Website policy draft
Privacy policy.
How B Magnetic proposes to handle website enquiries, consultation details and technical information, with the facts still needing owner confirmation clearly identified.
Draft for owner review
Prepared 1 October 2026. Not legal advice or a certification of compliance. Not approved for publication.
Contents
Read alongside the other website drafts. None replaces the terms for a paid programme or event.
Who is responsible and how to contact us
B Magnetic Ltd is the proposed controller for the personal information described in this website notice. The company is registered in England and Wales with company number 15735546. Bianca Harris is the contact for privacy questions at bianca@bmagnetic111.com.
Before publication: the required company address disclosure must be resolved and approved. No postal address is included in this draft. For questions, please use bianca@bmagnetic111.com.
Supplier roles and arrangements still need owner confirmation.
This notice covers browsing this website, sending an enquiry and arranging a consultation through the external booking link. Any future programme or event may need additional privacy information for its particular activities.
Information we receive
- Email enquiries: your email address, name if provided, message, replies and any other details you choose to send. The email links open your own email app. Opening a draft does not send it to us; we receive it only when you send it.
- Consultation bookings: the name, contact details, message and scheduling information you provide through Cal.com, together with booking communications. Bianca’s Cal.com calendar is an external page, not an embedded form.
- Website requests: Replit hosting and the external Google Fonts service can receive your IP address, browser or device information and request data when your browser connects. The exact logs, access and storage used by the deployed host need verification.
- Motion preference: the site can save your selected motion setting in your browser. It is not a tracking identifier. See the Cookie policy draft for the precise storage entry.
There is currently no on site subscription form, account, checkout or enquiry submission form. No active application analytics or marketing scripts or third party embeds are loaded. Media files are hosted with the site. This does not establish that the hosting infrastructure uses no cookies.
We do not require health details, religious or philosophical beliefs, or other sensitive information for an enquiry or booking. Please avoid sending that information or unnecessary details about other people. A lawful basis for handling special category information has not been confirmed in this draft and must not be assumed.
Purposes and proposed lawful bases
The owner must confirm that these proposed bases match the actual processing and document any necessary assessment before approving this notice.
- Requested service enquiries and consultation arrangements: to answer your request about a service and arrange a consultation, taking steps at your request before entering a possible contract. A consultation does not itself enrol you in a programme.
- General enquiries: legitimate interests in answering questions, communicating with interested visitors and maintaining relevant correspondence. This is not permission to add you to marketing.
- Website operation and security: legitimate interests in delivering a readable, functioning website, identifying technical faults, preventing misuse and protecting the site and its visitors. These interests must be balanced against your rights and expectations.
- Legal requirements: where a specific legal obligation requires keeping or disclosing information, compliance with that obligation. Relevant obligations must be identified rather than assumed.
- Any future newsletter: separate, informed consent for the proposed email newsletter. MailerLite integration is deferred. An enquiry, consultation or email request is not a subscription or consent to marketing.
The network delivery of Google Fonts is part of the current website setup. The owner must review its necessity, supplier arrangements and any associated storage. A lawful basis for personal data processing does not remove a separate requirement for storage consent where one applies. Any statutory exception must be assessed for the specific technology and use.
You can choose not to send an enquiry or make a booking. Without the relevant contact and scheduling information, we may not be able to respond or arrange the consultation you request.
Suppliers and other recipients
Information may be handled by the suppliers involved in the route you choose:
- Replit, which hosts and serves the website.
- Cal.com, which provides the external consultation calendar and booking communications.
- Google Fonts, which supplies the Inter font through external browser requests.
- Google, the email provider used to receive and manage correspondence. The specific service, account type and contractual arrangements still need confirmation.
- Professional advisers or public authorities where disclosure is necessary for advice, a legal obligation or the establishment, exercise or defence of legal claims.
Only relevant information should be shared for the purpose concerned. The owner must confirm whether each supplier acts as a processor, a separate controller, or in another role, and check the applicable arrangements.
