purpose, our lawful bases are taking steps at your request before entering into a contract, performance of a contract, compliance with legal obligations, and our legitimate interests in administering the programme or business relationship, maintaining accurate records, protecting payment processes, preventing fraud and protecting our brand and customers.

Access to full payout information is restricted to authorised people and trusted service providers who need it for programme administration, accounting, verification or payment. We do not use payout bank details for marketing and we do not ask for online-banking passwords, PINs, card details, National Insurance numbers or Unique Taxpayer References through the payout form.

For your security, you should not send bank details to us by ordinary email. We may use additional verification steps before accepting new or changed payout instructions and may contact you using details already held on your application or agreement record.

We normally keep full active payout instructions for the duration of the partner relationship and for up to six months after the final payment, unless a dispute, fraud concern or legal requirement means they must be kept longer. Invoices, agreements, commission statements and transaction or accounting records may be retained for the periods described in section 13.

 

How We Share Your Data

IMPERFECT.LOVE LTD does not sell or trade personal data.

We may share personal data with trusted third-party providers where necessary to operate our business and deliver our products and services. This may include:

  • Payment processing providers
  • Banking, account-verification and business-payment providers
  • Website hosting providers
  • Email marketing and email delivery providers
  • Checkout and order management providers
  • Course, community or digital product delivery platforms
  • Booking, form, quiz, survey or assessment providers
  • Affiliate administration, referral-tracking and commission-management platforms
  • Electronic-signature, document-management and secure cloud-storage providers
  • Video call or webinar providers
  • Analytics and website performance providers
  • Customer support and communication tools
  • Accountants, bookkeepers and professional advisers
  • IT, cyber security or technical support providers
  • Legal, regulatory, safeguarding or law enforcement authorities where required or permitted by law

All third parties handling personal data on our behalf are expected to maintain appropriate security measures and comply with applicable data protection requirements.

 

International Data Transfers

Some third-party providers we use may process or store personal data outside the United Kingdom.

Where this happens, we take steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements. This may include using providers with recognised transfer safeguards, contractual protections or other legally approved transfer mechanisms.

 

How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to provide services, meet legal obligations, resolve disputes, protect our rights and maintain business records.

Typical retention periods may include:

  • Newsletter or marketing records: until you unsubscribe or request removal, unless we need to retain a suppression record
  • Customer account information: for as long as your account remains active and for a reasonable period afterwards
  • Purchase, invoice and transaction records: usually six years for UK tax, accounting and business record purposes
  • Unsuccessful, withdrawn or closed Partner Programme applications: normally up to 12 months after closure, unless a longer period is needed to deal with a query, complaint, dispute or legal claim
  • Active affiliate, partner or collaborator account and programme-administration records: for the duration of the relationship and for a reasonable period after it ends
  • Full payout instructions, including bank-account details: for the duration of the active relationship and normally up to six months after the final payment, unless a dispute, fraud concern or legal requirement justifies longer retention
  • Signed Partner Programme or collaboration agreements, invoices, commission statements and transaction or accounting records: normally six years after the relationship ends or from the end of the relevant company financial year, as applicable, and longer where legally required
  • Enquiry and customer service records: for a reasonable period after your enquiry is resolved
  • Event, workshop or course records: for as long as needed to manage participation, records and any follow-up obligations
  • Safeguarding, duty of care or incident records: for as long as necessary or legally required, depending on the nature of the concern
  • Feedback, reviews and testimonials: until removed, withdrawn or no longer required
  • Website analytics data: for the period set by the relevant analytics provider or cookie settings

When personal data is no longer needed, we will securely delete, anonymise or archive it where appropriate.

 

Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, improve user experience, analyse site traffic, remember preferences, support checkout processes, understand marketing performance and improve our services.

Cookies may include:

  • Essential cookies needed for the website to function
  • Performance and analytics cookies
  • Functionality cookies
  • Marketing, advertising or social media cookies

Affiliate or referral tracking may also use links, referral identifiers, discount codes, cookies or similar technologies to identify eligible referrals, attribute purchases and calculate commission. Further detail is provided in our Cookie Policy and cookie settings where applicable.

Where required, we will ask for your consent before using non-essential cookies.

You can manage or withdraw cookie consent through our cookie banner, cookie settings or your browser settings, where available.

For more information about how cookies are used, please see our Cookie Policy where available.

 

Data Security

IMPERFECT.LOVE LTD takes appropriate technical and organisational measures to protect personal data.

This may include:

  • Secure systems and platforms
  • Password protection and access controls
  • Restricted access to sensitive information
  • Restricted access to full affiliate and partner payout information
  • Verification steps for new or changed bank-account detail
  • Multi-factor authentication for systems holding sensitive financial information where available
  • Keeping full payout details out of ordinary marketing contact records and email confirmations
  • Secure third-party payment processing
  • Appropriate data storage practices
  • Staff, contractor or volunteer confidentiality expectations where relevant
  • Internal policies and procedures for handling personal information
  • Reasonable steps to prevent unauthorised access, loss, misuse, alteration or disclosure

However, no website, platform, email system or online service can be guaranteed to be completely secure. You are responsible for keeping your own account details and passwords secure.

 

Your Data Protection Rights

Under UK GDPR, you have rights in relation to your personal data.

These may include the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal data where applicable
  • Request restriction of processing in certain circumstances
  • Object to certain types of processing
  • Withdraw consent at any time where we rely on consent
  • Request data portability in certain circumstances
  • Object to direct marketing
  • Ask not to be subject to solely automated decisions that have a legal or similarly significant effect, where applicable

Some rights only apply in certain circumstances and may be subject to legal exemptions.

To exercise your rights, please contact us using the details below.

We may need to verify your identity before responding to a request.

 

Complaints

If you are concerned about how we have handled your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.

Website: www.ico.org.uk 

 

Third-Party Websites and Links

Our website, emails, products, services, resources, courses or community spaces may contain links to third-party websites, platforms, organisations or services.

We are not responsible for the privacy practices, content, security or policies of third-party websites or organisations.

You should review the privacy policies of any third-party websites or services you use.

 

Testimonials, Feedback and User Content

If you provide feedback, reviews, testimonials, comments, survey responses or user-generated content, we may use this information to improve our services, understand user experiences and respond to your feedback.

We will not knowingly publish your full name, image, identifiable story or sensitive personal information for marketing purposes without appropriate permission.

Testimonials and reviews may be edited for clarity, length or formatting, but we will not knowingly change the meaning of your words.

 

 Safeguarding and Duty of Care

Although IMPERFECT.LOVE LTD is not a crisis, clinical or emergency support service, we may take action if information shared with us suggests that you or another person may be at serious risk of harm.

Where necessary and appropriate, we may share relevant information with emergency services, safeguarding authorities, healthcare professionals, legal advisers or other appropriate organisations.

We will only share information in this way where we believe it is necessary, proportionate and permitted or required by law.

 

 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, organisational practices, services, products, platforms or the way we process personal data.

Any updates will be published on our website with a revised update date.

The most current version of this Privacy Policy will apply to your use of our website, products and services.

 

Contact Us

If you have any questions about this Privacy Policy or how your personal data is used, please contact:

Data Protection Lead
IMPERFECT.LOVE LTD
Email: [email protected]
Website: www.imperfect.love
Registered office: 3 Pemberton Street, Manchester, England, M16 9JY
Company number: 17011155