Privacy Policy

Last updated: 31 July 2026

1. Who we are

This website, dayananikolova.com (the “Site”), is operated by Dayana Nikolova, based in London, United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Dayana Nikolova is the data controller of the personal data described in this policy.

If you have any questions about this policy or how your data is handled, contact: hello@dayananikolova.com.

2. What personal data we collect

We collect and process the following categories of personal data:

Contact and enquiry data – your name, email address, phone number, preferred call-back time, and the contents of your message when you use the contact or “Request a Call Back” forms.
Newsletter data – your email address when you join the mailing list.
Order and billing data – your name, email address, billing details, and records of the products you purchase when you buy digital products through the Site.
Payment data – payments are processed securely by Stripe (including payment methods offered through Stripe, such as Klarna). Your card details are entered directly with Stripe and are never stored on our systems.
Account data – if you create an account, your login details and order history.
Technical and usage data – IP address, browser type, and basic server logs collected automatically by our hosting provider for security and performance purposes. We do not currently run analytics or advertising trackers on the Site.

3. How we use your data and our lawful bases

Purpose	Data used	Lawful basis
Responding to enquiries and call-back requests	Contact and enquiry data	Legitimate interests / steps prior to a contract
Processing and delivering your orders	Order, billing and payment data	Performance of a contract
Sending the email newsletter and marketing tips	Newsletter data	Consent (you may withdraw at any time)
Keeping accounting and tax records	Order and billing data	Legal obligation
Site security, performance and improvement	Technical and usage data	Legitimate interests

4. Marketing communications

You will only receive the email newsletter if you have signed up for it. Every email includes an unsubscribe link, and you can opt out at any time by clicking it or by emailing hello@dayananikolova.com. Opting out of marketing does not affect emails we need to send you about an order you have placed.

5. Who we share your data with

We never sell your personal data. We share it only with trusted service providers who help run the Site and the business, under contracts that protect your data:

Stablepoint – our website hosting provider (UK-based servers)
Stripe – payment processing for orders (including Klarna where offered)
Mailchimp (Intuit Inc.) – our email newsletter platform

We may also disclose personal data where required by law, regulation, or court order.

6. International transfers

Some of our service providers process data outside the UK – for example, Mailchimp and Stripe process data in the United States. Where this happens, transfers are protected by appropriate safeguards such as the UK-US Data Bridge, UK adequacy regulations, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

7. How long we keep your data

Data type	Retention period
Enquiry and call-back form data	Up to 12 months after our last contact
Newsletter data	Until you unsubscribe
Order, billing and tax records	6 years, as required by HMRC

8. Cookies

The Site currently uses only cookies that are essential for it to function – for example, WooCommerce cookies that remember your basket, keep you logged in, and enable checkout. These essential cookies do not require consent under UK law. We do not currently set analytics, advertising, or other non-essential cookies. If that changes, we will update this policy and ask for your consent before any non-essential cookies are placed. You can control cookies through your browser settings; blocking essential cookies may affect how the Site works.

9. Your rights

Under UK data protection law you have the right to:

Access a copy of the personal data we hold about you
Have inaccurate data corrected
Have your data erased in certain circumstances
Restrict or object to our processing of your data
Receive your data in a portable format
Withdraw consent at any time, where consent is our lawful basis

To exercise any of these rights, email hello@dayananikolova.com. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to resolve any concern first.

10. Children

The Site and its products are intended for adults and are not directed at children under 18. We do not knowingly collect personal data from children.

11. Security

We use appropriate technical and organisational measures to protect your personal data, including SSL encryption on the Site and access controls on the systems we use. No online transmission is ever completely secure, but we take reasonable steps to protect your information.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date of the most recent update shown at the top.