Privacy policy

Last updated: 4.03.2026

This policy explains how I look after your personal information when you visit this website, sign up for emails, or work with me.

I'm Angela Hempel, trading as Thriving Human, and I run this website at RealYou.works. This site isn't intended for anyone under 18.

Contact: hello@realyou.works

Address: Thriving Human, 124 City Road, London, EC1V 2NX

The three ways we might interact

What I collect depends on how we interact:

  • Visiting the website — you browse, I collect very little

  • Signing up for emails — you share your name and email, and I send you my "Finding Your Way" emails

  • Working with me — you explore working together or become a client, and I collect what's needed to support you

The sections below explain each one.

1. If you visit the website

What's collected:

  • Squarespace (my website host) automatically collects some technical information: your IP address, browser type, pages visited, and similar usage data. This is standard for any website and is used to keep the site running and secure.

  • Squarespace also uses a small number of essential cookies that are necessary for the website to function (see the Cookies section below).

  • If you accept analytics cookies via the cookie banner, Squarespace collects additional anonymised data about how people use the site — such as which pages are visited most. I use this to understand whether the site is helpful and where to improve it.

What I don't collect:

  • I don't use Google Analytics or any other third-party analytics tools.

  • I don't use advertising cookies, social media tracking pixels, or any tools that follow you around the internet.

  • I don't build profiles about visitors or share visitor data with advertisers.

Legal basis: Legitimate interest (keeping the website running and secure) for essential cookies; consent (via cookie banner) for analytics cookies.

2. If you sign up for emails

What's collected and why:

  • Your first name and email address, which you provide through the Starter Kit sign-up form on the website.

  • After you sign up, you'll receive an email asking you to confirm. You won't receive anything further until you've confirmed.

What you receive:

  • My "Finding Your Way" emails, where we explore what's needed to recover so you can find a path that works for you

  • A download link for the Deep Rest guided relaxation audio

  • News about any live sessions or new resources

Email tracking:

  • My email service (MailerLite) automatically tracks whether emails are opened and which links are clicked. This helps me understand what's useful and improve what I share.

Unsubscribing:

  • Every email includes an unsubscribe link. One click removes you from the active mailing list — you won't receive any further emails.

  • I delete unsubscribed contacts from MailerLite within 90 days. If you'd like your data removed sooner or more completely, just email me at hello@realyou.works and I'll make sure everything is fully erased.

Legal basis: Consent (you actively sign up and confirm via double opt-in).

3. If you explore working with me or become a client

This section covers anyone I have a conversation with about working together, as well as clients.

What's collected and why:

  • Your name and email address — to communicate with you and provide the programme

  • Your postal address — to send you the iRest books

  • Our email correspondence — to provide ongoing support between sessions

  • Session notes — to support our work together and remember what we've discussed

  • Payment information — processed by Stripe (see section 4); I don't see or store your card details

If we have a conversation and you decide not to go ahead:

  • I'll delete any notes from our conversation and your contact details within 90 days, unless you've also signed up to my mailing list (in which case those details are covered by section 2).

  • If you'd like me to delete things sooner, just let me know.

How long I keep things (clients):

  • Session notes: Deleted within 90 days after our programme ends. I may delete them sooner if they're no longer needed.

  • Personal and programme emails (session follow-ups, practice questions, updates): Deleted within 90 days after our programme ends.

  • Contractual emails (your confirmation of the Working Together Agreement, payment confirmations, any agreed changes to our arrangement): Kept for 6 years alongside financial records, as they may be needed for tax or legal purposes.

  • Financial and payment records: Kept for 6 years as required by UK tax law (HMRC).

  • Your name and contact details: Kept for up to 6 years after our programme ends, as part of the financial records that require them. Deleted after that unless you've also signed up to my mailing list (in which case those details are held separately by MailerLite and covered by section 2).

Confidentiality:

Everything you share with me stays between us. This is covered in more detail in our Working Together Agreement, but the key points:

  • I won't share your personal information with anyone without your permission.

  • The only exception would be genuine concern about safety — and I'd always try to talk to you about that first.

Legal basis: Contract (our Working Together Agreement) and legal obligation (financial records for HMRC).

4. Services that help me run things

I use a small number of trusted services to run the website, send emails, and process payments. These services may process your personal information on my behalf.

Squarespace (website hosting)

  • Hosts the website and processes the technical data described in section 1.

  • Data processed in: primarily the US. Squarespace maintains appropriate safeguards for international data transfers.

