Privacy Policy

1. Who We Are

One Last Lonely Girl is operated by Rose Kian and Media by Rose. For the purposes of this policy, “we”, “us”, and “our” refer to Rose Kian and Media by Rose.

If you have questions about this policy or your personal data, you can contact us at rose@mediabyrose.com.

2. The Personal Data We Collect

Depending on how you interact with OLLG, we may collect:

• your name and email address;
• your payment and transaction information through Stripe, such as purchase status, amount paid, and Stripe session details;
• your phone number and postal address if you provide them in the intake form;
• your intake-form responses, including your reasons for joining, goals, hurdles, and any additional context you choose to share;
• communications you send to us by email or support messages;
• basic technical information necessary to operate and secure the site, such as requests handled through our hosting provider.

We do not intentionally collect payment card numbers ourselves. Card payments are processed by Stripe.

3. How We Collect Your Data

We collect personal data when you:

• buy OLLG through the checkout process;
• receive post-purchase emails from us;
• fill out the intake form;
• contact us directly;
• use the site in ways that generate standard hosting or security logs.

4. How We Use Your Data

We use personal data to:

• process purchases and confirm payment;
• send your course access email and related operational messages;
• deliver and support your access to OLLG;
• review your intake answers so we can understand your background and support you appropriately inside the program;
• respond to questions, support requests, or disputes;
• maintain records for business administration, legal, tax, fraud-prevention, and security purposes;
• improve and protect the reliability of the website and related services.

5. Lawful Bases for Processing

Where UK data protection law applies, we rely on one or more of the following lawful bases:

• Contract: to take payment, provide access to OLLG, deliver course-related communications, and provide customer support connected to your purchase.
• Legitimate interests: to operate, protect, improve, and administer the business and website, keep records, prevent misuse, and review intake submissions to support the customer experience.
• Legal obligation: where we need to keep certain records or respond to lawful requests.

6. Who We Share Data With

We share data only where reasonably necessary to run OLLG. This may include:

• Stripe, which processes payments and checkout sessions;
• Resend, which sends transactional emails such as access emails;
• Cloudflare, which hosts the site, server-side functions, and database infrastructure used for purchase and intake records;
• professional advisers or service providers where needed for business, legal, compliance, or technical support reasons;
• authorities or other third parties where disclosure is required by law or reasonably necessary to protect our rights.

7. International Transfers

Some of the service providers we use may process personal data outside your country of residence. Where applicable, we rely on the provider’s legal transfer mechanisms and safeguards for cross-border processing.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing OLLG, maintaining business records, resolving disputes, enforcing our agreements, and meeting legal, tax, or accounting obligations.

How long we keep a record can vary depending on the type of information and why it was collected.

9. Your Rights

Depending on your location and the laws that apply, you may have rights to request access to your personal data, ask us to correct inaccurate data, request deletion, object to certain processing, request restriction of processing, or ask for a copy of data you provided to us.

If UK data protection law applies to you, you may also have the right to complain to the Information Commissioner’s Office. We would appreciate the chance to address your concerns first, so please contact us at rose@mediabyrose.com.

10. Cookies and Similar Technologies

At present, the site primarily uses essential technical functionality needed to operate pages and the admin area. If we add analytics, advertising, or other non-essential tracking technologies later, this policy may be updated accordingly.

11. Data Security

We use reasonable technical and organisational measures to help protect personal data. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

OLLG is intended for adults. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this privacy policy from time to time. The latest version posted on this page will apply from its effective date.

14. Contact

If you have privacy questions or want to exercise your rights, email rose@mediabyrose.com.