Privacy Policy
Last updated: 22 March 2026
Welcome to Derya’s Magical Journey (www.deryasmagicaljourney.com). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, subscribe to our newsletter, purchase workshops, or interact with our content. We are committed to safeguarding your privacy and handling your data responsibly.
1. Who We Are
Derya’s Magical Journey is operated by Derya Tolhurst. If you have any questions about this Privacy Policy or your personal data, you can contact us at deryasmagicaljourney@gmail.com.
2. Information We Collect
We may collect the following types of personal information:
Personal Identification Information: your name, email address, and any other details you voluntarily provide when subscribing to our newsletter, filling in contact forms, or registering for workshops.
Payment and Billing Information: when you purchase a workshop or paid membership, payment is processed through third-party providers (such as Squarespace Commerce or Stripe). We do not store your full credit card or bank details on our servers.
Usage Data and Analytics: information about how you interact with our website, including your IP address, browser type, operating system, pages visited, time spent on pages, and referring URLs. This data is collected via cookies and similar technologies.
Communication Data: any information you provide when you contact us directly, including the content of your messages.
3. How We Collect Your Information
We collect information in the following ways:
Directly from you, when you subscribe to our newsletter, register for a workshop, complete a contact form, or make a purchase.
Automatically, through cookies and analytics tools when you browse our website.
From third-party platforms, such as Squarespace (our website host), Substack (for the She’s Magic membership), Stripe (payment processing), and email marketing services.
4. How We Use Your Information
We use the information we collect for the following purposes:
To send you our fortnightly newsletter and other communications you have opted into.
To process workshop registrations and payments.
To respond to your enquiries and provide customer support.
To improve our website, content, and services based on usage patterns.
To comply with legal obligations.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytics data. Cookies are small text files stored on your device when you visit our site.
We use the following types of cookies:
Essential Cookies: necessary for the website to function properly (e.g., shopping cart, session management).
Analytics Cookies: help us understand how visitors use our site, which pages are most popular, and how we can improve the user experience. We use Squarespace Analytics and may use Google Analytics.
Marketing Cookies: used to deliver relevant content and track the effectiveness of our marketing efforts.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
6. Third-Party Services
We work with trusted third-party service providers to operate our website and deliver our services. These may include:
Squarespace – website hosting, commerce, and analytics.
Substack – hosting the She’s Magic paid membership and newsletter.
Stripe – secure payment processing.
Email marketing platforms – for sending newsletters and automated email sequences.
Each of these providers has their own privacy policy governing how they handle your data. We encourage you to review their policies.
7. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:
With service providers who assist us in operating our website and delivering our services (as listed above), strictly for the purposes outlined in this policy.
When required by law, regulation, or legal process.
To protect our rights, property, or the safety of our users.
8. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. If you unsubscribe from our newsletter or request deletion of your data, we will remove your information within a reasonable timeframe.
9. Your Rights
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
The right to access the personal data we hold about you.
The right to rectification of inaccurate or incomplete data.
The right to erasure (“right to be forgotten”).
The right to restrict processing of your data.
The right to data portability.
The right to object to processing.
The right to withdraw consent at any time.
To exercise any of these rights, please contact us at deryasmagicaljourney@gmail.com. We will respond to your request within 30 days.
10. Data Security
We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. Our website uses SSL encryption to secure data transmitted between your browser and our servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. International Data Transfers
Some of our third-party service providers (such as Squarespace and Stripe) are based outside the EEA. Where your data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
12. Children’s Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information promptly.
13. Links to Other Websites
Our website may contain links to external websites, including Instagram, Substack, and other platforms. We are not responsible for the privacy practices of these third-party sites. We encourage you to read the privacy policies of any external websites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch at deryasmagicaljourney@gmail.com or via the contact page on our website: