Legal

Privacy Notice

FairyGodMother, trading as Fairy Godmother, is the data controller for the personal data described here. This notice explains what we collect, why, and what rights you have. You can contact us about privacy at hello@example.com.

Last updated: 9 August 2026

What we collect and why

Account data — your email address, password credentials, display name and preferred language. We use it to create and secure your account and to show the site in your language. Legal basis: performance of our contract with you.

Programme data — which programmes you have access to, which days you have completed, your assessment answers and results, and your private journal entries. We use it to deliver the programme and show your progress. Journal entries are visible only to you. Legal basis: performance of our contract with you.

Purchase records — the programme bought, amount, currency, order reference and refund status. We use them to give you access, show your receipts and keep proper business records. Legal basis: contract and our legal obligations.

Technical data — IP address, device and browser information and error logs, used to keep the service secure and working. Legal basis: our legitimate interest in security and reliability.

Messages you send us — the content of your enquiries, used to answer you. Legal basis: our legitimate interest in supporting our customers.

Sensitive topics

Our programmes deal with heartbreak, emotional wellbeing, neurodiversity and sexual wellbeing, so what you choose to write in your journal or assessments may be personal and sensitive. You decide what to write. We do not use it for advertising, we do not sell it, and we do not share it with other users.

Who we share data with

Stripe, our payment provider, for the sale of our programmes, payments, refunds, invoicing and tax compliance. Stripe collects and handles your payment details directly; we never see or store your card number.

Service providers who host our database, authentication and website infrastructure, acting on our instructions as processors.

Google, if you choose to sign in with your Google account, solely to authenticate you.

Professional advisers such as our accountants or lawyers, and public authorities where we are required to disclose by law.

International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on appropriate safeguards, such as UK/EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep account, programme and journal data for as long as your account exists, so your lifetime access and your progress remain available to you. Purchase records are kept for as long as tax and accounting law requires, normally six years. When data is no longer needed we delete or anonymise it.

Your rights

You have the right to access your data, to correct it, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. Write to us and we will respond within one month.

If you are unhappy with how we handle your data you can complain to your local supervisory authority — the Information Commissioner's Office in the UK, or the Comissão Nacional de Proteção de Dados in Portugal.

Security and cookies

We use appropriate technical and organisational measures, including encryption in transit, access controls and database rules that stop one account reading another account's data.

We use essential cookies and similar storage to keep you signed in and remember your language choice. These are necessary for the site to work. We do not use advertising cookies. Our payment partner may set cookies needed to process your payment securely.