Privacy Statement

One privacy notice for the Khemi Love family of websites, products and services

Effective date: 18 August 2026

This Privacy Statement explains how Khemi Love Ltd collects, uses, stores, shares and protects personal information when you visit our websites, purchase digital or physical products, join an online space, subscribe to communications, complete an assessment, or enquire about or receive a service.

It is a privacy notice, not a request for blanket consent. Where consent is required for a particular activity, such as optional marketing, non-essential cookies or certain uses of sensitive information, we will ask for it separately and clearly.

Khemi Love Ltd is the data controller responsible for deciding why and how personal information covered by this statement is used.

Legal name: Khemi Love Ltd

Company number: 11444720

Main website: www.khemilove.co.uk

Email: eve@khemilove.co.uk

Telephone: +44 7395 515 296

This statement applies to Khemi Love Ltd websites, sales pages, checkout pages, member areas and digital platforms that link to it. These currently include Khemi Love and websites or offers connected with:

Khemi Love: the principal wellbeing, creative and professional-services space.

What Happened to Eve?: books, assessments, resources, digital products and related journeys.

The Unfair Advantage: books, resources, digital products and related offers operated by Khemi Love Ltd.

What Happened to the Damsel in Distress?: books, resources, digital products and related journeys.

The Ground Beneath Her: books, resources, digital products and related journeys.

It also applies to future Khemi Love Ltd book, course, assessment, digital-product or service websites that display or link to this statement. BlueRoot Finance Ltd is a separate business and is not covered by this Privacy Statement.

The information we collect depends on how you interact with us.

Identity and contact information: your name, email address, telephone number, postal address and communication preferences.

Account and member information: registration details, login credentials, account activity, product access and participation in private or member-only spaces.

Purchase and transaction information: products or services purchased, order history, payment status, billing details, delivery address, refunds and customer-service communications. Full card details are normally handled by our payment provider rather than stored by us.

Digital-product information: downloads, course or journey access, progress or completion information, responses submitted through product forms, technical support requests and engagement with digital materials.

Artwork and physical-order information: delivery details, shipping instructions, order communications, returns and information required to fulfil a physical order.

Enquiry and communication information: messages sent through email, website forms, social media, telephone or WhatsApp, together with the information you choose to include.

Assessment, booking and service information: your goals, presenting concerns, suitability responses, appointment details, session administration and relevant communications before, during and after a service.

Technical and usage information: IP address, browser and device information, pages viewed, approximate location, referral source, cookie choices, security logs and website interaction data.

Marketing information: newsletter choices, consent records, email engagement and preferences about the communications you wish to receive.

Assessments, suitability forms and one-to-one services such as RTT, Reiki, coaching, consultations or other wellbeing work may involve information about physical or mental health, emotional wellbeing, past experiences, racial or ethnic origin, religious or philosophical beliefs, sex life or sexual orientation. Some of this is special-category information under UK data protection law and receives additional protection.

We collect only information that is reasonably necessary for the relevant purpose. We normally rely on your explicit consent as the Article 9 condition for processing special-category information for suitability and service delivery, together with an appropriate Article 6 lawful basis described below. Any request for explicit consent will be separate, specific and capable of being withdrawn.

Withdrawing consent does not affect processing that was lawful before withdrawal. It may, however, mean that we cannot safely or appropriately provide a service that objectively requires the information.

Directly from you: when you contact us, subscribe, purchase, create an account, download a resource, complete a form or assessment, book a service, participate in a journey or communicate with us.

Automatically: through essential website functions, cookies, analytics, fraud prevention, security tools and performance technologies, subject to your cookie choices where consent is required.

From service providers: such as payment, booking, website, course, email, delivery or authentication platforms when they confirm transactions, access or activity to us.

From public or professional sources: only where relevant, lawful and reasonably expected, for example to verify business information or protect against fraud.

Website and account operation: to provide website functions, create and secure accounts, authenticate users and deliver private content.

Digital products: to process orders, deliver books, audio, courses, resources and 21-Day Nervous System Journeys, monitor access, provide support and maintain purchase records.

Artwork and physical products: to process payment, arrange delivery, provide updates and manage returns or order enquiries.

Professional services: to respond to enquiries, assess suitability, schedule appointments, prepare for and provide agreed services, create permitted personalised materials and support integration or aftercare.

Communications: to answer questions, send service or order messages and provide important changes to products, accounts, appointments or policies.

Marketing: to send newsletters, educational content, launches, offers, events and updates where we have the necessary consent or another lawful basis permitted for the communication.

Improvement and security: to understand website performance, improve user experience, maintain records, prevent misuse or fraud and protect our rights, users and systems.

Legal and regulatory purposes: to meet tax, accounting, consumer, data-protection, insurance and other legal obligations, respond to lawful requests and establish, exercise or defend legal claims.

We identify a lawful basis for each use of personal information. Depending on the activity, we may rely on:

Contract: where processing is necessary to take requested steps before a contract or to fulfil a purchase, digital-product order, membership, booking or agreed service.

Consent: for optional email marketing, certain non-essential cookies and other activities where you have a genuine choice. You may withdraw consent at any time.

Legitimate interests: for proportionate business administration, service improvement, security, fraud prevention, limited customer communication and the establishment or defence of legal claims, after considering necessity and balancing your rights and interests.

Legal obligation: where information must be processed or retained to comply with tax, accounting, court, regulatory or other legal requirements.

Vital interests: in rare circumstances where processing is necessary to protect someone’s life.

