Privacy Policy

RestSpace with Liz Wright ("we", "us") is the data controller for the personal information you provide when using our website and mobile app. This policy explains what we collect, why, and the rights you have over it.

We are committed to protecting your privacy and handling your data transparently and lawfully.

Account information: your name and email address, which you provide when you register.

Payment information: when you purchase a membership, your card details are handled entirely by our payment provider, Base44 Payments. We do not see or store your full card number; we retain only your subscription status, plan, and renewal date.

Content and progress: the reflections you save, playlists you create, journal entries you write, and your viewing and listening progress.

Community contributions: any discussions, comments, or replies you post.

Usage information: anonymised analytics about which content is viewed, to help us improve the service.

To create and manage your account, grant access to membership content, and process renewals.

To send you service-related emails such as welcome messages, renewal reminders, and new-content notifications (you can manage these in your account).

To display your name on community content you author.

To improve our content and features, and to keep the platform secure.

We process your data under: performance of the contract (running your account and membership), our legitimate interests (improving the service and platform security), and your consent (for optional marketing emails and analytics), which you can withdraw at any time.

We share data only with the processors needed to run RestSpace: our hosting and database platform, our payment provider Base44 Payments, and our email provider. Each acts on our instructions and under strict data-protection terms.

We never sell your personal data.

We may disclose information where required by law or to protect the rights, safety, or property of our members or the public.

We keep your account data for as long as your account is active. If you delete your account, we remove your profile and personal content within a reasonable period, except where we are required to retain records (for example, payment and tax records).

Community posts may remain visible after account deletion in anonymised form unless you ask us to remove them.

We use access controls, encryption in transit, and role-based permissions so that only you (and our admins where needed) can reach your personal data. Access is restricted on a need-to-know basis.

You have the right to access, correct, or delete your personal data, to object to or restrict certain processing, to data portability, and to withdraw consent. You can exercise most of these from your account page.

To delete your account, use the Delete Account option in your account settings. To exercise other rights, email admin@lizwright.org.

RestSpace is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has registered, please contact us so we can remove the account.

Some of our processors may operate outside the UK/EEA. Where this happens, we rely on recognised safeguards (such as UK International Data Transfer Agreements) to protect your data to a UK-equivalent standard.

If you have a question about your data, contact us at admin@lizwright.org. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have not addressed your concern.