Last updated: 5 November 2026
Project P with Lolita Reid respects your privacy and is committed to handling your personal information responsibly, transparently and in accordance with applicable data protection law.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we may share it with and the rights available to you.
It applies when you visit our website, contact us, subscribe to our communications, download resources, book or participate in our services, attend events or workshops, join our communities, or otherwise interact with Project P.
1. Who Is Responsible for Your Personal Information?
Project P with Lolita Reid is the data controller responsible for the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for its own services.
Business name: Project P with Lolita Reid
Organisation number: 934 412 362
Registered address: Skalpebekken 2, 3050 Mjøndalen, Norway
Email: info@lolitareid.com
Phone: +47 40581644
If you have questions about this Privacy Policy or how your personal information is handled, please contact us using the details above.
2. Personal Information We May Collect
The information we collect depends on how you interact with Project P.
It may include:
Identity and Contact Information
This may include your:
- name;
- email address;
- telephone number;
- business name;
- job title or professional role; and
- other contact information you choose to provide.
Enquiry and Booking Information
When you contact us or book a service, we may collect:
- information contained in your enquiry;
- booking details;
- appointment information;
- information about your business;
- information about the reason for your enquiry or the support you are looking for; and
- communications between you and Project P.
Client and Coaching Information
If you become a client, we may process information relevant to providing coaching and related services, including:
- business information;
- business goals and challenges;
- coaching notes;
- responses to questionnaires, assessments or forms;
- action plans;
- meeting notes and summaries;
- documents you choose to share with us; and
- communications relating to our work together.
Business coaching conversations can sometimes include personal information because the person running the business and the business itself are often closely connected. We ask clients to avoid providing sensitive personal information that is not necessary for the coaching relationship.
Payment and Transaction Information
When you purchase a service, we may process information relating to your transaction, such as:
the service purchased;
price;
payment status;
transaction date; and
information required for accounting and business records.
Payments may be processed through Stripe or Revolut.
We do not generally receive or store your complete payment card details when payment is processed directly by a payment provider.
Marketing Information
If you subscribe to The Clarity Boost or other Project P communications, we may process:
your name;
email address;
subscription status;
consent information; and
information relating to your interaction with our communications where the relevant technology provides this information.
Website and Technical Information
When you visit our website, certain technical information may be processed automatically. Depending on your browser, device and the technologies operating on the website, this may include:
IP address;
browser and device information;
cookie information;
technical logs; and
information required to operate and secure the website.
Further information about cookies is provided below.
3. How We Collect Personal Information
We may collect personal information:
- directly from you when you contact us;
- when you complete a form;
- when you book an appointment;
- when you purchase or participate in a service;
- during coaching sessions, workshops or programmes;
- when you download a resource;
- when you subscribe to our communications;
- when you participate in a Project P community;
- through our website and its technical systems;
- when you communicate with us by email or social media;
- when you provide a testimonial or recommendation; and
- through service providers we use to operate Project P.
We may also receive information that you have chosen to make publicly available, for example through a LinkedIn recommendation or public social media interaction.
4. Why We Process Personal Information and Our Legal Bases
Under applicable data protection law, we must have a lawful basis for processing personal information.
The appropriate legal basis depends on why the information is being processed.
To Respond to Enquiries and Take Steps Before Providing a Service
We process information you provide when enquiring about or discussing our services so that we can respond, understand your requirements and take steps towards entering into an agreement with you.
The legal basis will normally be taking steps at your request before entering into a contract or, where appropriate, our legitimate interest in responding to business enquiries.
To Provide Coaching and Other Services
We process client information to arrange and provide coaching, programmes, workshops, communities and other services, communicate with clients and administer the client relationship.
The legal basis will normally be the performance of our contract with you or taking steps at your request before entering into a contract.
Where the client is a business rather than the individual concerned, some processing may instead be based on our legitimate interests in delivering and administering the business relationship.
To Process Payments and Maintain Business Records
We process transaction and payment-related information to receive payments, manage accounts and maintain appropriate financial and business records.
The legal bases may include performance of a contract and compliance with legal obligations, including applicable accounting and record-keeping requirements.
To Send Marketing Communications
Where required, we rely on your consent to send newsletters and other direct electronic marketing communications.
You may withdraw your consent or unsubscribe from marketing communications at any time.
To Operate and Protect Our Website and Business
We may process limited technical and administrative information where necessary to operate, maintain and secure our website, systems and business.
The legal basis may be our legitimate interests in operating and protecting Project P, provided those interests are not overridden by your rights and interests.
