Privacy notice

The short version

Anything you type into a reflection box stays in the tab you are working in and disappears when you close it. We never receive it, never store it, and never see it. There is no account, no sign-up, and no profile. There is no mailing list, and we do not sell your details.

Who is responsible

Bea Marshall, trading as Trans Pathways, is the data controller for this website and its courses. That means Bea decides what information is collected and what is done with it. Questions and requests go to hello@transpathways.life.

What we collect, and why

• Course purchases. When you buy a course we hold a purchase record: the email you gave at checkout, the course, the amount and date, the country used for tax, and a payment reference. This exists so we can prove you paid, keep your access open, close it if a payment is reversed, and meet tax rules.
• What stays in your browser. Your reflections (tab only, never sent anywhere), your saved place in a course (chapter numbers and the last page opened), and a signed access cookie. These contain no words you wrote.
• Applications and enquiries. If you apply to the coaching programme we collect your name, email, country, chosen programme length, and your answers about why the group may suit you, so Bea can assess the application and contact you.
• Email and WhatsApp messages. Your name or number, your address, and what you wrote, so we can reply and help.
• Check-in replies. If you answer the follow-up after a course, we hold what you tell us — including the country you choose to name — so Bea can see how the course is working and support you.
• Technical logs. Your IP address and the pages requested, kept by our host to serve pages and keep the site secure. These are not used to build a profile of you.

Our legal basis

We rely on performing our contract with you (delivering a course you bought, assessing an application you sent), our legitimate interests (answering enquiries, keeping the site secure, improving the courses), your consent (the optional check-in reply, which you can withdraw), and legal obligation (tax and financial records).

Who we share information with

• Stripe, our payment provider, for payments, tax calculation and collection, receipts, fraud prevention and refunds. You enter card details on Stripe's own checkout; we never see or hold them. Stripe processes that data under its own privacy notice.
• Our service providers who host and run the site, store the database, and send transactional email. They act on our instructions and may not use your information for their own purposes.
• Professional advisers — our accountant and, if needed, a lawyer.
• Authorities, only where we are legally required to disclose something.

We do not share your information for advertising, and we do not sell it.

Transfers outside the UK and EEA

Some of our providers operate outside the UK and EEA, so information may be transferred abroad. Where it is, we rely on legal safeguards such as standard contractual clauses or adequacy decisions to keep the same protection as at home.

How long we keep things

• Reflections: never held by us at all; erased when you close the tab.
• Applications: three months, then deleted. Ask for earlier deletion at any time.
• Purchase records: for as long as your access lasts, and afterwards for up to six years to meet tax rules.
• Emails and messages: while needed to help you, then deleted.
• Check-in replies: until you ask us to delete them.
• Access cookie: until you clear it, reset the course, or clear your browser data.

Keeping it safe

The site is served over HTTPS, data is encrypted in transit, the database sits behind access controls that only Bea and the site itself can pass, and the purchase record is not readable through the public site. We keep access to a minimum and review it when anything changes.

Cookies

We set no advertising or tracking cookies. The only cookie this site sets itself is the signed access cookie that tells the site which course you own — strictly necessary to give you what you paid for. Stripe may set cookies needed for its checkout to work. The site does not use analytics cookies.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, delete it, stop using it, or hand it over in a usable form, and you can withdraw consent at any time. Email us and we will respond within one month. Because we hold no account and no reflections, in most cases the only record we have is your purchase and any message you sent.

If you are in the UK or EU and are unhappy with our response, you can complain to your data protection authority — in the UK, the Information Commissioner's Office.

Children

The courses are written for adults. If you are under 16, please use a course alongside a trusted adult, and do not send us personal information.