Last updated: 15 October 2026
This policy explains what personal information XSKOOL collects, why we collect it, and your rights. We keep it short and plain on purpose.
Who is responsible for your data
The data controller is Dara Guilfoyle, trading as XSKOOL, [BUSINESS ADDRESS TO BE ADDED]. For any privacy question or request, email daraguilfoyle@gmail.com.
What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Name, email, phone, billing and delivery address, order details | To process and deliver your order, arrange sessions, send order emails and handle returns | Performance of a contract |
| Payment information | To take payment. Card details are entered directly with Stripe and are never stored by us | Performance of a contract |
| Email address and interests when you sign up to our list, free course or early access | To send the course, news and occasional offers from XSKOOL | Your consent, which you can withdraw at any time |
| Information you share in applications or sessions | To prepare for and deliver your session or mentoring | Performance of a contract, and your explicit consent for anything you choose to share about your health or wellbeing |
| Order and accounting records | To keep accounts and meet tax obligations | Legal obligation |
| Technical data such as IP address, browser and approximate location | To keep the site secure, show prices in your local currency and make the site work properly | Our legitimate interests |
Who we share it with
We never sell your information. We share it only with the service providers we need to run XSKOOL, who process it on our instructions:
- Stripe, for payments and fraud prevention
- Hostinger, which hosts this website
- An Post and other carriers, to deliver your order
- Zoom, for online sessions
- Any email service we use to send our newsletter and course (we will update this list when one is added)
- Our accountant and the tax authorities (HMRC, and the Revenue Commissioners in Ireland where relevant), where required by law
Some of these providers may process data outside the European Economic Area. Where they do, they use safeguards approved under EU law, such as the European Commission’s standard contractual clauses or adequacy decisions.
How long we keep it
- Order and accounting records: 6 years, as required by tax law
- Mailing list details: until you unsubscribe or ask us to delete them
- Session notes and applications: for as long as we work together, and up to 2 years afterwards, unless you ask us to delete them sooner
Cookies
We use only the cookies needed to run the site: for example, to keep items in your basket, remember your currency, keep you logged in and protect the site from abuse. Stripe also uses cookies at checkout to prevent fraud. We do not use advertising cookies. If we add analytics or marketing cookies in future, we will ask for your consent first.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to how we use it, receive a copy in a portable format, and withdraw your consent at any time. Every email we send includes an unsubscribe link. To use any of these rights, email us. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office in the UK (ico.org.uk), or to the data protection authority where you live, such as the Data Protection Commission in Ireland (dataprotection.ie).
Children
Our shop and services are intended for adults. We do not knowingly collect information from anyone under 18.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.