Where You Give Specific Consent
For some activities, including certain recordings, testimonials, marketing communications or optional technologies, we may ask for your consent.
Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Enquiries, Forms and Bookings
Project P uses HubSpot and Google services to manage enquiries, forms, appointments and aspects of client administration.
The information requested may include your name, email address, telephone number and information you voluntarily provide about yourself or your business.
Business Clarity Conversations may be booked using HubSpot. Other appointments may be scheduled using Google appointment scheduling or related Google services.
Information submitted through these systems is used to respond to your request, manage the appointment and, where appropriate, provide the requested service.
6. Email, Newsletters and Free Resources
Project P uses HubSpot for The Clarity Boost and other marketing communications and Google Workspace/Gmail for ordinary business communications.
When you request a free resource, we may ask for your email address so that we can provide the resource.
Where you are also invited to join our newsletter or receive marketing communications, we will ask for the appropriate agreement or consent.
Receiving marketing communications should be presented separately from receiving a free resource where separate consent is legally required.
You can unsubscribe from marketing emails at any time using the unsubscribe facility provided in the email or by contacting:
info@lolitareid.com
We may retain limited information about an unsubscribe request where necessary to ensure that your marketing preference continues to be respected.
7. Payments
Payments for Project P services may be processed using Stripe or Revolut.
These providers process information necessary to complete the transaction and may act as independent controllers or processors for particular processing activities under their own privacy arrangements.
Project P normally receives transaction information necessary to confirm and administer your purchase rather than your complete payment card details.
We may retain invoices and transaction records for the period required by applicable accounting, tax and other legal obligations.
8. Coaching Notes, Client Documents and Business Records
Project P may store client-related information using Google Workspace services such as Google Drive, Docs and Sheets and may also use Notion for appropriate business and client notes.
We aim to collect and retain only information reasonably necessary for the coaching relationship, business administration and applicable legal obligations.
Please avoid sending highly sensitive personal information unless it is genuinely necessary and we have agreed that it is appropriate to do so.
9. Online Meetings and Recordings
Project P may use Google Meet, Zoom and Restream for online meetings, coaching sessions, workshops, events and broadcasts.
Some sessions or events may be recorded.
Where a meeting involving participants is to be recorded, we will inform participants and obtain consent or otherwise establish an appropriate legal basis where required before recording.
Recordings may include your name, image, voice, contributions and other information you choose to share during the session.
The purpose of a recording, how it will be used and who will have access to it may vary depending on the service or event and will be communicated where appropriate.
We do not treat participation in an ordinary private coaching session as automatic permission to use recordings publicly or for marketing.
10. AI-Assisted Tools
Project P uses artificial intelligence and AI-assisted technology as part of certain administrative and service-delivery processes.
These tools may assist with activities such as:
- preparing meeting notes;
- summarising coaching discussions;
- organising information;
- preparing draft action plans;
- reviewing and structuring client-related information;
- assisting with administrative communications; and
- supporting internal business processes.
Tools used for these purposes may include services provided through Google Gemini, Google NotebookLM, ChatGPT and Sintra.
Where personal information is processed using AI-assisted tools, we aim to limit the information provided to what is reasonably necessary for the relevant purpose.
Where identification is unnecessary, we may remove, reduce or avoid including identifying information.
AI-assisted outputs may be reviewed and used as supporting material. Project P does not rely on AI systems to make solely automated decisions that produce legal or similarly significant effects concerning clients.
We remain responsible for our use of personal information in connection with the services we provide and aim to use AI-assisted technology consistently with applicable data protection requirements.
Clients are encouraged not to provide unnecessary sensitive personal information during coaching or in materials submitted to Project P.
11. Communities and Group Programmes
Project P no longer offers a membership community. This section explains considerations relating to information shared in previous group programmes.
Platform providers used for previous group programmes may have processed account details, profile information, participation and activity according to the functionality of their platforms.
Other members may be able to see information that you choose to make visible or share within a community.
You should therefore avoid posting confidential, sensitive or commercially sensitive information in a group environment unless you are comfortable sharing it with the relevant participants.
Project P cannot control how another participant independently handles information that you voluntarily share with them.
12. Testimonials and Recommendations
Project P may display testimonials, recommendations and client feedback.
This may include recommendations that clients have chosen to publish through LinkedIn or feedback provided directly to Project P.
Where we want to use identifiable client feedback in Project P marketing beyond the context in which it was originally provided, we will obtain appropriate permission where required.
Permission to use a testimonial can be withdrawn for future use by contacting us, subject to any lawful limitations concerning materials already published or distributed.
