Legal

Privacy Policy

Last updated: September 2026

1. Who we are

This privacy policy applies to the website colibriheartsong.com, operated by Helen Pickles, trading as Colibri Heartsong.

Helen Pickles is the data controller for personal data collected through this website. If you have any questions about how your data is handled, please contact:

2. What personal data we collect

We collect personal data in three ways:

• Contact form submissions: When you use the contact form on this website, we collect your name, email address, the topic you select, and the content of your message. This data is processed by Formspree (formspree.io) and forwarded to Helen's email address.
• Email list sign-ups: When you subscribe to the Colibri Heartsong mailing list, we collect your email address. This is stored and managed by Mailchimp (intuit.mailchimp.com), our email marketing service provider.
• Booking a call: When you book a call with Helen, you do so on Calendly (calendly.com). Calendly collects your name, email address, the time you choose, and any answers you give on the booking form, and shares these with Helen so she can hold the call.

This website is hosted by Cloudflare. As with any website, Cloudflare processes technical information such as your IP address in order to deliver pages to you and protect the site from abuse. We also use Cloudflare Web Analytics to count page visits. It does not use cookies, does not identify you, and does not follow you across other websites.

We do not collect any other personal data, and we do not use cookies for tracking or analytics purposes on this website.

3. Why we collect your data and our legal basis

Contact form: We process your name, email, and message in order to respond to your enquiry. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, responding to communications sent to us.

Email list: We process your email address to send you newsletters, event announcements, and updates about Helen's work. Our legal basis is consent (UK GDPR Article 6(1)(a)). You give consent by actively submitting your email address and clicking the subscribe button. You may withdraw consent at any time by unsubscribing (there is an unsubscribe link in every email we send).

Booking a call: We process your booking details in order to arrange and hold the call you have asked for, and to talk with you about working together. Our legal basis is that this is necessary to take steps at your request before entering into an agreement (UK GDPR Article 6(1)(b)).

Hosting and visitor statistics: Delivering the website securely and understanding, in general terms, how many people visit which pages. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)).

4. How we share your data

We do not sell, rent, or trade your personal data. Your data is shared only with the following third-party service providers who process it on our behalf:

• Formspree (formspree.io) — processes contact form submissions. Their privacy policy is available at formspree.io/legal/privacy-policy
• Mailchimp / Intuit Inc. — stores and manages our email subscriber list and sends newsletters. Their privacy policy is available at mailchimp.com/legal/privacy
• Calendly LLC — handles call bookings. Their privacy notice is available at calendly.com/legal/privacy-notice
• Cloudflare, Inc. — hosts this website and provides cookie-free visitor statistics. Their privacy policy is available at cloudflare.com/privacypolicy

In addition, when a page loads, your browser requests fonts from Google Fonts and the podcast thumbnail image from YouTube, so those services receive your IP address (see section 7).

These providers are GDPR-compliant and have appropriate data processing agreements in place. Some of them, including Mailchimp and Calendly, store data on servers in the United States. Adequate safeguards are in place under the EU-US Data Privacy Framework (and its UK Extension) or Standard Contractual Clauses.

5. How long we keep your data

• Contact form submissions: Retained in Helen's email inbox as long as reasonably necessary to respond to and manage the enquiry, and deleted when no longer needed.
• Call bookings: Retained in Calendly and Helen's calendar and email for as long as reasonably necessary to arrange the call and any work that follows, and deleted when no longer needed.
• Email list subscribers: Retained until you unsubscribe. You can unsubscribe at any time using the link in any email we send, or by emailing [email protected].

6. Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate data we hold.
• Right to erasure: You can ask us to delete your personal data ("the right to be forgotten").
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can ask us to provide your data in a portable format.
• Right to object: You can object to us processing your data on the basis of legitimate interests.
• Right to withdraw consent: Where we process data based on consent (email list), you can withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

7. Cookies

This website does not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics. The visitor statistics we collect come from Cloudflare Web Analytics, which counts visits without cookies and without identifying you. The website is a static site: apart from Cloudflare's hosting and cookie-free statistics (see section 2), there is no server-side processing of visitor data.

Third-party services embedded on this website (YouTube thumbnail image, Google Fonts) may set their own cookies or make network requests. When you follow a link to book a call on Calendly, Calendly's own cookie and privacy policies apply on their site. These are governed by their respective privacy policies.

8. Children's data

This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

9. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at [email protected] and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK's data protection authority:

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. Continued use of the website after changes are posted constitutes acceptance of the updated policy.