Privacy Policy
Lloyd & Verse (lloydandverse.com)
Last updated: 31 July 2026
1. Who we are
Lloyd & Verse is a personal brand operated by E.S. Lloyd ("we", "us", "our"), covering coaching services, poetry, books, and related creative work published at lloydandverse.com (the "Site").
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, E.S. Lloyd is the data controller responsible for your personal data.
If you have any questions about this policy or how your data is handled, you can contact us at:
• Email: eslloyd@lloydandverse.com
You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.ukor by calling 0303 123 1113, though we’d appreciate the chance to resolve any concern directly first.
2. What personal data we collect
We only collect data that is relevant to running the Site and the services offered through it. Depending on how you interact with us, this may include:
Source
Data collected
Contact form
Name, email address, and the content of your message
Newsletter / mailing list signup
Email address, and first name if provided
Shop / product purchases
Name, billing and delivery details, order history, and payment confirmation (card details are handled directly by our payment processor — we do not store full card numbers)
Patreon membership links
We do not collect or store your Patreon account data ourselves — Patreon is a separate platform with its own
. Clicking through to Patreon is governed by their terms, not this one.
Site analytics
Automatically collected technical data such as IP address, browser type, pages visited, and time spent on the Site, via the website builder platform’s built-in analytics
Direct correspondence
Any information you volunteer if you email or message us directly
We do not knowingly collect special category data (such as health, medical, or neurodiversity-related information) through the Site, and the Site is not designed to solicit this. If you choose to share such information voluntarily (for example, in a free-text enquiry), we will treat it with additional care and only use it to respond to your specific request.
3. How we use your data and our legal basis
Purpose
Data used
Legal basis under UK GDPR
Responding to enquiries sent via the contact form
Name, email, message
Legitimate interests (running our business responsibly)
Sending newsletters or marketing updates
Email address, first name
Consent (you can withdraw this at any time — see Section 7)
Processing and fulfilling shop orders
Name, address, order and payment details
Performance of a contract with you
Improving the Site and understanding how it’s used
Aggregated analytics data
Legitimate interests
Complying with legal or tax obligations (e.g. sales records)
Order and payment records
Legal obligation
We will never sell your personal data to third parties.
4. Cookies and similar technologies
The Site uses the built-in analytics provided by our website builder platform (123 Reg / GoDaddy) to understand visitor numbers and behaviour. This may involve cookies or similar technologies stored on your device.
Under UK law (the Privacy and Electronic Communications Regulations, alongside UK GDPR), non-essential cookies — including most analytics cookies — require your consent before they are set. If the Site does not yet display a cookie consent banner allowing you to accept or decline non-essential cookies, this should be added before the Site goes live with tracking enabled, to stay compliant. Strictly necessary cookies (e.g. those needed for the shop checkout to function) do not require consent but still need to be disclosed.
5. Who we share your data with
We share personal data only where necessary, with:
• 123 Reg / GoDaddy — our website hosting and website builder provider, which processes data to keep the Site running and provides built-in analytics.
• Our payment processor (e.g. Stripe, PayPal, or the checkout provider built into the website builder) — to process any purchases made through the Site.
• Our email marketing provider (e.g. Mailchimp or similar), if used to manage the newsletter list.
• Professional advisors (such as an accountant), where necessary for tax or legal compliance.
We do not share your data with third parties for their own marketing purposes.
6. International data transfers
Some of the providers listed above (including GoDaddy/123 Reg, and many payment or email marketing providers) are based in, or process data in, the United States or other countries outside the UK. Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Addendum, Standard Contractual Clauses, or the provider’s participation in a recognised data protection framework (e.g. the UK Extension to the EU-US Data Privacy Framework, where applicable). You can ask us for more detail on the specific safeguards in place for any provider by contacting us using the details in Section 1.
7. Your rights
Under UK GDPR, you have the right to:
• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), where applicable
• Restrict how we use your data
• Object to processing based on legitimate interests or for direct marketing
• Data portability — receive your data in a portable format
• Withdraw consent at any time, where we rely on consent (e.g. unsubscribing from the newsletter via the link in any email, or by contacting us)
To exercise any of these rights, email us at eslloyd@lloydandverse.com. We will respond within one month, as required by law.
8. How long we keep your data
• Contact form enquiries: kept only as long as needed to resolve your query, then deleted or anonymised, typically within 12 months.
• Newsletter subscribers: kept until you unsubscribe or request deletion.
• Order and payment records: kept for as long as required by UK tax law (currently up to 6 years).
• Analytics data: typically retained in aggregated/anonymised form; refer to the retention settings of the analytics tool in use.
9. Security
We take reasonable technical and organisational measures to protect your personal data, including relying on the security infrastructure provided by our hosting and payment providers. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children’s data
The Site is not directed at children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top will always show the most recent revision. We encourage you to review this page periodically.
12. Contact us
If you have any questions about this policy or how your data is handled, please contact:
E.S. Lloyd
Email: eslloyd@lloydandverse.com
Copyright © 2026 E.S.Lloyd - All Rights Reserved.