Privacy Policy
Last updated: September 2026
Nikki Leader respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how I collect, use, store and protect personal information when you visit my website, contact me, purchase or book my services, join the Spirit Hub or Spirit Hub Circle, subscribe to communications, or otherwise interact with my business.
This policy applies to the website www.nikkileader.com and to the services and activities provided by Nikki Leader.
1. Who I am
Nikki Leader is the data controller responsible for your personal data.
Email: Nikki@nikkileader.com
Website: www.nikkileader.com
If you have any questions about how I use your personal information, or wish to exercise any of your data-protection rights, please contact me at:
I am responsible for ensuring that your personal data is handled fairly, lawfully, securely and transparently.
2. What personal data I may collect
Depending on how you interact with me, I may collect some or all of the following information.
Identity information
This may include your first name, surname, title and other information you choose to provide.
Contact information
This may include your email address, telephone number, postal address and, where relevant, your WhatsApp contact details.
Booking and service information
This may include information relating to appointments, workshops, courses, readings, mentoring, sound healing, Spirit Hub membership and other services you book or purchase.
It may also include correspondence, questions, feedback and information you voluntarily provide when communicating with me.
Transaction information
This may include details of products or services you have purchased, subscription status, payments, refunds and other transaction-related information.
I do not normally receive or store your full payment-card details. Payments made through my website or services may be processed by third-party payment providers such as Stripe.
Technical information
When you use my website, certain technical information may be collected automatically, depending on the cookies and technologies in use. This may include IP address, browser type, device information, operating system, approximate location, referring website and information about how you use the website.
Marketing and communications information
This may include your preferences about receiving marketing communications and records of your communications with me.
Information you voluntarily provide
You may choose to provide additional information when communicating with me or participating in my services or community.
Please do not provide sensitive personal information unless it is genuinely necessary or relevant to the service you are receiving.
3. Special category and sensitive information
Some personal information is considered particularly sensitive under UK data-protection law, including information concerning health, religious or philosophical beliefs, sexual orientation, political opinions and certain other categories.
I do not generally ask customers to provide special category information.
However, because some of my services involve spirituality, wellbeing, personal development and reflective conversation, you may voluntarily disclose information about yourself during a session, workshop, community discussion or correspondence.
Where I process special category information, I will only do so where permitted by applicable data-protection law and where an appropriate condition for processing applies.
Please avoid sharing sensitive personal information about yourself or other people in community spaces unless you are comfortable doing so.
4. How I collect your personal data
I may collect personal information through:
Forms on my website
Online bookings and purchases
Email, telephone or other direct communication
Stripe and other payment or booking systems
Newsletter or mailing-list subscriptions
WhatsApp communities or groups
Zoom sessions and other online events
Information you provide when joining Spirit Hub Circle
Information you provide when participating in workshops, courses or other events
Cookies and similar technologies when you use my website
Feedback, enquiries or other communications you choose to send me
I do not buy or rent personal mailing lists.
5. Why I use your personal data
I only use your personal data where I have a lawful basis to do so under applicable data-protection law.
Depending on the circumstances, the lawful basis may be:
Contract
I may need to process your information to provide a service or product you have requested or purchased.
For example, this may include:
Processing a booking
Providing a tarot, Soul Plan, mentoring, sound or other service
Administering Spirit Hub Circle membership
Processing recurring membership payments
Sending booking or membership information
Managing cancellations, refunds and customer enquiries
Legal obligation
I may process personal information where necessary to comply with a legal obligation, including accounting, tax, financial-record keeping and responding to lawful requests from authorities.
Legitimate interests
I may process personal information where it is necessary for my legitimate business interests and those interests are not overridden by your rights and freedoms.
This may include:
Managing and improving my services
Managing my business and website
Maintaining appropriate business records
Preventing fraud or misuse
Protecting the security of my systems
Responding to enquiries
Understanding how people use my website
Improving customer experience
Where I rely on legitimate interests, I will consider whether the processing is necessary and proportionate and whether it could adversely affect your rights.
Consent
Where consent is required by law, I will ask for it.
For example, this may apply to certain marketing communications or certain non-essential cookies.
Where I rely on consent, you can withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
6. Spirit Hub Circle
If you join Spirit Hub Circle, I may process information such as your name, email address, payment and subscription information and information necessary to administer your membership.
I may also use your contact information to provide you with essential membership communications, including information about your subscription, changes to the service, access information and other communications necessary to operate your membership.
Spirit Hub Circle may use third-party services including Stripe, WhatsApp and Zoom.
If you join a Spirit Hub Circle WhatsApp group, your participation is subject to WhatsApp's own terms and privacy practices.
Depending on your WhatsApp settings and the type of group used, other members may be able to see information such as your WhatsApp name, profile information and telephone number.
You should review your WhatsApp privacy settings and only share information within the group that you are comfortable other members seeing.
Please also respect the privacy of other members and do not copy or share their personal information or contributions outside the community without permission.
7. Payments
Payments and recurring subscriptions may be processed by Stripe.
I do not normally see or store your full payment-card number or security code.
Stripe may process your personal and payment information in accordance with its own privacy policy and terms.
I may receive information from Stripe that is necessary to administer your payment or subscription, such as your name, email address, payment status, transaction information and subscription status.
8. Zoom and online sessions
Where I use Zoom or another online platform to provide sessions, workshops or membership activities, information such as your name, email address, display name, audio, video or other information you choose to share may be processed by that platform.
