Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains how I collect, use and protect your personal information when you visit my website, sign up for my emails, contact me, or buy something from me.

I'm committed to looking after your information and only using it for the purposes explained below.

1. Who I am

This website is operated by Andreea Sandu.

For data protection purposes, I am the data controller responsible for your personal information.

Contact email: hello@andreeasandu.com
Postal address: 4 Harebell Close, SG13 7TF, UK

If you have any questions about how I use your information, you can email me at hello@andreeasandu.com.

2. What information I collect

Depending on how you interact with my website, I may collect:

  • Your name
  • Your email address
  • Your billing and payment information when you purchase a product or service
  • Information you provide when you contact me
  • Information about the products or services you purchase
  • Your preferences regarding emails and marketing
  • Information about how you use my website, such as pages visited, device type and approximate location
  • Technical information such as your IP address, browser type and operating system
  • Any other information you choose to provide to me

I don't intentionally collect sensitive personal information through this website.

3. How I collect your information

I may collect information when you:

  • Sign up for my newsletter or a free resource
  • Purchase one of my digital products
  • Contact me through a form or by email
  • Enquire about my writing services
  • Interact with my website
  • Subscribe to any other email communication I offer

I may also receive limited information from the technology providers I use to operate the website and process payments.

4. Why I use your information

I use your personal information for the following purposes:

To provide products and services

If you purchase a digital product or writing service from me, I use your information to process your order, provide access to what you've purchased, communicate with you about your order, and provide customer support.

The lawful basis for this is contract, because I need to process your information in order to provide the product or service you've requested.

To send you emails you've signed up for

If you subscribe to The Life Lesson Letter, a free resource, or another email list, I'll use your email address to send you the emails you've requested and, where you've given the appropriate consent, information about my products, services and other things I think you'll find useful.

The lawful basis for marketing emails is generally consent where consent is required.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link at the bottom of any email.

To respond to enquiries

If you contact me about my writing services, website, products or anything else, I'll use the information you provide to respond to you and deal with your enquiry.

The lawful basis will generally be legitimate interests, or taking steps at your request before entering into a contract where your enquiry relates to a potential purchase.

To improve my website

I may use information about how visitors use my website to understand what is working, identify problems and improve the website and my products.

Where cookies or similar technologies require your consent, I will ask for that consent before using them. UK rules require consent for non-essential cookies and similar technologies, with limited exceptions for technologies that are strictly necessary.

5. Who I share your information with

I don't sell your personal information.

I may share information with trusted third-party providers that help me run my business and website, including:

Leadpages
I use Leadpages to build and operate parts of my website, landing pages and checkout experience.

Kit
I use Kit to manage my email subscribers and send newsletters and other email communications.

Stripe
I use Stripe to process payments for products and services. Your payment information is processed by Stripe rather than being stored directly by me.

Website, analytics and other service providers
I may use other technology providers to host, secure, analyse or maintain the website and deliver its services.

Where appropriate, these providers process information on my behalf and are expected to protect it appropriately.

Some service providers may process personal information outside the UK. Where this happens, I will take appropriate steps to ensure that your information receives an appropriate level of protection under applicable UK data protection law.

6. Payment information

When you buy something from my website, your payment is processed securely by Stripe.

I do not receive or store your full card number or security code.

I may receive information such as your name, email address, billing details and information about your purchase so that I can fulfil your order and keep appropriate business records.

7. How long I keep your information

I keep personal information only for as long as I reasonably need it for the purpose for which it was collected.

For example:

  • Newsletter subscriber information is kept while you remain subscribed. If you unsubscribe, I may retain limited information to make sure I don't accidentally add you back to the mailing list.
  • Purchase and transaction information may be kept for as long as necessary to fulfil the transaction and meet accounting, tax and legal requirements.
  • Enquiry information is generally kept for as long as necessary to deal with the enquiry and any resulting relationship.
  • Information collected through website cookies and analytics is retained according to the relevant provider's settings and policies.

When information is no longer needed, I will delete it or anonymise it where reasonably possible.

8. Cookies

My website may use cookies and similar technologies.

Some cookies are necessary for the website to function, for example to enable security, forms or checkout functionality.

Other cookies may be used for purposes such as analytics or remembering preferences. Where consent is required, I will ask for it before setting these cookies.

You can also control cookies through your browser settings.

For more information about cookies and your rights, see the ICO's guidance on cookies.

9. Your rights

Under UK data protection law, you have a number of rights relating to your personal information.

Depending on the circumstances, these include the right to:

  • Ask for a copy of the personal information I hold about you
  • Ask me to correct inaccurate or incomplete information
  • Ask me to delete your personal information
  • Ask me to restrict how I use your information
  • Object to certain uses of your information
  • Withdraw your consent where I am relying on consent
  • Request your information in a portable format in certain circumstances
  • Complain about how I use your information

You can exercise these rights by emailing hello@andreeasandu.com.

You also have the right to unsubscribe from my marketing emails at any time using the unsubscribe link included in those emails.

Some rights are subject to exceptions under data protection law. If I cannot comply with a request, I'll explain why.

10. How I protect your information

I take reasonable technical and organisational measures to protect your personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information online is completely secure, so I cannot guarantee absolute security.

11. Third-party websites

My website may contain links to other websites, including social media platforms and websites belonging to other businesses.

If you follow one of these links, you'll leave my website. I am not responsible for the privacy practices or content of other websites, so I recommend checking their privacy policies before providing them with personal information.

12. Automated decision-making

I do not use your personal information to make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

13. Changes to this Privacy Policy

I may update this Privacy Policy from time to time if my business, website or the way I process information changes.

The latest version will always be published on this page, with the date shown at the top.

14. Complaints

If you're unhappy with the way I have handled your personal information, please contact me first at hello@andreeasandu.com so I can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office