Privacy Policy

Peppercord Limited. Last updated: 25 September 2026

1. Who we are

Peppercord Limited is the data controller responsible for your personal data across all Peppercord brands and services.

Company name: Peppercord Limited
Company number: 15954819
Registered address: Floor 5, Cubo Fenchurch House, 12 King Street, Nottingham, England, NG1 2AS
ICO registration number: ZB914095
Email: hello@notluck.co.uk

Peppercord Limited operates multiple consumer-facing brands, including but not limited to:

NotLuck (notluck.co.uk): CRM and software for businesses
The Sex Coach, formerly With Pleasure (leeanncordingley.co.uk): sex and intimacy coaching
All You Yoga (allyouyoga.co.uk): yoga and wellbeing
Network Pal (networkpal.co.uk): networking events on WhatsApp
Peppd (peppd.co.uk): smart print and business cards
30 Reasons Why (30reasonswhy.co.uk): personalised gifts
Sasha le Swank (sashaleswank.co.uk): burlesque performance
Bertiecord (bertiecord.co.uk): business mentoring
NotForgot (notforgot.app): time tracking for agencies
Go Parking (goparking.me): parking management

All brands listed above are owned and operated by Peppercord Limited. When you use any of these services, Peppercord Limited is the data controller for your personal data.

2. What data we collect

We may collect and process the following personal data:

2.1 Account and identity data

Full name
Email address
Password (stored securely using hashed encryption)
Organisation name and membership details

2.2 Billing and transaction data

Payment card details (processed securely by Stripe; we do not store full card numbers)
Billing address
Transaction history and invoices
Subscription status

2.3 Usage data

Pages visited and features used across our services
Device type, browser type, and operating system
IP address
Referring website or link

2.4 Communication data

Messages sent through contact forms
Support requests and correspondence
Email subscription preferences

2.5 Product-specific data

NotLuck: business contact details, and the customer and business data our clients store in the CRM we run for them
The Sex Coach: booking details, and anything you choose to share with Lee-ann in coaching, which may include information about your sexual health and sex life
All You Yoga: membership, booking and class preference data
Network Pal: your WhatsApp number, the city you ask about and your event preferences
Peppd: card designs, contact details shown on cards, and scan analytics
30 Reasons Why: the recipient’s name, your messages and delivery details
Sasha le Swank: booking enquiries from event organisers
Bertiecord: mentoring enquiries and session notes
NotForgot: the time entries and client names your team logs
Go Parking: parking permits, vehicle registrations and validation records

3. How we use your data

We process your personal data for the following purposes, under the legal bases indicated:

Purpose	Legal basis
To create and manage your account	Performance of a contract
To process payments and fulfil orders	Performance of a contract
To provide customer support	Performance of a contract
To send service-related communications (e.g. order confirmations, account updates)	Performance of a contract
To send marketing communications (where you have opted in)	Consent
To improve our services and fix bugs	Legitimate interest
To detect and prevent fraud	Legitimate interest
To comply with legal obligations (e.g. tax records)	Legal obligation
To coach you, where you share information about your sexual health or sex life (The Sex Coach)	Your explicit consent (UK GDPR Article 9(2)(a)), which you can withdraw at any time

4. Shared platforms

Our brands do not all run on the same system:

Peppd, 30 Reasons Why and Network Pal run on one shared platform operated by Peppercord Limited, hosted by Supabase in the EU. Where one of these products gives you an account, the same account may be used across them. Data that belongs to one product (for example your card designs) is only shown within that product.
NotLuck, The Sex Coach, All You Yoga, Sasha le Swank and Bertiecord use NotLuck CRM, our customer relationship system, to handle enquiries, bookings, payments and messages.
NotForgot and Go Parking run on their own systems.

If you want to know which of our brands hold data about you, contact us at hello@notluck.co.uk.

5. Payment processing

All payments are processed securely by Stripe (stripe.com). Depending on which brand you are purchasing from, you may see a different trading name on your bank or card statement. All payments are ultimately received by Peppercord Limited.

We do not store your full payment card details. Stripe handles all card data in compliance with PCI DSS (Payment Card Industry Data Security Standard).

We may share your personal data with the following categories of recipients:

Stripe: payment processing
HighLevel (LeadConnector): the platform behind NotLuck CRM, which stores contacts, bookings, forms and messages for several of our brands (servers in the United States)
Supabase: database hosting and authentication for Peppd, 30 Reasons Why and Network Pal (servers in the EU)
Netlify and Cloudflare: website hosting and security
Meta (WhatsApp): messages you send to Network Pal or to our brands on WhatsApp
Google: email and documents (Google Workspace), and website analytics where you have allowed it
PostHog and Hotjar: website analytics on some of our sites, where you have allowed it
AI service providers: to help write, summarise or answer messages in some products, for example suggested messages in 30 Reasons Why
Royal Mail / courier services: order fulfilment for physical products
Print partners: production of physical products (e.g. business cards, paper goods)
Email service providers: for transactional and marketing emails
HMRC: where required for tax compliance
Law enforcement or regulatory bodies: where required by law

We do not sell your personal data to third parties.

7. International transfers

Your data is primarily stored and processed within the European Economic Area (EEA) and the United Kingdom. Where data is transferred outside the UK or EEA (for example, if a service provider is based in the United States), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office.

8. How long we keep your data

We retain your personal data only for as long as necessary for the purposes set out in this policy:

Data type	Retention period
Account data	Duration of your account, plus 12 months after deletion
Transaction records	7 years (HMRC requirement)
Marketing consent records	Duration of consent, plus 12 months
Support correspondence	24 months from resolution
Usage/analytics data	26 months

9. Your rights

Under UK data protection law, you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data (subject to legal obligations).
Right to restrict processing: request that we limit how we use your data.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@notluck.co.uk. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

10. Cookies

We use cookies and similar technologies on our websites. For full details, please see our Cookie Policy.

11. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at hello@notluck.co.uk.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by placing a notice on our website. The “last updated” date at the top of this policy indicates when it was last revised.

13. Contact us

If you have any questions about this privacy policy or how we handle your data:

Email: hello@notluck.co.uk
Post: Peppercord Limited, Floor 5, Cubo Fenchurch House, 12 King Street, Nottingham, England, NG1 2AS