Don’t Waste Your Life Away (“DWYLA”) is a brand operated by Icons Of Impact FZ-LLC, a Free Zone Limited Liability Company registered with the Ras Al Khaimah Economic Zone Authority (RAKEZ) under registration number 0000004097282 (“we”, “us”, “our”).

Icons Of Impact FZ-LLC is the seller of the 15-Day Journaling Challenge and the controller of the personal data described in this policy, except where another organisation acts as an independent controller, as explained below.

Registered address:

CWEP2521, Compass Building,

Al Shohada Road, Al Hamra Industrial Zone-FZ,

Ras Al Khaimah, United Arab Emirates.

This address does not accept ordinary post or couriers, so please contact us by email.

Privacy contact: support@dontwasteyourlifeaway.com

This policy explains how we process personal data when you:

• visit dontwasteyourlifeaway.com

• sign up for a free resource, such as our weekly planner

• join the waitlist for the 15-Day Journaling Challenge (the “Challenge”)

• buy or use the Challenge

• receive our emails

• contact us

It applies under the laws that protect your data where you live, including the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Joining the waitlist does not place an order or take payment. Reading this policy does not give consent to cookies or other optional processing.

Depending on how you interact with us, we process:

• Contact and account information: name, email address, account identifiers and login records.

• Order and payment records: the product purchased, order and transaction identifiers, price, currency, payment status, refunds and disputes, and billing details such as your billing name and country. Payments are processed by Stripe. We never receive or store your full card number or card security code. Stripe shares limited details with us, such as your card type, the last four digits of your card and its expiry date.

• Learning activity: enrolment, access dates and course progress, where our learning platform records them.

• Communications and preferences: your enquiries and support messages, and your email and cookie preferences, including records of consent, opt-outs and unsubscribes.

• Optional shared reflections: anything you choose to share in the member area, where that option is available.

• Technical and usage information: IP address, approximate location inferred from it, device and browser information, referring pages, visit times, security logs and interactions with our website or emails. Optional analytics and email tracking depend on the technologies enabled and the choices you make.

We collect this information in three ways:

• from you directly

• automatically through our platforms

• from providers involved in your purchase or use, such as Stripe and our learning platform

Giving us the data we need to process your order and create your account is necessary to enter and perform the contract. Without it we cannot provide the Challenge. Everything else is optional.

You do not need to send us your private journal entries, health information or other sensitive information to take the Challenge. Entries you keep on your own paper or device are not collected by us.

Please avoid sending us sensitive information or sharing it in the member area. If you choose to share, other participants may see it, and we cannot guarantee that every participant will keep it confidential.

If any activity ever needed sensitive information, we would explain it separately and identify a proper legal basis, including explicit consent where the law requires it. Accepting our Terms is not consent to process sensitive personal data.

We use personal data only for the purposes below, and only on a basis the applicable law permits. Under the GDPR and UK GDPR, the bases are:

• Sending you a free resource you request.

  • Information used: name and email address

  • Basis: performance of a contract, or steps you ask us to take

• Sending you our DWYLA newsletter after you request a free resource.

  • Information used: name, email address and consent records

  • Basis: consent, which you give when you sign up and can withdraw at any time

• Processing orders and payments, giving you access to the Challenge and handling support.

  • Information used: contact, account, order, payment and learning information

  • Basis: performance of a contract

• Sending waitlist announcements.

  • Information used: contact details, preferences and consent records

  • Basis: consent

• Sending necessary access, security and service messages.

  • Information used: contact, account and order information

  • Basis: contract, and our legitimate interests in reliable service and security

• Sending Challenge reminders, prompts and check-ins.

  • Information used: name, email address and course progress

  • Basis: performance of a contract, and our legitimate interest in helping you complete the Challenge

• Sending you the Challenge newsletter and the DWYLA newsletter after you buy.

  • Information used: name and email address

  • Basis: our legitimate interests in keeping customers informed about related content and products, and the existing-customer exception in e-marketing law (such as regulation 22 of the UK Privacy and Electronic Communications Regulations and its EU equivalents)

  • We give you the chance to opt out when we collect your email address and in every newsletter email. We rely on consent instead where the law requires it.

• Resolving enquiries, protecting accounts, preventing fraud and handling claims.

  • Information used: support records, transaction records and security logs

  • Basis: contract, legal obligation or our legitimate interests in protecting our business and customers, depending on the purpose

• Keeping accounting and other legally required records.

  • Information used: transaction and business records

  • Basis: legal obligation

• Measuring website or email engagement through optional tracking.

