Privacy
Who we are
This site is operated by Into The Nest Ltd, a company registered in England and Wales. Company number 15453069. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
What is collected
- Name, email address and your message, when you use the contact form or write to us
- Your email address, when you ask for the free Module 1 sample
- Your name, email address and country, and a record of what you bought, when you buy the course
- The photo and notes you send us, if you ask for your Room Read
- When you open a form, the order page or the thank-you page: the page address, where you came from and any campaign details in the link
- If you accept the advertising cookie, the information described under "Advertising cookie" below
We do not see or store your full card number. Stripe handles your card details.
How it is used
Contact form and email: to reply to you. Your details are not added to any list and are not shared for third-party marketing. We do this because we have a legitimate interest in answering people who write to us.
Module 1 sample: to send you Module 1 and two short emails about the course, as the sign-up page says. Every email has an unsubscribe link. Your address is not shared for third-party marketing. We do this because you asked for it on a page that says what you will get, and you can withdraw that at any time by unsubscribing.
The Heartsease letter is separate and optional. If you ask to receive it, that subscription is handled by Substack under its own terms.
Buying the course: to take payment, give you access, send your access email, deal with any cancellation or refund, and keep the records the law requires. We need these details to carry out our contract with you and to meet our legal duties.
Room Read
Room Read. If you send us a photo and notes for your Room Read, we use them to prepare our reply to you. They are held in our email account, provided by Google Workspace, and we use an AI assistant from Anthropic to help sort incoming email, so it may process your message. We delete them within 12 months of our reply, or sooner if you ask. We do not publish them or use them in marketing unless you agree in writing first. Please leave people out of the photo.
Advertising cookie
Our course pages, order page and thank-you page can use the Meta pixel, a piece of code from Meta that helps us see whether our adverts lead to sign-ups and purchases, and helps Meta choose who sees them. It loads only if you press Accept on the notice on our sales and sample pages. The other pages that use it follow that answer. If you press Decline, or press nothing, it does not load and the pages work the same.
If you accept, the pixel sets cookies in your browser and sends Meta which of those pages you view and whether you signed up for the sample or bought the course, with the course price, along with details such as your IP address and browser. Meta may connect this with your Meta account if you have one, and uses it under its own privacy policy. We do this only with your consent. You can change your mind at any time through the "Cookie choices" link at the foot of our sales and sample pages, and on this page.
We keep your choice in a small cookie of our own for up to 12 months, so that we do not ask you again on every page.
Where it is processed
- The site is hosted on Cloudflare Pages, with DNS managed by Cloudflare. Cloudflare sets security cookies to tell people from bots, on our pages and inside the forms and video players. Some last 30 minutes and one can last up to a year.
- The contact form, the sample sign-up form, the sample emails, the access email, the order page and the related contact records are processed by GoHighLevel, on an account provided through Communitee.ai. When the contact or sample form is shown, GoHighLevel loads it from its own servers and cloud storage, with a font from Bunny Fonts and a security check from Cloudflare.
- Payments are processed by Stripe, and by the wallet or payment service you choose at checkout. The order page loads Stripe's and Google Pay's code, which set their own cookies.
- Course videos are played by Vimeo, with its do-not-track setting on. The video on the sales page loads only when you press play. A lesson video on the course page loads when you open that lesson. The Module 1 lessons on the sample welcome page load when you open that page or as you scroll towards them. In both cases this happens before you press play, and the player sets Cloudflare security cookies.
- The course page remembers which lessons you have completed and where you stopped, in your browser's local storage on your own device. It is not sent to us, and you can clear it in your browser.
- Email to and from us is held in Google Workspace. An AI assistant from Anthropic reads incoming email to sort it and draft replies for us.
- Emails we send through GoHighLevel, including the access email and the sample emails, record when they are opened and which links are clicked, and the links in them pass through the servers of GoHighLevel's email provider.
- If you accept the advertising cookie, Meta receives the information described above.
Our pages on intothenest.net run no analytics or advertising scripts of our own, apart from the Meta pixel if you accept it. The forms, the order page and the thank-you page run on GoHighLevel, whose software records visits to them, including the page address, where you came from, any campaign details in the link and a session identifier. On the order and thank-you pages it sets a cookie that lasts up to 12 months and Cloudflare measures page performance, and on the order page Stripe runs its own payment and fraud checks.
Apart from that font inside the forms, our pages on intothenest.net load no third-party fonts. The order and thank-you pages, at checkout.intothenest.net, are GoHighLevel pages and load a font from Google Fonts.
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the safeguards the law provides for those transfers.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of your data, you can object to how it is used, and you can withdraw your consent at any time. Requests to wr@intothenest.net.
If you are unhappy with how we have handled your data, you can make a data protection complaint to us at the same address. We acknowledge complaints within 30 days. You can also complain to the ICO.
Retention
Contact-form messages and correspondence are deleted once the matter is closed, and no later than 12 months after the last contact, unless an engagement follows.
Sample sign-ups: your email address and the visit details recorded with it are deleted within 12 months of the last email we send you. If you unsubscribe, we keep only the record needed to make sure we do not email you again, for as long as it is needed for that.
Room Read photos and notes are deleted within 12 months of our reply, or sooner if you ask.
Records of paid engagements and course purchases are kept for six years after the end of the financial year in which the engagement ended or the purchase was made, as UK tax and company law requires, and then deleted. Emails about refunds and cancellations are kept with them.