Privacy policy.

Last updated: 9 November 2025

This Privacy Policy explains how Cisza Space Limited (trading as Talk with Care) collects, uses, shares and protects your personal information. It also explains your privacy rights and how the law protects you.

1. Who we are (Data Controller)

Cisza Space Limited ("we", "us", "our") is the data controller for personal data processed via our website and services.

Registered office: Willow Tree Cottage, Broad Oak, Odiham, Hook, England, RG29 1AQ
Company number: 16581610
Trading name: Talk with Care
Contact email: ciszaspace@gmail.com
We have not appointed a Data Protection Officer; please contact us via the above email for any privacy queries.

Our services are intended for adults (18+). We do not knowingly collect personal data from children.

2. The personal data we collect

We may collect and process the following categories of data:

Identity data: name, username/handle, pronouns.
Contact data: email address, billing address, telephone number (if provided).
Account data: login credentials, preferences, community profile information.
Order & transaction data: purchases, invoices, payment status (we do not store full card numbers; payments are handled by our payment providers).
Content you provide: text you ask us to draft/edit, coaching notes, messages or forms you submit, feedback and survey responses.
Usage & technical data: IP address, device/browser information, pages viewed, referring URLs, cookies and similar technologies (see Cookies, §10).
Communications data: emails and messages between you and us, including support requests and coaching scheduling.

Special category data (e.g., health, racial/ethnic origin, religious beliefs) and information about criminal offences should not be included in submissions to us. If you choose to include such information, we will only process it where strictly necessary and lawful (see §4) and may ask you to remove or anonymise it.

3. How we use your data (purposes)

We use personal data to:

Provide and deliver services (message drafting/re‑writing and 1:1 coaching), including account setup, order confirmation, digital delivery and session scheduling.
Take payment and manage invoices/refunds.
Communicate with you about orders, support, service updates and policy changes.
Operate community areas (where applicable) and moderate for safety and compliance with our Terms.
Improve and secure our website and services (analytics, troubleshooting, testing, fraud prevention).
Comply with legal and tax obligations.
Send optional marketing communications (only with your consent). You can unsubscribe at any time.

4. Our legal bases (UK GDPR)

We rely on one or more of the following lawful bases:

Contract – to provide services you purchase or request (§3.1–3.3).
Legitimate interests – to run, improve and protect our services, moderate community areas, and prevent abuse/fraud (§3.4–3.5). We balance these interests against your rights.
Consent – for optional email marketing and non‑essential cookies/analytics (§3.7, §10). You may withdraw consent at any time.
Legal obligation – to meet tax, accounting and regulatory requirements (§3.6).
Vital interests / safeguarding – only where we reasonably believe there is a risk of serious harm; we may share limited information with appropriate agencies.

Special category data: If you include special category data in materials you submit, we will process it only if you have explicitly consented (e.g., by clearly providing it for inclusion in a draft) or where it has been manifestly made publicby you. We may also process minimal special category data where necessary for the establishment, exercise or defence of legal claims (rare for our service).

5. Sharing your data

We share data with trusted service providers (processors) who assist us in operating our services, such as:

Website hosting & CMS (e.g., Squarespace or equivalent),
Payment processors (e.g., Stripe, PayPal, or Square),
Email & productivity tools (e.g., Google/Gmail),
Analytics (e.g., Google Analytics),
Video meeting providers for coaching (e.g., Zoom, Google Meet),
Customer support tools.

These providers may only process your data on our instructions and must protect it appropriately. We may also share data where required by law, to enforce our terms, or to protect rights, property or safety.

We do not sell your personal data.

6. International transfers

Some providers may be located outside the UK/EEA. Where your data is transferred internationally, we use appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and conduct transfer risk assessments where appropriate.

7. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy and to meet legal/accounting requirements. Typical retention periods are:

Orders & invoices: 6 years (HMRC requirements).
Account & profile data: while your account is active and up to 24 months after last activity.
Coaching records & drafts: up to 24 months after delivery (unless you ask us to delete earlier, subject to legal holds).
Support correspondence: up to 24 months after resolution.
Community content: until you delete it or your account is closed (we may retain backups/logs for security).

We may retain minimal information to honour suppression/opt‑out requests.

8. Security

We implement technical and organisational measures to protect personal data, including encryption in transit, access controls, and least‑privilege practices. No system is 100% secure; please use strong passwords and do not share sensitive information unnecessarily.

9. Your rights

Under UK data protection law, you have rights to:

Access your personal data;
Rectify inaccurate data;
Erase data (where applicable);
Restrict or object to processing, including profiling based on legitimate interests;
Data portability for data you provided to us;
Withdraw consent where processing is based on consent (e.g., marketing, non‑essential cookies);
Lodge a complaint with the UK Information Commissioner’s Office (ICO).

ICO contact: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; 0303 123 1113; ico.org.uk.

To exercise your rights, email ciszaspace@gmail.com. We may request proof of identity. We will respond within one month (extendable by two months for complex requests).

10. Cookies and analytics

We use cookies and similar technologies to operate the site, keep you signed in, remember preferences, and (with your consent) to analyse traffic and measure the effectiveness of content and ads.

Strictly necessary cookies – required to provide the site and services; cannot be switched off.
Performance/analytics cookies – help us understand how the site is used (consent‑based in the UK).
Functional cookies – remember choices and improve features.
Marketing cookies – used to measure or deliver ads (consent‑based in the UK).

You can control cookies via our cookie banner and your browser settings. For details, see our separate Cookie Policy (or the Cookies section on our site).

11. Marketing

We only send marketing emails with your consent. You can unsubscribe at any time using the link in our emails or by contacting us at ciszaspace@gmail.com. We may still send you non‑marketing messages about your orders or important service updates.

12. Children’s data & co‑parenting context

Our services are for adults. Please avoid sharing children’s personal data unless it is strictly necessary for us to help you draft a message. Do not include sensitive details beyond what is essential. If you share a child’s data, you confirm you have the lawful right to do so.

13. Automated decision‑making

We do not use automated decision‑making that produces legal or similarly significant effects on you.

14. Third‑party links

Our website may contain links to third‑party sites. Those sites have their own privacy policies and we are not responsible for them.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. If changes are material, we will notify registered users via email or a notice on the site.

16. Contact us

Questions or requests about this policy: ciszaspace@gmail.com.