Privacy Policy
This Privacy Policy explains how Connecting Fragments (operated by Antonia Varbanova) collects, uses, and protects your personal data when you visit connectingfragments.com, register for workshops or programs, or subscribe to our mailing list.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.
Our contact details: Antonia Varbanova, Connecting Fragments โ info@connectingfragments.com
1. What Personal Data We Collect
We may collect and process the following personal data:
Data you provide directly
- Name and email address when you subscribe to our mailing list
- Name, email address, and payment details when you register and pay for a workshop or program
- Any information you provide when you contact us by email
Data collected automatically
- IP address and browser information when you visit our website
- Pages visited, time spent on site, and how you arrived at the site (via cookies and analytics tools โ see Section 5)
- Whether you opened our emails or clicked links within them (via MailerLite)
2. Why We Collect Your Data and Our Legal Basis
Under UK and EU GDPR, we must have a legal basis for processing your personal data. We rely on the following:
| Purpose | Legal Basis | Details |
| Processing workshop registrations and payments | Contract | We need your data to fulfil the service you have purchased โ sending confirmation emails, Zoom links, workbooks, and replay recordings. |
| Sending marketing emails and newsletters | Consent | We only send marketing emails to people who have explicitly subscribed. You can unsubscribe at any time via the link in every email. |
| Improving our website and understanding visitor behaviour | Legitimate interest | We use analytics tools to understand how people use our website so we can improve it. This does not override your privacy rights. |
| Running advertising campaigns on Meta (Facebook/Instagram) | Legitimate interest | We use the Meta Pixel to measure the effectiveness of our advertising. No sensitive personal data is used for this purpose. |
| Complying with legal obligations | Legal obligation | We retain certain records as required by law, including payment records for tax purposes. |
3. Who We Share Your Data With
We do not sell your personal data. We share it only with trusted third-party service providers who help us operate our business, under strict data processing agreements. These are:
| Provider | Purpose | Data shared |
| MailerLite | Email marketing and automation | Name and email address. MailerLite is GDPR compliant. Privacy policy: mailerlite.com/legal/privacy-policy |
| Stripe | Payment processing | Name, email address, and payment card details. Stripe is PCI-DSS compliant and GDPR compliant. Privacy policy: stripe.com/gb/privacy |
| Meta Platforms (Facebook/Instagram) | Advertising measurement via Meta Pixel | Anonymised browsing data via cookie. No sensitive personal data shared. Privacy policy: facebook.com/privacy/policy |
| Zoom | Delivering virtual workshops | Name and email address used to send meeting links. Privacy policy: zoom.us/privacy |
| WordPress / Automattic | Website hosting and operation | Technical data required to serve the website. Privacy policy: automattic.com/privacy |
4. How Long We Keep Your Data
- Email subscribers: until you unsubscribe or request deletion
- Workshop registrant data: 3 years after the workshop date, to allow us to manage replays, follow-up communications, and program access
- Payment records: 7 years, as required by UK tax law (HMRC)
- Website analytics data: as per Google Analytics retention settings (default 26 months)
- Email campaign data: as per MailerLite’s retention policy
When data is no longer needed and the retention period has passed, we delete or anonymise it securely.
5. Cookies
Our website uses cookies โ small text files stored on your device when you visit. You can manage your cookie preferences via the cookie banner that appears when you first visit the site.
We use the following cookies:
| Cookie | Category | Provider | Purpose |
| WordPress | Essential | Automattic | Required for the website to function correctly. Cannot be disabled. |
| Stripe | Essential | Stripe Inc. | Required to process payments securely. Cannot be disabled during checkout. |
| Meta Pixel | Marketing | Meta Platforms Inc. | Tracks visits to our website for advertising measurement on Facebook and Instagram. Requires consent. |
| Google Analytics | Statistics | Google LLC | Collects anonymised data on how visitors use the website. Requires consent. |
| MailerLite | Functional | MailerLite | Used to track email engagement and manage subscriber preferences. |
You can withdraw or change your cookie consent at any time by clicking ‘Privacy and Cookie Policy’ in the footer of our website, or by adjusting your browser settings.
6. International Data Transfers
Some of our third-party providers (including Meta Platforms and Google) may transfer and process your data outside the UK and European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the relevant data protection authorities.
7. Your Rights
Under UK and EU GDPR, you have the following rights regarding your personal data:
Right to access
You can request a copy of the personal data we hold about you at any time, free of charge.
Right to rectification
You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure
You can ask us to delete your personal data where we no longer have a lawful reason to hold it.
Right to restrict processing
You can ask us to limit how we use your data in certain circumstances.
Right to data portability
You can request your data in a commonly used, machine-readable format.
Right to object
You can object to us processing your data on the basis of legitimate interest, including for direct marketing.
Right to withdraw consent
Where we rely on your consent to process your data (e.g. for marketing emails), you can withdraw that consent at any time by unsubscribing or contacting us.
Right to lodge a complaint
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In the UK: the Information Commissioner’s Office (ICO) at ico.org.uk. In the EU: your local data protection authority.
| HOW TO EXERCISE YOUR RIGHTS To exercise any of your rights, please contact us at info@connectingfragments.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request. |
8. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:
- HTTPS encryption on our website
- Secure payment processing via Stripe (PCI-DSS compliant)
- Access controls on our email marketing platform (MailerLite)
- Regular review of third-party providers’ security practices
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data.
10. Children’s Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@connectingfragments.com, and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the ‘Last updated’ date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
| Antonia Varbanova Connecting Fragments connectingfragments.com info@connectingfragments.com |