  • Information used: technical and engagement information

  • Basis: consent where required, otherwise another basis the law permits

Where we rely on legitimate interests, we have weighed them against your rights and reasonable expectations. You can ask us for details of that assessment, and you can object (see section 12).

For processing under UAE data protection law, we rely on consent or a relevant exception, such as processing needed to perform a contract or meet a legal obligation.

We do not make solely automated decisions that have legal or similarly significant effects on you.

After payment, we automatically use your email address and transaction details to:

• create or find your contact record

• enrol you in the Challenge

• send your access instructions

• schedule Challenge reminders

• add you to our newsletters, as explained in section 6

Waitlist.

If you join the waitlist, we use your details to send launch and early-access updates about the Challenge.

Free resources.

If you sign up for a free resource, we use your name and email address to send it to you. Where you agree when signing up, we also add you to our newsletter. You can unsubscribe at any time using the link in every email.

Challenge and service emails.

When you buy the Challenge, we use your name, email address and course progress to send emails that are part of the service. These include:

• access instructions

• reminders to start or continue

• prompts linked to the lessons

• check-ins if you haven’t finished

• account, security and legal notices

We send these to perform our contract with you, and on the basis of our legitimate interest in helping you complete the Challenge. You can ask us to stop non-essential reminders and check-ins by emailing support@dontwasteyourlifeaway.com.

Newsletters.

When you buy the Challenge, we also add you to:

• the Challenge newsletter: tips, updates and further content connected to the Challenge

• the DWYLA newsletter: journaling and intentional-living content, and news about our other products and offers

We rely on our legitimate interests and the existing-customer exception in e-marketing law. We tell you about this when we collect your email address, and you can opt out at that time and in every newsletter email. We rely on consent instead where the law requires it.

Unsubscribing.

You can unsubscribe from either newsletter using the link in any newsletter email, or by emailing support@dontwasteyourlifeaway.com. We keep a limited suppression record so we can respect your choice. Unsubscribing does not affect your access to the Challenge, and it does not stop essential account, access or legal messages. We don’t use Challenge or service emails to get around your marketing choices.

Email tracking.

Where email tracking is enabled, it may record opens and link clicks, and progress-based reminders may use your course progress. We use this only as the law permits and ask for consent where required.

We share only the information reasonably needed for each purpose, with:

• Stripe processes your payments, refunds and payment disputes on our behalf. Stripe also acts as an independent controller for some purposes, such as fraud prevention, identity verification and meeting its own legal and regulatory obligations. For those purposes, its own privacy policy applies (https://stripe.com/privacy).

• Systeme.io provides our website and form hosting, checkout pages, contact management, email delivery, course accounts and the member portal. It processes data on our behalf.

• Tally provides the forms we use when you sign up for a free resource. It collects your name and email address and processes them on our behalf. We then transfer them to Systeme.io to send you the resource and our emails.

• Automation, infrastructure and security providers, including n8n, which we use to connect payment, contact and enrolment systems. These also include providers that support hosting, storage and email. They process data on our behalf.

• Cookie and measurement providers: Cookiebot for cookie consent, and any analytics or similar tools actually enabled on our pages, subject to your choices in section 8.

• Professional advisers and authorities, where needed for accounting, legal advice, legal obligations, disputes, fraud prevention or to protect rights and safety.

• A business successor, where needed for a business transaction, under appropriate confidentiality and data protection arrangements.

We do not sell or rent your personal data, and we do not share it for third-party targeted advertising. We do not give your contact details to unrelated organisations for their own direct marketing without your permission.

Our website uses cookies and similar technologies for essential functions such as security, sessions, checkout and remembering your consent choices. Optional technologies may measure usage or support marketing. We use Cookiebot to manage your cookie choices.

Where the law requires consent, including under the ePrivacy rules in the EU and the UK:

• optional technologies stay off until you opt in

• you can refuse them without losing access to the site’s essential functions

• you can change or withdraw your choice at any time through the cookie settings control on our website

The cookie declaration available through that control lists the technologies actually used, their providers, purposes and durations, and should be read with this policy.

Your browser settings can also block or delete cookies, although blocking essential cookies may affect how the site works.

Sensitive journal content, payment credentials and private form entries are never collected through optional tracking.

We are established in the UAE. Our providers and their approved subprocessors may process information in other countries, including the European Union and the United States. Using our services may therefore involve transferring your information to the UAE and to the countries where those providers operate.

Transfers must meet the law that applies to the information:

• Where EU or UK law requires a safeguard for a transfer, we or our providers rely on appropriate mechanisms, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum, with extra measures where necessary.