  • Privacy policy: squarespace.com/privacy

MailerLite (email marketing)

  • Stores subscriber names and email addresses, sends emails on my behalf, and provides the tracking described in section 2.

  • Data processed in: MailerLite is registered in Ireland (EU) with data centres in the EU. They may transfer data internationally and use standard contractual clauses and the EU–US Data Privacy Framework for transfers outside the EU/UK.

  • Privacy policy: mailerlite.com/legal/privacy-policy

Stripe (payments)

  • Processes payments. I don't see or store your card details — Stripe handles this directly.

  • Data processed in: Stripe operates globally and may transfer data internationally, using standard contractual clauses and other safeguards.

  • Privacy policy: stripe.com/privacy

Zoom (video sessions)

  • Used for our video calls.

  • I don't record sessions (audio or video).

  • If we agree to use Zoom's transcript function for a specific session, I'll always ask your permission first. The transcript is used only to support our work together and is deleted along with session notes.

  • If you'd like to record a session for your own use, we can discuss that — any recording you make would be yours and wouldn't be stored by me.

  • Data processed in: primarily the US. Zoom maintains appropriate safeguards for international data transfers.

  • Privacy policy: zoom.us/en/trust/privacy

5. Cookies

Cookies are small text files that websites store on your device.

Essential cookies (always active):

  • Squarespace uses a small number of cookies that are necessary for the website to work — things like keeping the site secure and remembering your cookie preferences. These can't be turned off because the site wouldn't function without them.

Analytics cookies (only with your consent):

  • If you click "Accept" on the cookie banner, Squarespace uses analytics cookies to collect anonymised information about how people use the site — such as which pages are popular and how people navigate. This helps me improve the website.

  • If you click "Decline" or simply close the banner, these cookies aren't set and no analytics data is collected.

  • You can change your cookie preferences at any time using the "Cookie Preferences" link in the website footer.

Cookies I don't use:

  • No advertising or tracking cookies

  • No social media cookies

  • No third-party analytics (such as Google Analytics)

Managing cookies in your browser:

You can also control cookies through your browser settings. For instructions, visit allaboutcookies.org.

For a full list of the cookies Squarespace uses on the websites it hosts, see: Squarespace cookies information

6. International visitors

  • I'm based in the UK and comply with UK GDPR (the UK's data protection law).

  • If you're visiting from outside the UK — including the EU/EEA — your information may be transferred to and processed in the UK and other countries where my service providers operate (see section 4).

  • Where data is transferred internationally, my service providers use appropriate safeguards such as standard contractual clauses approved by the relevant authorities.

  • If you're visiting from outside the UK and EU, the same protections apply to your information regardless of where you're based.

7. Your rights

UK data protection law gives you rights over your personal information. Here they are in plain terms:

  • See what I hold: You can ask me what personal information I have about you, and I'll provide a copy.

  • Correct something: If anything I hold is inaccurate or incomplete, you can ask me to put it right.

  • Delete your information: You can ask me to delete personal information I no longer need. Some information I'm required to keep by law — like financial records for HMRC — but I'll always explain what and why.

  • Stop or limit processing: In certain circumstances you can ask me to stop using your information or limit how I use it.

  • Take your data elsewhere: You can ask for your information in a format that lets you transfer it to another service.

  • Withdraw consent: Where I'm relying on your consent (such as email marketing), you can withdraw it at any time. Unsubscribing from emails does this automatically.

  • Object: You can object to my use of your information where I'm relying on legitimate interest as the legal basis.

How to exercise your rights:

  • Email me at hello@realyou.works.

  • I'll respond within 30 days, or let you know if I need a little longer for a complex request.

  • There's no fee for any of this.

8. How I keep your information safe

I take reasonable steps to protect your personal information — using secure services, keeping access limited to me, and choosing reputable providers (see section 4). No system is completely immune to risk, and I'd rather be upfront about that than make promises I can't guarantee.

9. Changes to this policy

  • If I make significant changes to this policy, I'll update the "last updated" date at the top.

  • For major changes that affect how I use your information, I'll let email subscribers know directly.

10. Questions or concerns

If you have any questions about this policy or how I handle your information, please email me at hello@realyou.works. I'd genuinely rather hear from you than have you worry.

If you're not satisfied with my response, you have the right to contact the Information Commissioner's Office:

  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  • Helpline: 0303 123 1113

  • Website:ico.org.uk