Home / Privacy Policy
Privacy Policy
Last updated: June 2026 · UK GDPR compliant · vanusaantonio.com
- 1. Who we are
- 2. What personal data we collect
- 3. How we use your data
- 4. Our lawful basis for processing
- 5. Third parties we share data with
- 6. International transfers
- 7. How long we keep your data
- 8. Your rights under UK GDPR
- 9. Cookies and tracking
- 10. Children's data
- 11. Changes to this policy
- 12. How to contact us
1. Who we are
This website is operated by Vanusa Antonio, trading as a sole trader under the brand Vanusa Antonio — Leadership Clarity and Emotional Intelligence Specialist.
We are the data controller for the personal data collected through this website and the services offered on it. This means we are responsible for deciding how and why your personal data is used, and for keeping it safe.
Contact details for data enquiries:
Vanusa Antonio
Email: hello@vanusaantonio.com
Website: vanusaantonio.com
Based in the United Kingdom
This policy applies to all personal data collected via vanusaantonio.com and through the tools and services connected to it, including booking systems, payment processors, email marketing, and enquiry forms. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What personal data we collect
We only collect personal data that is necessary for the purpose it is collected for. We do not collect data speculatively or in excess of what is needed.
Data you provide directly
- Consultation booking forms — name, email address, job role or area of work, and a short message about what is bringing you here
- RRR programme application form — name, email address, and a written response to one open question
- General enquiry and contact forms — name, email address, and the content of your message
- Speaking and workshop enquiry form — name, organisation, job title, email address, event details, and audience information
- Leadership clarity quiz — email address, submitted when you request your quiz result
Data collected automatically
- Website analytics — anonymised data about pages visited, time on site, device type, and approximate location (via Google Analytics)
- Server logs — IP address, browser type, and access timestamps (via IONOS hosting infrastructure)
- Cookies — see Section 9 for full details
Data collected through third-party services
- Cal.com (booking system) — name, email address, and appointment information when you book a session
- Stripe (payment processing) — payment card details and billing information when you purchase a session or programme. Stripe processes and stores payment data directly — we do not store your card details
- MailerLite (email marketing) — email address and first name when you join our mailing list via the quiz or any other opt-in on the site
Special category data
In the course of individual coaching and therapeutic conversations, you may voluntarily share information about your health, mental wellbeing, or personal circumstances. This is considered special category data under UK GDPR and is handled with the highest level of care and confidentiality. It is never stored in automated systems, never shared with third parties, and exists only within the confidential container of the professional relationship. It is processed on the basis of your explicit consent.
3. How we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| To respond to consultation requests and general enquiries | Name, email, message content | Legitimate interests |
| To process RRR programme applications and confirm spaces | Name, email, application response | Contract / pre-contract steps |
| To process payments for sessions and programmes | Payment data (via Stripe) | Contract |
| To schedule and manage session bookings | Name, email (via Cal.com) | Contract |
| To send the quiz result and follow-up welcome sequence | Email address | Consent |
| To send ongoing email communications (where opted in) | Email address, first name | Consent |
| To process speaking and workshop enquiries | Contact and event details | Legitimate interests |
| To understand how the website is used and improve it | Anonymised analytics data | Legitimate interests |
| To fulfil legal and tax obligations | Payment and transaction records | Legal obligation |
We do not use your personal data for automated decision-making or profiling. We do not sell your personal data. We do not use your data for any purpose other than those listed above.
4. Our lawful basis for processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases, depending on the context:
Consent
Where you have actively opted in — for example, by completing the leadership clarity quiz and providing your email address, or by subscribing to our mailing list — we process your data on the basis of your consent. You can withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us directly.
Contract
Where processing is necessary to fulfil a contract with you — for example, processing payment for a session or programme, or scheduling your booked appointments — we process your data on the basis of contract.
Legitimate interests
Where we have a legitimate business reason to process your data that does not override your rights — for example, responding to an enquiry you sent us, or using anonymised analytics to improve the website — we process on the basis of legitimate interests.
Legal obligation
Where we are required to process data to comply with UK law — for example, retaining financial records for HMRC — we process on the basis of legal obligation.
5. Third parties we share data with
We only share personal data with third parties where necessary to deliver our services. All third-party processors are contractually required to handle your data securely and in accordance with UK GDPR.