• Transfers from the UAE must also use a mechanism permitted by UAE rules.

You can ask us for a copy of the safeguards that apply to your data, and for details of the countries involved, by emailing support@dontwasteyourlifeaway.com.

We retain data for the following periods or according to the following criteria:

• Account and learning records: while needed to provide your agreed access and related support; after access ends, only for applicable recordkeeping, security or claims purposes.

• Free resource signups: until you unsubscribe, or until the information is no longer needed to send the resource.

• Order, invoice, tax and refund records: for the statutory retention period applicable to each record, and longer only where necessary for a live dispute or another lawful reason.

• Waitlist information: while the requested launch updates remain relevant, unless you unsubscribe sooner. Ongoing newsletters depend on a separate subscription.

• Marketing records: while your subscription is active and necessary for the described communications; limited consent and suppression records are retained as needed to demonstrate and respect your choices.

• Support and dispute records: until the matter is resolved and for the relevant period needed for follow-up, legal obligations or claims.

• Cookies and optional measurement records: for the durations stated in the relevant cookie declaration or tracking notice, subject to earlier deletion where applicable.

We delete or anonymise information when it is no longer needed. Backups are removed through the relevant backup lifecycle and are not used to restore deleted information to active use without a lawful reason.

We use proportionate technical and organisational safeguards to protect personal data. These include access controls and appropriate arrangements with our providers. Payments are processed by Stripe, which is certified to the PCI Data Security Standard.

No system is completely secure. If a personal data breach occurs, we will investigate and notify affected people and authorities where the law requires.

Depending on the law that applies to you, including the GDPR and UK GDPR, you have the right to:

• access your personal data and get a copy

• have inaccurate data corrected

• have your data deleted

• restrict how we use your data

• receive your data in a portable format, where it applies

• object to processing based on our legitimate interests, and to direct marketing at any time (an objection to direct marketing is always honoured)

• withdraw consent at any time, where we rely on consent. Withdrawing consent does not affect processing carried out lawfully before you withdrew.

Some records must be kept for legal obligations or claims. If you live in a US state with a privacy law, you may have similar rights, which you can exercise in the same way.

To exercise your rights, email support@dontwasteyourlifeaway.com. We may ask for reasonable information to verify your identity and find your records.

We respond within the legal deadline, which is normally one month under the GDPR and UK GDPR, and we will explain any permitted extension. Requests are normally free, subject to lawful exceptions.

You have the right to complain to a data protection authority, without contacting us first. This includes:

• the supervisory authority in the EU or EEA country where you live or work

• the UK Information Commissioner’s Office (ico.org.uk)

• the UAE Data Office or other relevant UAE authority

For data Stripe controls independently, you can also contact Stripe using the details in its privacy policy (https://stripe.com/privacy).

The Challenge and our free resources are for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not add anyone under 18 to our email lists. If you believe a child’s information has been given to us, email support@dontwasteyourlifeaway.com and we will delete it.

Testimonials.

We only publish a testimonial with your separate permission. Sharing feedback with us privately does not give that permission on its own. We also ask before publishing any detail that could identify you, including your first name or initials.

Your stories and contributions.

We will never use your community posts, journal entries, image or voice in our marketing without your separate permission. We may share general, anonymous themes drawn from many participants, as long as they cannot be traced back to you or your personal story.

Changing your mind.

You can withdraw your permission at any time by emailing support@dontwasteyourlifeaway.com. We will stop using your testimonial or contribution in new materials. We can’t always remove content that has already been published or shared.

Other websites and independently run platforms have their own privacy practices, so please read their notices.

We may update this Privacy Policy from time to time to reflect changes to our website, products, technology, service providers, business practices or applicable laws.

When we make changes, we will update the "Last updated" date at the top of this page.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

This Privacy Policy is governed by the applicable federal laws of the United Arab Emirates and, where relevant, the laws and regulations applicable in the Emirate of Ras Al Khaimah.

If you are located outside the United Arab Emirates, you may also have mandatory rights under the data protection laws applicable in your country of residence.

If you have any questions about this Privacy Policy, how we process your personal data, or wish to exercise a privacy right, contact:

Icons of Impact FZ-LLC

Trading as Don't Waste Your Life Away (DWYLA)

Email: support@dontwasteyourlifeaway.com

Registered address:

CWEP2521, Compass Building

Al Shohada Road

Al Hamra Industrial Zone-FZ

Ras Al Khaimah

United Arab Emirates

The registered address does not accept post or couriers.