Effective date: 9 November 2025
Last updated: 9 November 2025
Welcome to soulfuliron.co.uk (the “Site”), owned and operated by Soulful Iron / Mike Gracia. We value your privacy and are committed to protecting your personal data. This policy explains how we collect, use, share, and protect your personal information when you visit our Site or subscribe to our communications.
1. Who We Are
Soulful Iron / Mike Gracia
The Barn, Bulls Cross, Slad, Stroud, GL6 7HU
Email: info@soulfuliron.co.uk
We act as the “data controller” for your personal data when you use our Site.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
-
Contact information: such as your name and email address when you fill in a form or subscribe.
-
Usage data: including IP address, browser type, operating system, referring URLs, pages visited, and time spent on the Site.
-
Marketing data: including your communication preferences and engagement with our emails.
-
Cookies and tracking data: collected via Google Analytics and Klaviyo, as described in our Cookie Policy.
3. How We Collect Your Data
We collect data in several ways:
-
When you contact us or subscribe to our mailing list.
-
Automatically, through cookies and tracking technologies when you browse the Site.
-
When you interact with our marketing emails sent through Klaviyo.
4. Why We Process Your Data & Legal Basis
We process your personal data for the following reasons:
-
To send newsletters and updates — with your consent.
-
To analyse Site traffic and improve performance — under our legitimate interest.
-
To maintain the security and proper functioning of our website — under our legitimate interest.
-
To comply with legal obligations.
You can withdraw your consent for marketing emails at any time by clicking the unsubscribe link in our emails or contacting us directly.
5. Use of Third-Party Services
We use the following third-party services that may process your data:
-
Google Analytics – to analyse how visitors use our Site and help us improve user experience. Google may collect your IP address and usage data. Learn more here: https://policies.google.com/privacy
-
Klaviyo – to manage and send our email marketing campaigns. Klaviyo stores your email address and engagement data. Learn more here: https://www.klaviyo.com/privacy
These providers act as data processors on our behalf and use secure, GDPR-compliant systems.
6. Cookies and Tracking
Our Site uses cookies and similar tracking technologies to enhance your browsing experience and analyse traffic.
-
Google Analytics cookies help us understand how visitors use our Site.
-
Klaviyo tracking cookies help us measure email campaign performance.
You can control or delete cookies through your browser settings at any time. For more information, see our separate Cookie Policy.
7. Data Retention
We keep your personal data only as long as necessary to fulfil the purposes for which it was collected, including any legal or accounting obligations. For example, if you unsubscribe from our newsletter, we retain your email address on a suppression list to ensure you are not re-contacted.
8. Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
-
Access the personal data we hold about you.
-
Request correction of inaccurate data.
-
Request erasure of your personal data (in certain cases).
-
Restrict or object to the processing of your data.
-
Request data portability.
-
Withdraw consent for marketing communications at any time.
To exercise any of these rights, please contact us at info@soulfuliron.co.uk.
9. International Transfers
Our third-party providers (such as Klaviyo and Google) may store and process your data outside the UK or EU. In such cases, appropriate safeguards such as Standard Contractual Clauses are used to ensure your data remains protected.
10. Security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration, or destruction. While no system is 100% secure, we continuously review our practices to ensure strong protection.
11. Children
Our Site and services are not intended for children under 16 years old, and we do not knowingly collect their personal data. If you believe a child under 16 has provided us with information, please contact us to have it deleted.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in technology, regulation, or business practices. The date at the top of this page shows when it was last updated. Please check this page periodically.
13. Complaints
If you have concerns about our handling of your personal data, please contact us at info@soulfuliron.co.uk.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk
Cookie Policy (Summary)
Soulful Iron uses cookies to improve functionality, personalise content, and analyse traffic via Google Analytics and Klaviyo. You can manage cookies through your browser or decline non-essential cookies using our banner. Continuing to use the Site constitutes consent to our use of cookies unless you opt out.