13. Website Hosting, Cookies and Embedded Services
Our website is hosted through ChatGPT Sites. For our business in Norway, the hosting provider is OpenAI Ireland Limited. OpenAI processes hosted website data on our behalf under the ChatGPT Sites Data Processing Addendum. Hosting can involve technical information such as IP addresses, browser and device information, requests and usage logs. Optional embedded services are described separately below.
Optional embedded services and website analytics stay off until you allow their purpose in . You can reject all optional services, choose individual services or change your choice at any time. Refusing does not prevent you from reading the website or contacting us by email.
- Google enquiry form: The enquiry fields are displayed directly on our website. What you type is not sent to Google merely by completing the fields. When you choose Send My Enquiry and have allowed the Google enquiry service, Google Apps Script sends your name, email address and message to our Google Workspace mailbox. Google receives connection and device information when the sending service loads. We use the submitted details to respond to your enquiry. The enquiry is retained in our mailbox; this form does not create a separate spreadsheet, enquiry database or CRM record. Please avoid including sensitive personal information. The handler temporarily keeps a random form token and a salted hash of the sender’s email address for up to one hour to prevent duplicate submissions and limit abuse. It also keeps operational send counts. Google may maintain technical service and security records.
- HubSpot audit form: HubSpot provides the embedded LinkedIn audit form and processes the information you submit. Its form infrastructure uses cookies and may recognise returning browsers. In a pre-launch test, security cookies named __cf_bm were observed on hsforms.net and hsforms.com, with an expiry of approximately 30 minutes. This observation is not an exhaustive list across devices or future provider changes.
- YouTube videos: videos use the youtube-nocookie.com player, which is blocked until you allow video content. Once enabled, Google receives technical information and may use browser storage and cookies, including when you play the video. Privacy-enhanced mode does not mean no personal information is processed.
Our preference control stores a record named project_p_privacy_v1 in your browser’s local storage for up to 180 days, or until you clear it or the notice version changes. The record contains your choices, the notice version, a random reference and the choice time. It is used to remember and apply your preferences, not for advertising. If browser storage is unavailable, the choice applies only while the page remains open.
Turning off a previously allowed service reloads the page to stop its embedded content. Save any unfinished form first. Withdrawal stops future loading by this website but cannot undo information already sent or delete cookies held on a provider’s domain. You can clear those through your browser settings.
Links to external booking, payment, newsletter and social-media pages do not embed those services here. If you follow a link, the destination processes information under its own privacy arrangements. Cookie choices are separate from signing up to the newsletter and from the legal basis for handling your enquiry or purchase.
Provider information: Google Privacy Policy, HubSpot Privacy Policy, HubSpot cookie information.
14. Search Performance and Analytics
We use Google Search Console to see how our website performs in Google Search. If you allow Website analytics in , we also use Google Analytics to understand how people find and use the site. Your consent is the basis for this measurement, and you can withdraw it at any time in the same settings.
Google Analytics processes information such as pages viewed, visit timing, referring sites, browser and device information, and approximate location. It uses first-party cookies named _ga and _ga_ followed by a measurement identifier to distinguish browsers and sessions. We configure these cookies to expire after up to 180 days. We use Analytics for website measurement and disable advertising personalisation. Read how Google uses information from sites that use its services.
15. Social Media
Project P maintains a presence on platforms including:
LinkedIn;
Facebook;
Instagram;
YouTube;
TikTok.
When you interact with Project P through a social media platform, both Project P and the platform provider may process information relating to that interaction.
The platform provider’s own processing is governed by its privacy terms and policies.
Information you make publicly available through social media may be visible to Project P and other users of those services.
16. Service Providers and Other Recipients
We use third-party providers to operate Project P and deliver our services.
Depending on how you interact with us, personal information may be processed through providers that support:
- website hosting and website functionality;
CRM and email marketing;
email and productivity services;
forms and appointment scheduling;
video conferencing and online events;
payments;
file and document storage;
community services;
social media;
AI-assisted administrative and productivity services; and
other necessary business technology.
Current providers may include hosting infrastructure supplied through ChatGPT Sites, HubSpot, Google, Stripe, Revolut, Zoom, Restream, Notion, OpenAI/ChatGPT, Sintra, LinkedIn, Meta, YouTube and TikTok.
We do not sell your personal information to third parties.
Where a provider processes personal information on our behalf, we seek to use appropriate providers and contractual or other safeguards as required by applicable data protection law.
Some providers may also act as independent data controllers for aspects of their services.
17. International Transfers
Project P is based in Norway, which is part of the European Economic Area for data protection purposes.
