Privacy policy

Last updated: 13 September 2026

Me (and You) is a written programme run by Alissa Lang Ltd. This page says what we collect, why, and what you can do about it. The short version: we collect as little as we can, we do not sell or share it, and every email we send has a way to stop them.

1. Who we are

Alissa Lang Ltd, a company registered in England and Wales, is the data controller for me-andyou.me. Contact details are at the end of this page.

2. What we collect, and when

• The Boundary check. It runs entirely in your browser. Your answers and your result are worked out on your device and are not sent to us. There is no email box on it.
• Buying the programme. When you buy, our payment provider (Stripe) collects your card details directly. We never see your card number. We receive your name, email address, what you bought and the amount, so we can send your access code and keep a record of your purchase.
• Using your access code. When you enter your code, it is checked against our record of your purchase, and the date is noted so we can see the programme is being used. Nothing about which module you read is sent to us.
• Sessions. If you take the guided version, sessions are booked through Cal.com, which collects your name, email address and the time you chose. Anything you share before, during or after a session is treated as confidential.
• Getting in touch. If you email us, we keep the correspondence for as long as we need it to reply and to keep a record of what was agreed.
• Technical data. Our hosting platform, Cloudflare, records basic technical information such as IP address and browser type to keep the site secure and running. We do not run analytics or advertising trackers. We keep anonymous counts of how often pages such as the programme gate are seen; those counts hold nothing about you.

3. Cookies and browser storage

This site sets no tracking cookies. It uses your browser’s local storage for three things only: your light or dark theme choice, which modules you have visited, and whether you have unlocked the programme with your access code. That information stays on your device, is never sent to us, and you can clear it at any time through your browser settings.

4. How we use your information

• To deliver the programme and give you access to it.
• To schedule and run your sessions, if you have them.
• To answer your questions and provide support.
• To keep the site secure and working.

Our lawful bases are the contract with you (the programme and sessions) and our legitimate interest in running the site safely.

5. Sensitive information and confidentiality

The programme asks you to think and write about your relationships, which is personal, and some readers are in difficult or unsafe situations. What you write in the worksheets stays with you; we never see it. Anything you share with us directly is treated as confidential and used only to support your work with us. Me (and You) is educational and developmental, not therapy, medical care or specialist domestic abuse support. We do not diagnose and we do not keep clinical records. If you are at risk, the National Domestic Abuse Helpline (0808 2000 247) or, in immediate danger, 999 are the right first calls.

6. Who we share it with

We do not sell, trade or rent your personal information. We share it only with the providers we use to run the programme, and only so they can do their part: Cloudflare (hosting, our contact database and sending email), Stripe (payments) and Cal.com (booking). Each keeps your data on the basis that it stays confidential. Your address lives in our own contact database, not in a third-party marketing platform.

7. How long we keep it

• Purchase records: for as long as the law requires us to keep accounting records, currently six years.
• Session and correspondence records: for as long as we are working together, then for a reasonable period afterwards in case you come back.
• Unsubscribed addresses are kept only on a suppression list so we do not email you again.

8. Security

We use appropriate measures to protect your data from unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is ever completely secure, but we take reasonable steps to safeguard it, and we keep the data we hold in the EU and UK.

9. Your rights

Under UK data protection law you have the right to access, correct or delete your personal data, to object to or restrict its processing, to take a copy of it, and to withdraw consent at any time. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page, and we will tell you about significant changes by email or a notice on the site.

Contact