IAMJENNYLANE.COM & THE JENNY LANE BLOG
Privacy Policy
Last updated: 1 July 2026
1. Who We Are
This privacy policy applies to the following websites:
Both websites are operated by:
Jeanette Lane (trading as Jenny Lane / iamjennylane) Stone, Staffordshire, United Kingdom
Email for all data and privacy queries: info@iamjennylane.com
We are the data controller for personal data collected through these websites. This means we determine why and how your personal data is used.
2. What This Policy Covers
This policy explains:
- What personal data we collect about you
- Why we collect it and the lawful basis we rely on
- Who we share it with
- How long we keep it
- Your rights under UK data protection law
- How to make a complaint
We are committed to protecting your privacy and handling your data responsibly in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
3. What Personal Data We Collect
3.1 Data you give us directly
When you sign up for emails, order a free copy of The Jenny Lane Letter, or purchase any product or service, we collect:
- Your name
- Your email address
- Your postal address (for physical products and the printed newsletter)
- Payment information (processed directly by Stripe — we do not store card details)
When you leave a comment on the blog, we collect:
- Your name
- Your email address
- Your website address (if you choose to provide it)
- Your IP address and browser user agent (for spam prevention)
When you contact us directly by email or through a contact form, we collect:
- Your name
- Your email address
- The content of your message
3.2 Data collected automatically
When you visit either website, data is collected automatically by the tools listed in Section 6. This includes:
- Your IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or search term
- Approximate location (country/region level)
This data is collected via cookies and similar technologies. Please see Section 7 for full details.
4. Why We Collect Your Data and the Lawful Basis
We only collect and use your data where we have a lawful reason to do so. Below is a breakdown of each type of processing and the legal basis we rely on.
| Purpose | Lawful Basis |
|---|---|
| Sending you the Jenny Lane Letter and other email content you have subscribed to | Consent (Article 6(1)(a) UK GDPR) |
| Fulfilling orders for physical products, including The Jenny Lane Letter print edition | Contract (Article 6(1)(b) UK GDPR) |
| Processing payments | Contract (Article 6(1)(b) UK GDPR) |
| Responding to enquiries and support requests | Legitimate interests — communicating with people who contact us (Article 6(1)(f) UK GDPR) |
| Analysing how our websites are used so we can improve them | Legitimate interests — understanding our audience (Article 6(1)(f) UK GDPR) |
| Displaying relevant advertising through Mediavine (when active) | Consent (Article 6(1)(a) UK GDPR via cookie consent) |
| Spam prevention on blog comments | Legitimate interests — keeping the website secure and free from abuse (Article 6(1)(f) UK GDPR) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c) UK GDPR) |
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew it.
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You have the right to object to this processing — see Section 9.
5. Email Marketing
If you subscribe to any of our email lists — including the Jenny Lane Letter waitlist, blog updates, or any other free or paid content — we will send you emails related to that subscription.
We use GoHighLevel (GHL) to manage our email list and send emails. Your name and email address are stored in GHL.
You can unsubscribe at any time by clicking the unsubscribe link in any email, or by emailing us directly at [INSERT YOUR CONTACT EMAIL].
We do not sell, rent, or share your email address with third parties for their own marketing purposes.
6. Third-Party Services and Data Processors
We use the following third-party tools and services that may process your personal data on our behalf. These are our data processors — they act only on our instructions and are contractually required to protect your data.
6.1 Google Analytics 4 (GA4)
We use Google Analytics 4 to understand how visitors use our website. GA4 collects data including pages visited, time on site, device type, and approximate location. This data is anonymised and aggregated.
GA4 data is processed by Google LLC, which may transfer data to servers in the United States. Google participates in the UK–US data bridge framework.
You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on, or by declining analytics cookies when shown our cookie banner.
For more information: Google Privacy Policy
6.2 Rank Math SEO
We use the Rank Math plugin on our WordPress blog for SEO functionality. Rank Math may collect anonymised data about website performance. It does not collect personally identifiable visitor data.
For more information: Rank Math Privacy Policy
6.3 Grow by Mediavine
We use Grow by Mediavine for social sharing and content tools. When Mediavine advertising is active on this site, it may use cookies and similar technologies to serve personalised advertisements. Advertising cookies are only set with your consent via our cookie banner.
For more information: Mediavine Privacy Policy
6.4 GoHighLevel (GHL)
We use GoHighLevel to manage our email list, CRM, and order processing. If you sign up for any email list, purchase a product, or submit a form connected to our GHL account, your data is stored and processed there. GHL servers may be located in the United States.
For more information: GoHighLevel Privacy Policy
6.5 Stripe
We use Stripe to process payments. When you purchase a product or service, your payment details are handled directly by Stripe. We do not store or have access to your full card details.
For more information: Stripe Privacy Policy
6.6 Mixam
If you order a physical printed product (including The Jenny Lane Letter), fulfilment may be handled by Mixam. Your name and postal address will be shared with them for this purpose only.
