Last updated: 12 August 2026
This privacy notice explains how Core Genius Ltd, operating under the Rosemary Nonny Knight name (“we”, “us” or “our”), collects, uses and protects your personal information.
It applies when you use our websites, landing pages, products, programmes and services, including rosemarynonnyknight.com and any other website or landing page operated by us that links to this privacy notice.
For data protection purposes, Core Genius Ltd is the data controller unless we tell you otherwise.
You can contact us about privacy or data protection at:
Email: [email protected]
Depending on how you interact with us, we may collect:
We do not routinely ask you to provide sensitive or “special category” personal information. If you voluntarily provide sensitive information as part of a service, application, communication or coaching relationship, we will only use it where it is necessary and where we have an appropriate lawful basis and any additional legal condition required.
We may collect personal information:
We may use your personal information to:
We will not use your personal information for a new purpose that is incompatible with the purpose for which it was originally collected unless we have a lawful reason to do so.
Data protection law requires us to have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contract — where we need to process your information to provide a product or service you have requested or purchased, or to take steps at your request before entering into a contract.
Consent — where you have given us clear permission to use your information for a particular purpose. You may withdraw your consent at any time.
Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. Examples may include improving our services, managing customer relationships, maintaining security and certain forms of marketing permitted by law.
Legal obligation — where we need to process information to comply with a legal requirement, such as tax, accounting or regulatory obligations.
Where special category personal information is processed, we will also identify an appropriate additional legal condition where required.
If you subscribe to our mailing list, request a free resource, purchase from us or otherwise provide your contact details, we may send you relevant emails where the law permits us to do so.
Depending on the circumstances, this may be because you have specifically consented to receive marketing or because the applicable rules allow us to contact existing customers about similar products and services.
Every marketing email we send will provide a way for you to unsubscribe.
You can also ask us to stop sending marketing emails at any time by contacting us at [email protected].
Unsubscribing from marketing does not prevent us from sending necessary service communications concerning a product, programme, transaction or service you have requested.
Our websites and landing pages may use cookies, pixels, tags and similar technologies.
Some technologies are necessary for a website or service to function. Others help us understand how our websites are used or allow us to measure and improve our advertising.
Where consent is required by law, non-essential advertising or tracking technologies are used only after the required consent has been obtained.
You can manage your choices using the cookie or privacy controls provided on the relevant website.
Your browser may also allow you to block or delete cookies, although doing so may affect the way some parts of our websites work.
We use Meta Business Tools, which may include the Meta Pixel, on some of our websites and landing pages.
These tools help us understand actions taken after someone sees or clicks one of our advertisements and help us measure the effectiveness of advertising on Facebook, Instagram and other Meta services.
Depending on the page and our configuration, Meta may receive information such as technical information about the browser or device and standard events indicating that an action has occurred, for example a page view, content view, lead, registration or purchase.
Meta may process information it receives in accordance with its own privacy terms.
Where the use of Meta advertising technologies requires consent, we use them subject to the applicable consent requirements.
You can also manage advertising preferences through the privacy and advertising controls provided by Meta.
We may use Google services such as Google Analytics, Google Ads and conversion measurement technologies.
These services may help us understand website usage, measure advertising performance and improve our websites and marketing.
Depending on the services used and your consent choices, Google may receive information about your browser, device, website activity and interactions with our advertising.
Google processes information it receives in accordance with its own privacy terms.
Where the use of Google advertising or tracking technologies requires consent, we use them subject to the applicable consent requirements.
We do not sell your personal information.
We may share information where necessary with trusted service providers who help us operate our business, including providers of:
These organisations receive only the information reasonably necessary for the relevant purpose.
We may also disclose personal information where required by law, regulation, court order or another lawful authority, or where reasonably necessary to protect our legal rights, property, business, customers or others.
If our business or part of our business is sold, merged or reorganised, personal information may be transferred as part of that transaction subject to applicable data protection requirements.
Some of the organisations that provide services to us may process personal information outside the United Kingdom.
Where a transfer of personal information is subject to international data-transfer rules, we take appropriate steps to ensure that the transfer is lawful.
Depending on the destination and provider, this may include relying on an applicable adequacy regulation or using appropriate contractual or other legal safeguards.
You may contact us if you would like further information about the safeguards relating to a particular international transfer.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, contractual and reporting requirements.
The appropriate retention period depends on the type of information and why we hold it.
For example:
When information is no longer reasonably required, we will delete it, anonymise it or otherwise securely dispose of it where appropriate.
We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, destruction, alteration, disclosure, misuse or unauthorised access.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Where we use third-party service providers, we take reasonable steps to select providers that offer appropriate safeguards for the information they process on our behalf.
Depending on the circumstances and the lawful basis we rely on, you may have the right to:
These rights are not absolute and different rights apply in different circumstances.
You have the right to object at any time to the use of your personal information for direct marketing. If you object, we will stop using your information for that purpose.
There is normally no fee for exercising your data protection rights.
To exercise a right, contact:
We may need to ask for information to confirm your identity before acting on a request.
If you are unhappy about the way we have collected, used or protected your personal information, please contact us first so that we can investigate your concern.
You can make a data protection complaint by emailing:
Please include enough information for us to understand the issue and investigate it.
We will acknowledge a data protection complaint within 30 days and will investigate and respond without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Our websites and landing pages may contain links to websites operated by other organisations.
Once you follow a link to another website, that organisation may collect and use information under its own privacy notice.
We are not responsible for the privacy practices of websites that we do not control, and we encourage you to read the privacy information provided by the relevant organisation.
We may update this privacy notice from time to time to reflect changes to our business, websites, services, technology or legal obligations.
The latest version will be published on the websites and landing pages to which it applies, together with the date it was last updated.
Where a change is significant and it is appropriate to do so, we may also notify you by another method.
If you have questions about this privacy notice, would like to exercise a data protection right or wish to make a data protection complaint, please contact:
Core Genius Ltd
Email: [email protected]