Where we process special-category information, we also identify an additional Article 9 condition, normally explicit consent for the suitability and delivery of Khemi Love services. We will not use sensitive service information for unrelated marketing.

If you ask to receive newsletters, resources, educational content, launch news, events or offers, we may send communications about Khemi Love books, digital products, artwork, RTT, Reiki, coaching and related wellbeing services.

You can unsubscribe at any time by using the link in an email or contacting eve@khemilove.co.uk. We may retain a minimal suppression record so that we can respect your request and avoid adding you back to marketing unintentionally. Service, purchase and account messages are not marketing and may still be sent where necessary.

Our websites may use essential cookies to provide security, checkout, account access and other core functions. With your consent, we may also use analytics, preference or marketing technologies to understand performance and improve our communications.

Where required, non-essential technologies will not be activated until you make a choice through the cookie banner or preference tool. You can change your choices there or through your browser settings. Further details about individual cookies, providers and durations should be displayed in the cookie notice or preference tool used on the relevant website.

We do not sell personal information. We may disclose only the information reasonably necessary to trusted providers and recipients such as:

Technology providers: website hosting, ecommerce, member-area, digital-delivery, booking, video-call, cloud storage, email, security and IT-support services.

Payment and fulfilment providers: payment processors, printers, couriers and delivery providers involved in completing an order.

Professional advisers: accountants, insurers, legal advisers and other specialists where their advice or service is required.

Authorities and other recipients: courts, regulators, law-enforcement bodies, emergency services or other parties where disclosure is required by law, necessary to protect vital interests, or needed to establish, exercise or defend legal rights.

Providers acting as processors are expected to handle information only for agreed purposes, protect it appropriately and comply with applicable data-protection obligations.

Some technology providers may store or access information outside the United Kingdom. Where a restricted international transfer takes place, we will use an appropriate legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. Where relevant, we also consider whether supplementary protections are needed.

We use proportionate technical and organisational measures designed to protect personal information. These may include reputable platforms, access controls, authentication, device and account security, encrypted payment processing, secure storage, confidentiality practices, backups and service-provider checks.

No online service can guarantee absolute security. If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where the law requires us to do so.

We retain information only for as long as necessary for the purpose for which it was collected, including legal, tax, accounting, insurance, safeguarding, dispute and record-keeping requirements. Our usual criteria are:

Enquiries: normally up to two years after the last meaningful contact, unless they lead to a purchase or service relationship.

Orders and financial records: normally six years after the end of the relevant financial period, or longer if required by law or an active dispute.

Accounts and digital access: for as long as the account or access remains active, followed by a reasonable period for support, security and record keeping.

Marketing records: until you unsubscribe or we determine that continued contact is no longer appropriate; suppression information may be kept for longer to honour your choice.

Unsuccessful or incomplete suitability applications: normally up to 12 months unless a longer period is needed for safety, complaints or legal claims.

One-to-one service and sensitive records: normally up to seven years after the final service, where this is necessary for continuity, insurance, safeguarding or the establishment or defence of legal claims. A shorter period may be used where the information is no longer needed.

Cookie and analytics information: for the duration stated in the relevant cookie notice, preference tool or provider settings.

Information may be deleted, anonymised or securely archived when the applicable period ends. Legal holds, disputes or regulatory requirements may require a longer period.

Depending on the circumstances and lawful basis, you may have the right to:

Access: receive confirmation and a copy of personal information we hold about you.

Rectification: ask us to correct inaccurate or incomplete information.

Erasure: ask us to delete information in circumstances where the right applies.

Restriction: ask us to limit the way information is used in certain circumstances.

Objection: object to processing based on legitimate interests and object at any time to direct marketing.

Data portability: receive certain information you provided in a structured, commonly used and machine-readable form where the right applies.

Withdraw consent: withdraw consent at any time where consent is the basis used.

These rights are not absolute and may not apply in every situation. To exercise a right, email eve@khemilove.co.uk. We may need to verify your identity and will normally respond within one month, subject to lawful extensions.

Your right to object: You have an absolute right to object to direct marketing. Where we rely on legitimate interests for another purpose, you may object based on your particular situation; we will stop unless we can demonstrate compelling legitimate grounds or the processing is needed for legal claims.

We do not currently make decisions about you based solely on automated processing where those decisions produce legal or similarly significant effects. Suitability for one-to-one work is considered with human involvement. If this changes, we will provide the information and safeguards required by law.

Our websites, digital products and professional services are directed to adults unless a particular offer expressly states otherwise. We do not knowingly collect personal information directly from children through the activities covered by this statement. If you believe a child has provided information to us without appropriate authority, contact eve@khemilove.co.uk so that we can assess and address it.

Our websites may link to external websites, social platforms, payment pages or other services that determine their own purposes for using personal information. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information.

Please contact us first if you have a concern so that we can try to resolve it. Email eve@khemilove.co.uk.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). Current contact information and complaint guidance are available at https://ico.org.uk/make-a-complaint/.

We may update this Privacy Statement when our websites, products, services, providers or legal obligations change. The revised version will be published on the relevant websites with a new effective date. Where a change materially affects how existing information is used, we will take additional steps to bring it to your attention where appropriate.

Data controller: Khemi Love Ltd

Email: eve@khemilove.co.uk

Telephone: +44 7395 515 296

Website: www.khemilove.co.uk

Please do not send extensive medical or other highly sensitive information in an initial unencrypted email. We will tell you how to provide any information that is genuinely needed.