Links to Cal.com, the Google Drive brochure and social or media platforms take you to external services. Their own notices explain their processing when you visit them. Their policies do not replace this notice for information B Magnetic receives.
International processing
Some suppliers may process information outside the UK. Their processing and storage locations, onward transfers and any required safeguards have not yet been verified.
Owner confirmation needed: check the arrangements for Replit, Cal.com, Google Fonts and the email provider. Identify any applicable UK adequacy regulations or appropriate safeguards, such as suitable contractual arrangements, and any required transfer assessment. This draft does not assert that a particular region, data processing agreement, adequacy decision or safeguard is already in place.
Ask bianca@bmagnetic111.com for information about relevant transfer arrangements and how to obtain details of safeguards once those arrangements have been confirmed.
How long information is kept
Retention should be limited to what is needed to handle your enquiry or booking, maintain a relevant ongoing relationship, comply with applicable legal obligations, and address complaints or disputes. When those purposes no longer apply, information should be deleted or appropriately anonymised.
Owner confirmation needed: the actual retention and deletion schedules for emails, consultation records, supplier copies and hosting logs are not yet confirmed. No fixed period is invented here. The owner must assess the purpose, sensitivity, relationship status and relevant legal requirements for each category before final approval.
The browser motion preference has no automatic expiry and remains until deleted or replaced. Its duration and removal are described in the Cookie policy draft.
Your rights and complaints
Under UK data protection law, including the UK GDPR and Data Protection Act 2018, you may have rights to access your information, correct inaccurate information, ask for erasure, restrict processing, object to processing, and receive or transfer information through data portability where applicable. These rights depend on the circumstances and are subject to lawful exceptions.
You can object to processing based on legitimate interests, including for reasons relating to your particular situation. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. A future newsletter must offer a clear way to unsubscribe.
Send a rights request to bianca@bmagnetic111.com. We may need proportionate information to confirm your identity. A response is usually due within one month, subject to lawful extensions or exceptions. If an exception or extension applies, we should explain it as required by law.
You can raise a privacy concern with us and have the right to complain to the UK Information Commissioner’s Office. You do not have to contact us first. See how to make a complaint to the ICO(opens in a new tab).
Security, children and changes
Reasonable technical and organisational measures should protect information against unauthorised access, loss or misuse. The owner must verify the measures and access arrangements in use. No website or email system can guarantee complete security, so please avoid sending unnecessary sensitive information.
This website and its mentoring information are not aimed at children. No age eligibility rule for a programme is set by this notice. If you believe a child has sent us personal information, contact Bianca so the situation can be reviewed appropriately.
This draft should be updated when the owner confirms the outstanding facts or the website changes. An approved version should show its revision date and explain significant changes where appropriate. Read the Terms and conditions draft for proposed website use terms.
Owner review before launch
This draft is not legal advice or a certification of compliance. It has not been approved for publication. The owner should check it against actual operations and obtain appropriate professional advice where needed.
- Resolve the required company address disclosure and approve an appropriate registered office before publication.
- Google is the confirmed email provider. Confirm the specific Google service, account type and contractual arrangements, along with the roles and arrangements of all other suppliers.
- Approve the actual email, booking and hosting log retention schedule, including deletion arrangements.
- Verify international processing locations, onward transfers and any required safeguards.
- Audit cookies and storage on the deployed Replit website, including hosting infrastructure, and complete the inventory.
- Keep any future newsletter consent and service supply terms separate. MailerLite is deferred, not an active integration.
Review reference: official ICO guidance on privacy notices. The guidance informs the draft structure; it does not verify this website or its suppliers.
Storage review reference: the ICO’s final guidance on storage and access technologies, dated 29 April 2026, reflecting the Data Use and Access Act changes. Assess applicable exceptions and obtain consent before use wherever the law requires it.
Questions about this draft? Contact Bianca or email bianca@bmagnetic111.com