Privacy Policy

1. Who is responsible

Zoée Hablot, who runs The Woman Warrior Blueprint™ and this website, is responsible for your personal data (the "controller"). Contact: contact@zoeehablot.com.

2. What we collect

When you sign up for the course

• your full name, email address and WhatsApp number (with its country code);
• your Instagram handle, if you give it;
• when you accepted our terms (and which version), and whether you opted in to marketing messages;
• the campaign link that brought you to us (UTM parameters), if any.

We keep this even if you don't finish paying, so we can answer questions about your order.

When you pay

Stripe handles the payment. We receive your name, email, the amount, payment status and Stripe's reference numbers — never your full card details.

When you use your student account

• your email address and sign-in activity;
• your progress through lessons, including where you stopped in a video;
• the answers you write in assignments and the coach's feedback;
• your course certificate (private unless you choose to make it public);
• which course offers were shown to you and whether you clicked them.

When you apply for coaching

Your name, your situation and goals as you describe them, your WhatsApp number, and your email if you choose to give it.

Technical data

Like every website, our hosting provider processes your IP address and browser details to deliver pages and protect the site from abuse.

3. Why we use it

• To provide what you bought — create your account, give you access, send sign-in codes and course emails, run your onboarding call and review your assignments (performing our contract with you).
• To contact you about your order or application by email or WhatsApp, for example if checkout didn't complete or to arrange your call (our legitimate interest in helping you, or steps you asked for before a contract).
• Training tips and offers by email and WhatsApp — only if you ticked the optional box. You can withdraw consent at any time in your account or by replying "stop".
• To keep the service secure and prevent fraud (legitimate interest).
• To keep accounting records of purchases (legal obligation).

4. Who processes it for us

We don't sell or rent your personal data. We use these service providers, who only process it on our behalf:

• Supabase — database and sign-in. Your data is stored on servers in the EU.
• Stripe — payments and refunds.
• Resend — delivery of our emails (sign-in codes, receipts, course emails).
• Cloudflare — website hosting and security.
• Calendly — booking your onboarding or coaching call, when you use the booking link.
• YouTube (Google) — course videos are hosted on YouTube and shown in an embedded player, so YouTube processes data when the player loads. The intro video on our home page only loads (from YouTube's privacy-enhanced domain) once you press play.
• WhatsApp (Meta) — when we message you on WhatsApp.

Some of these providers may process data outside the EU/UK. When they do, they rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.

5. Cookies

We only use cookies that are strictly necessary to keep you signed in to your student account. We don't use analytics or advertising cookies, so there is no cookie banner. Stripe's checkout page, Calendly and embedded YouTube players are run by those companies and may set their own cookies under their own policies.

6. How long we keep it

• Your account and course data: for as long as you have an account. Ask us and we'll delete it.
• Purchase records: as long as tax and accounting law requires.
• Signups that never became a purchase and coaching applications: only as long as they are useful to follow up on your request, then deleted.
• Marketing consent: until you withdraw it.

7. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. You can change your name, Instagram handle and marketing preferences yourself in your account. To use any of these rights, email contact@zoeehablot.com from the address you signed up with; we reply within one month.

If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to your local data protection authority (for example the ICO in the UK, or the supervisory authority in your EU country).

8. Security

Access to your data is restricted to what each part of the service needs, connections are encrypted, and sign-in uses one-time codes rather than passwords. No system is perfectly secure, but if a breach ever affected your data we would tell you as the law requires.

9. Age

The course is meant for adults. We don't knowingly collect data from children under 16.

10. Changes and contact

We'll update this policy when our practices change and show the date at the top. Questions? Email contact@zoeehablot.com or message us on WhatsApp. See also our Terms of Service.