If a session is recorded, I will tell participants before recording begins and explain how the recording will be used.
You should avoid sharing information during online sessions that you do not wish to be heard or seen by other participants or included in a recording.
9. Newsletters and marketing
I may send newsletters and information about my services, events, workshops, courses, memberships and other relevant offerings.
I will only send electronic direct marketing where I have the appropriate permission or other lawful basis required by applicable law, including the Privacy and Electronic Communications Regulations (PECR).
Where consent is required, you can withdraw it at any time.
Every marketing email will provide a straightforward way to unsubscribe.
You also have an absolute right to object to your personal data being used for direct marketing.
Unsubscribing from marketing communications will not normally stop essential service or transaction-related communications, such as booking confirmations, payment information or important membership notices.
I do not sell your personal information or share it with another organisation for that organisation's own marketing purposes.
10. Who I share your personal data with
I may share personal information with trusted third-party service providers where this is necessary to operate my business or provide a service to you.
Depending on the services you use, these may include:
Squarespace – website hosting and related website services
Stripe – payment processing and subscriptions
WhatsApp / Meta – community and messaging services
Zoom – online meetings and sessions
Substack – newsletters and related communications, where applicable
Calendly – appointment scheduling, where applicable
Professional advisers such as accountants, lawyers or insurers where necessary
HM Revenue & Customs and other government or regulatory authorities where legally required
These organisations may process personal data on my behalf or independently in accordance with their own privacy policies and applicable law.
I will not sell your personal data.
I only share information that is reasonably necessary for the relevant purpose.
11. International transfers
Some of the third-party service providers I use may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, I will ensure that the transfer is made in accordance with applicable UK data-protection law and that appropriate safeguards or an applicable adequacy arrangement are in place where required.
The relevant third-party provider's privacy policy may provide further information about where and how it processes personal data.
12. Cookies and similar technologies
My website may use cookies and similar technologies.
Some cookies are necessary for the website to function. Other cookies may be used for purposes such as analytics, preferences or marketing.
Where required by law, I will ask for your consent before using non-essential cookies.
You can also manage certain cookie settings through your browser or any cookie-management tool provided on the website.
For more information about cookies used on my website, please see my cookie information or cookie settings where available.
13. How I protect your information
I take reasonable and appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.
Access to personal information is limited to people or organisations that need it for legitimate business purposes.
Where third parties process personal data on my behalf, I take reasonable steps to ensure that they provide appropriate protection and process information in accordance with applicable law and my instructions where required.
No online system or method of transmission can be guaranteed to be completely secure. However, I will take reasonable steps to protect your information.
If I become aware of a personal-data breach, I will assess it and take any action required under applicable data-protection law.
14. How long I keep your information
I will only keep personal information for as long as reasonably necessary for the purpose for which it was collected.
The length of time will depend on the type of information and why I need it.
For example:
Customer and transaction records may need to be retained for accounting, tax and legal purposes.
Booking and service information may be retained for an appropriate period to manage my business and deal with enquiries or disputes.
Marketing information will be retained while you remain subscribed or otherwise eligible to receive marketing, and for as long as reasonably necessary to maintain suppression or opt-out records.
Information that is no longer needed will be securely deleted or anonymised where reasonably practicable.
Some records may need to be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.
I will not keep personal information indefinitely without a legitimate reason.
15. Your rights
Depending on the circumstances and subject to certain legal exceptions, you have rights under UK data-protection law.
These may include the right to:
Ask for access to the personal information I hold about you.
Ask me to correct inaccurate or incomplete information.
Ask me to delete your personal information.
Ask me to restrict how your information is processed.
Object to certain processing, including direct marketing.
Request portability of certain personal information.
Withdraw consent where I am relying on consent as the lawful basis for processing.
These rights are not all absolute and may depend on the lawful basis for processing and the circumstances.
If you wish to exercise a right, please email:
I may need to ask you for information to verify your identity before releasing or changing personal information.
I will normally respond to a valid request within one month. In certain circumstances, this period may be extended where permitted by law.
You will not normally have to pay a fee to exercise your rights. A reasonable fee may be charged, or a request may be refused, where permitted by law, for example where a request is manifestly unfounded or excessive.
16. Complaints
If you have any concerns about how I use your personal information, please contact me first:
I will do my best to resolve your concern.
You also have the right to complain to the UK's data-protection regulator:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
The ICO can provide information about your data-protection rights and investigate complaints about the handling of personal information.
17. Third-party websites
My website may contain links to websites, services or platforms operated by third parties.
Those websites have their own privacy policies and terms. I am not responsible for the privacy practices or content of third-party websites.
I recommend checking the relevant privacy notice before providing personal information to another organisation.
18. Children's information
My services and Spirit Hub Circle are intended for adults.
I do not knowingly collect personal information from children under the age of 18 for the purpose of providing my services.
If you believe that a child has provided personal information to me, please contact me at Nikki@nikkileader.com so that I can investigate and take appropriate action.
19. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my business, the services I use, or applicable data-protection law.
The latest version will always be published on this page with the date it was last updated.
If a significant change affects how I use your personal information, I will provide additional information where required by law.
20. Contact
If you have any questions about this Privacy Policy or how I handle your personal information, please contact:
Nikki Leader
Email: Nikki@nikkileader.com
Website: www.nikkileader.com
Last updated: September 2026