Privacy Policy
1.1 Introduction
This Privacy Policy explains how Sonia Sudak Ltd (“we”, “us”, “our”) collects, uses, stores and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or purchasing our services, you consent to the practices described in this Policy.
1.2 Data Controller
Sonia Sudak Ltd
Registered office: [Business address – to be added]
Email: soniasudakltd@hotmail.com
For the purposes of data protection law, Sonia Sudak Ltd is the data controller.
1.3 Information We Collect
We may collect and process the following personal data:
-
Identification data (name, contact details, email, phone number).
-
Transaction data (payment information processed via Stripe, billing details, purchase history).
-
Technical data (IP address, browser type, operating system, cookies).
-
Marketing data (preferences, engagement with emails or adverts).
-
Training-related data (course enrolments, progress, certificates).
1.4 How We Collect Information
We obtain personal data through:
-
Direct interactions (enquiries, course sign-ups, bookings).
-
Automated technologies (cookies, analytics).
-
Third-party processors (Stripe, Google Analytics, Meta Pixel).
1.5 How We Use Personal Data
We process data for the following purposes:
-
To provide and manage our services and courses.
-
To process payments and issue invoices.
-
To communicate with clients regarding services and support.
-
To send marketing communications (only where consent has been given).
-
To improve website functionality and user experience.
1.6 Lawful Bases for Processing
We rely on the following lawful bases:
-
Contractual necessity – to perform our agreement with you.
-
Legal obligation – to comply with applicable laws.
-
Legitimate interests – to develop and promote our business.
-
Consent – for marketing or non-essential cookies.
1.7 Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
1.8 Data Sharing
We may share data with:
-
Payment processors (Stripe).
-
Analytics and advertising platforms (Google Analytics, Meta Pixel).
-
Professional advisers and IT service providers under confidentiality agreements.
We do not sell or rent personal data to third parties.
1.9 International Transfers
Some service providers may transfer data outside the UK. In such cases, appropriate safeguards (e.g. UK Addendum to EU Standard Contractual Clauses) are applied.
1.10 Your Rights
Under UK data-protection law, you have the right to:
-
Access, correct, or delete your data.
-
Restrict or object to processing.
-
Withdraw consent at any time (without affecting prior processing).
-
Lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact: soniasudakltd@hotmail.com

