Privacy Policy

1. Introduction
This Privacy Policy explains how Jenni Dunman ("we", "us", "our") collects, uses, and protects your personal data when you use jennidunman.com (the "Website"), sign up to our email lists, complete our forms, join our communities, or engage with our services.
We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Jenni Dunman
Contact: [email protected]

2. What Data We Collect
Depending on how you interact with us, we may collect:

Identity data — your name
Contact data — your email address, and phone number if provided
Business data — information you share about your business, role, and goals (for example, in quiz responses, application forms, or pre-call questionnaires)
Application data — responses submitted via our application forms, including information about your business stage and objectives
Technical data — IP address, browser type, device information, and how you use our Website (collected via cookies and analytics)
Communication data — records of correspondence if you contact us or reply to our emails

We do not knowingly collect data from anyone under the age of 18.

3. How We Collect Your Data
We collect data when you:

Sign up to receive a free resource, join a waitlist, or subscribe to emails (via forms powered by Flodesk)
Complete a quiz or submit an application (via forms powered by Movement.so)
Create an account in our app to join Auré Friends
Book or attend an event
Contact us directly by email or through the Website
Browse the Website (via cookies and analytics tools)

4. How We Use Your Data
We use your personal data to:

Deliver the resource, result, or service you requested
Send you email communications relevant to what you signed up for, including newsletters, event information, and offers (you can unsubscribe at any time)
Process and assess applications to The Auré Society
Arrange and prepare for calls and events
Manage your membership or community access
Improve our Website, content, and services
Comply with legal obligations

5. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:

Consent — when you opt in to receive emails or download a resource. You can withdraw consent at any time by unsubscribing.
Contract — when we process your data to deliver a paid service, membership, or event you've booked.
Legitimate interests — to operate and improve our business, communicate with applicants, and maintain the quality and safety of our communities, where this does not override your rights.
Legal obligation — where we are required to retain or process data by law (for example, financial records).

6. Who We Share Your Data With
We do not sell your data. We share it only with trusted third-party providers who help us operate, including:

Flodesk — email marketing platform (stores your name and email to deliver our communications)
Movement.so — form and application platform (stores your form and application responses)
Our app/community provider — to operate Auré Friends
Payment processors — to process payments for paid services (we do not store your card details)
Professional advisers — such as accountants or lawyers, where necessary

Some of these providers may process data outside the UK (for example, in the United States). Where this happens, we ensure appropriate safeguards are in place, such as International Data Transfer Agreements or UK-approved standard contractual clauses.
7. How Long We Keep Your Data
We keep your personal data only as long as necessary:

Email subscribers — until you unsubscribe or after a prolonged period of inactivity
Applicants — application data is retained for [12 months] to allow for future cohort consideration, unless you ask us to delete it sooner
Members and event attendees — for the duration of your membership or booking, plus the period required for legal and accounting purposes (typically 6 years)
General enquiries — for as long as needed to handle your enquiry

8. Cookies and Analytics
Our Website uses cookies and similar technologies to ensure it functions properly and to help us understand how visitors use it. You can control cookies through your browser settings. Where required, we will ask for your consent to non-essential cookies via a cookie banner.

9. Your Rights
Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data ("right to be forgotten")
Restrict or object to our processing of your data
Data portability — receive your data in a usable format
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at [email protected]. We will respond within one month.
If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our third-party providers are selected with data security in mind and are bound by their own security obligations.

11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of last update.

12. Contact
For any questions about this Privacy Policy or how we handle your data, contact us at [email protected].