Service providers we use
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe | Payment processing | Payment data, billing info | USA (Standard Contractual Clauses) |
| Cal.com | Session booking | Name, email, booking details | USA (Standard Contractual Clauses) |
| MailerLite | Email marketing | Email address, first name | EU (GDPR compliant) |
| Google Analytics | Website analytics | Anonymised usage data | USA (Standard Contractual Clauses) |
| Google Forms | RRR application form | Name, email, responses | USA (Standard Contractual Clauses) |
| IONOS | Website hosting | Server logs, IP addresses | UK/EU |
We do not share your personal data with any other third parties, including advertisers, data brokers, or marketing agencies. Vanusaantonio.com does not display advertising and does not allow third-party advertising trackers on this site.
6. International transfers
Some of the third-party providers listed above are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR requirements. These safeguards include Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
You can request information about the specific safeguards in place for any transfer by contacting us at hello@vanusaantonio.com.
7. How long we keep your data
We do not keep personal data for longer than is necessary for the purpose it was collected for. The following retention periods apply:
| Data type | Retention period | Reason |
|---|---|---|
| Consultation enquiry and form data | 12 months from last contact | To follow up and manage the client relationship |
| RRR application data | 24 months from programme completion | Programme records and relationship continuity |
| Payment and transaction records | 7 years from transaction date | HMRC legal requirement |
| Email marketing list (MailerLite) | Until you unsubscribe or request deletion | Ongoing consent-based communication |
| Session booking records (Cal.com) | 12 months from appointment date | Administrative records |
| Website analytics data (Google Analytics) | 14 months (Google's standard retention) | Website improvement |
| Speaking and workshop enquiry data | 12 months from enquiry, or from event date if booked | Event and relationship management |
After the applicable retention period, data is deleted or anonymised. If you would like your data deleted before this period, please see Section 8 on your rights.
8. Your rights under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data. You can exercise any of these rights at any time by contacting us at hello@vanusaantonio.com. We will respond within one calendar month of receiving your request.
You have the right to request a copy of the personal data we hold about you.
You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
You have the right to ask us to delete your personal data, subject to certain legal exceptions — such as our obligation to retain financial records.
You have the right to ask us to pause the processing of your personal data in certain circumstances.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
You have the right to object to processing carried out on the basis of legitimate interests. We will stop processing unless we can demonstrate compelling grounds.
Where processing is based on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been handled incorrectly.
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
You also have the right to seek a remedy through the courts.
9. Cookies and tracking
This website uses cookies — small text files stored on your device — to help the site function and to understand how it is being used. We use the following types of cookies:
Strictly necessary cookies
These cookies are essential for the website to function correctly. They enable core features such as page navigation, security, and session management. They cannot be switched off and do not require your consent.
Analytics cookies
We use Google Analytics to collect anonymised data about how visitors use this website — including which pages are visited most, how long people spend on the site, and what device or browser they are using. This data does not identify you personally. It is used only to help improve the site.
Google Analytics sets several cookies including _ga, _gid,
and _gat. These are set only if you have consented to analytics cookies.
Third-party cookies
Some pages embed tools from third-party services — including Google Forms for the RRR application, and Cal.com for session booking. These services may set their own cookies. We do not control these cookies and recommend reading the privacy policies of those services directly (links in Section 5).
Managing your cookies
You can control and delete cookies through your browser settings. Most browsers allow you to block cookies entirely or to be notified when a cookie is being set. Note that blocking all cookies may affect the functionality of some parts of this website.
To opt out of Google Analytics tracking across all websites, you can install the Google Analytics Opt-out Browser Add-on.
10. Children's data
This website and its services are intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us at hello@vanusaantonio.com and we will delete it promptly.
Vanusa Antonio does work with young people in a clinical setting through her role at Richard Challoner School — this is governed by separate safeguarding and data protection policies operated by the school, not by this website.
11. Changes to this policy
We review this privacy policy regularly and update it when our practices change or when there are updates to UK data protection law. The date at the top of this page reflects when the policy was last updated.
We will not make significant changes to how we use your personal data without informing you directly. If you are on our mailing list, we will notify you of any material changes by email before they take effect.
We encourage you to review this policy periodically. Continued use of this website after changes are published constitutes your acceptance of those changes.
12. How to contact us
If you have any questions about this privacy policy, want to exercise any of your rights, or have a concern about how your personal data has been handled, please contact us directly.
Data controller: Vanusa Antonio
Email:
hello@vanusaantonio.com
Website: vanusaantonio.com
Response time: Within one calendar month of receiving your request
(UK GDPR requirement)
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.