Some of the technology providers we use operate internationally. As a result, personal information may in some circumstances be processed or made accessible outside Norway or the EEA.
Where GDPR requirements apply to an international transfer of personal information, we seek to rely on an appropriate transfer mechanism or safeguard as required by law. Depending on the provider and destination, this may include an adequacy decision or approved contractual safeguards.
Individual service providers may also maintain their own international data-transfer arrangements.
18. How Long We Keep Personal Information
We keep personal information for as long as we need it for the purpose it was collected. We review it regularly and remove what we no longer need.
- Closed enquiries: where an enquiry does not become client work, we delete it within 12 months of the last meaningful exchange, once the enquiry is closed. We remove it earlier if it is no longer needed.
- Private session recordings and raw transcripts: we delete these within 90 days of the session. When we share a recording, we tell you the download deadline. Any justified extension is agreed before the deadline and given a new deletion date. Public workshop media and testimonials are covered by separate permissions.
- Client working files: we keep coaching notes, summaries and audit working files while delivering the service, review them when the engagement ends and delete unnecessary material. We delete remaining working copies within 12 months of completion unless a specific continuing purpose requires them.
- Newsletter details: we keep these while you remain subscribed. We stop marketing when you unsubscribe and remove unnecessary profile information within 30 days, unless it is needed for another service. We retain only the minimum information needed to respect your unsubscribe choice and proportionate evidence of consent or withdrawal, reviewing the continuing need annually.
- Accounting records: we keep invoices, payment evidence and other required records for the applicable statutory periods. Primary accounting records generally need to be kept for five years after the financial year ends. Some supporting records have a 3.5-year requirement; exceptions apply.
- Testimonials: we keep the relevant permission while a testimonial is in use and retain limited evidence afterwards only where necessary.
We review closed enquiries and completed engagements every three months and check recording deletion dates monthly. We may retain a restricted copy of particular records where a legal obligation, active complaint or specific legal claim requires it. We record the reason and review date rather than retaining unrelated information.
Deletion from active systems does not necessarily remove every provider backup immediately. Provider recovery and backup periods vary. Access to retained copies is restricted and, if a backup is restored, relevant deletions must be reapplied. Technical hosting and security records follow the relevant provider arrangements and necessary security purposes; the enquiry and recording periods above are not a promise about every provider log.
19. Security
We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, unauthorised disclosure, access or misuse.
Measures may include appropriate account security, access controls, secure service providers and limiting access to information according to business need.
No internet-based system can be guaranteed to be completely secure, but we aim to use safeguards proportionate to the nature of the information we process.
20. Your Data Protection Rights
Depending on the circumstances and applicable law, you may have the right to:
- receive information about how your personal data is processed;
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to erase personal information in certain circumstances;
- ask us to restrict processing in certain circumstances;
- object to certain processing, including processing based on legitimate interests;
- object to direct marketing;
- receive certain personal information in a portable format where the right to data portability applies;
- withdraw consent where processing is based on your consent; and
- have protections concerning certain solely automated decisions.
These rights are not absolute and may depend on the circumstances and legal basis for processing.
To exercise a data protection right, contact:
info@lolitareid.com
We may need to verify your identity before fulfilling a request.
21. Marketing Preferences
You can unsubscribe from Project P marketing communications at any time.
You can normally do this by using the unsubscribe link included in the relevant email or by contacting us at:
info@lolitareid.com
Unsubscribing from marketing does not prevent us from sending communications that are necessary to administer an existing booking, purchase or client relationship.
22. Children
Project P’s business coaching and related services are intended primarily for adults and business owners.
We do not intentionally collect personal information from children through our services where this is not appropriate.
If we become aware that personal information concerning a child has been collected in circumstances where it should not have been, we will take appropriate steps in accordance with applicable law.
23. Complaints
If you have a concern about how Project P handles your personal information, please contact us first so that we have an opportunity to address it.
You also have the right to complain to the relevant data protection supervisory authority.
As Project P is established in Norway, the Norwegian supervisory authority is Datatilsynet (the Norwegian Data Protection Authority).
Making a complaint to us does not affect your right to contact a supervisory authority.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- our services;
- the technology and service providers we use;
- how we process personal information; or
- applicable legal and regulatory requirements.
The current version will be published on our website and identified by its “Last updated” date.
Where a change materially affects how we process personal information, we will provide additional information or obtain consent where required by law.
25. Contact Us
For questions, requests or concerns relating to privacy or personal information, please contact:
Lolita Reid
Skalpebekken 2
3050 Mjøndalen
Norway
Email: info@lolitareid.com
Phone: +47 40581644