For more information: Mixam Privacy Policy
6.7 WordPress / Automattic
This blog runs on WordPress. Automattic (the company behind WordPress.com and related services) may process data in connection with spam filtering, comment moderation via Akismet, and Gravatar profile images.
For more information: Automattic Privacy Policy
6.8 IONOS
Our website is hosted by IONOS. Your data may be stored on IONOS servers located in the UK or EU.
For more information: IONOS Privacy Policy
7. Cookies
Cookies are small text files stored on your device when you visit a website. We use cookies to make our website work properly, to understand how it is used, and (where you consent) to display advertising.
7.1 Strictly necessary cookies
These cookies are essential for the website to function. They cannot be switched off. They include cookies that remember your cookie preferences, and WordPress login and security cookies if you have an account.
7.2 Analytics cookies (consent required)
We use Google Analytics 4 cookies to understand how visitors use our website. These cookies are only set with your consent.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique users | 2 years |
| ga[ID] | Stores session state | 2 years |
| _gid | Distinguishes unique users | 24 hours |
7.3 Advertising cookies (consent required)
When Mediavine advertising is active on this site, advertising cookies may be set to deliver relevant ads. These are only set with your consent.
7.4 Comment cookies (optional)
If you leave a comment on the blog, you may opt in to saving your name, email address, and website URL as cookies so you do not have to fill them in again. These cookies last for one year.
7.5 Managing your cookie preferences
When you first visit our website, you will be shown a cookie banner where you can accept or decline non-essential cookies. You can change your preferences at any time via the cookie settings link in the footer.
You can also control cookies through your browser settings. Please note that blocking all cookies may affect the functionality of this website.
8. International Data Transfers
Some of the third-party services we use (including Google and GoHighLevel) may transfer your data outside the United Kingdom. Where this happens, we ensure that appropriate safeguards are in place in line with UK GDPR requirements, including use of Standard Contractual Clauses or reliance on UK adequacy decisions and data bridge arrangements where applicable.
9. Your Rights Under UK Data Protection Law
You have the following rights in relation to your personal data:
Right to access — You can request a copy of the personal data we hold about you. This is sometimes called a Subject Access Request (SAR).
Right to rectification — You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure — You can ask us to delete your personal data in certain circumstances (for example, where we no longer need it, or where you withdraw consent).
Right to restriction — You can ask us to restrict how we process your data in certain circumstances.
Right to data portability — Where we process your data by automated means on the basis of your consent or a contract, you can ask us to provide it in a structured, commonly used, machine-readable format.
Right to object — You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making — We do not make decisions about you solely by automated means that have legal or similarly significant effects.
To exercise any of these rights, please contact us at [INSERT YOUR CONTACT EMAIL]. We will respond within one calendar month.
10. How Long We Keep Your Data
| Type of data | Retention period |
|---|---|
| Email subscribers | Until you unsubscribe, plus a reasonable period thereafter |
| Order and customer records | 6 years (to comply with tax and accounting obligations) |
| Blog comments | Indefinitely, unless you request deletion |
| Website analytics data | Up to 26 months (GA4 default) |
| Enquiry and contact messages | 12 months from last contact |
11. Data Protection Complaints — Your Right to Complain to Us
Under the Data (Use and Access) Act 2025, you have a statutory right to complain directly to us if you believe we have mishandled your personal data.
How to make a complaint to us:
Email us at [INSERT YOUR CONTACT EMAIL] with the subject line: Data Protection Complaint
Please include:
- Your name and contact details
- A description of your concern
- What outcome you are looking for
What happens next:
- We will acknowledge your complaint within 30 days of receiving it
- We will investigate and respond to you fully without undue delay
- We will keep you informed of progress throughout
We take all data protection complaints seriously and will do our best to resolve them fairly and promptly.
12. Your Right to Complain to the ICO
If you are unhappy with how we have handled a complaint, or if you prefer to go directly to the regulator, you also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Website: https://ico.org.uk Helpline: 0303 123 1113
You have the right to complain to the ICO at any time, but we would welcome the opportunity to address your concerns directly first.
13. Children’s Privacy
Our websites are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@iamjennylane.com and we will delete it promptly.
14. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure hosting, access controls, and use of reputable third-party processors with their own security standards.
No transmission of data over the internet is completely secure. If you have concerns about the security of information you have sent to us, please contact us.
15. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we make significant changes, we will update the date at the top of this page. We encourage you to check this page periodically.
16. Contact Us
For any questions about this privacy policy, to exercise your data rights, or to make a data protection complaint, please contact:
Jeanette Lane (trading as Jenny Lane) Email: info@iamjennylane.com
We aim to respond to all queries within 30 days.
Our website address is: https://thejennylaneblog.com and https://iamjennylane.com.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.