top of page
Online-Course-Hub-logo
Start the Course

Privacy Policy

Last updated: September 2026

1. About this Privacy Policy

This Privacy Policy explains how Elly Lindsay, (“we”, “us” or “our”), collects, uses, stores and protects your personal information.

It applies when you:

  • visit or use our website;

  • contact us or make an enquiry;

  • purchase or participate in one of our online courses;

  • create or use an account on our course platform;

  • book or attend a one-to-one support call;

  • subscribe to our email list;

  • interact with us through social media; or

  • otherwise provide personal information to us.

We are the data controller responsible for deciding how and why your personal information is used.

Our contact details are:

Business/trading name: Elly lindsay
Contact name: Elly Lindsay
Email: info@ellylindsay.co.uk
Postal address: Baker Miller, 133 Highland Road, Southsea, Hampshire PO4 9EY

2. The personal information we collect

Depending on how you interact with us, we may collect the following types of personal information.

Identity and contact information

This may include:

  • your name;

  • email address;

  • postal or billing address;

  • telephone number; and

  • social-media username or profile information where you contact us through social media.

Purchase and transaction information

This may include:

  • details of the course or service you purchased;

  • purchase date and amount paid;

  • payment status;

  • invoices, receipts and transaction references;

  • refund or cancellation information; and

  • limited payment information supplied to us by our payment provider.

Payments are processed by Stripe. We do not normally receive or store your complete payment-card details.

Course and account information

This may include:

  • your course-platform account details;

  • the date you received access to the Course;

  • your progress through the Course;

  • lessons, resources or features you have accessed;

  • support requests;

  • records of your acceptance of our Terms and Conditions; and

  • information relating to the administration of your Course access.

Support-call information

If you book a one-to-one support call, we may collect:

  • your booking details;

  • your preferred appointment date and time;

  • questions you submit before the call;

  • information you choose to share during the call; and

  • brief administrative or support notes where reasonably necessary.

We will not record a support call unless we have informed you in advance and obtained any consent required by law.

Health information

Because our courses relate to jaw tension, TMJ symptoms, facial pain and self-myofascial release, you may choose to provide information about your health, symptoms, medical history, dental history or response to the Course practices.

Health information is classed as special-category personal data and receives additional legal protection.

Please only provide health information that is relevant to your question or participation. The Course and support call are not medical services, and you should not use them to send urgent or emergency medical information.

Communications

We may keep copies of:

  • emails and messages you send to us;

  • enquiries and customer-support correspondence;

  • complaints and feedback;

  • survey responses;

  • testimonials you provide; and

  • messages sent through our website, course platform or social-media accounts.

We will obtain your permission before publishing a testimonial in a form that identifies you.

Marketing information

This may include:

  • whether you have subscribed to receive marketing emails;

  • the date and method of your subscription;

  • your marketing preferences;

  • whether you have opened or interacted with an email, where email tracking is used; and

  • details of any request to unsubscribe.

Website and technical information

When you use our website or course platform, certain information may be collected automatically, including:

  • your IP address;

  • browser and device type;

  • operating system;

  • approximate location;

  • pages viewed;

  • the date, time and duration of visits;

  • links or buttons used;

  • referring website; and

  • cookie or similar technology identifiers.

More information about this is provided in Section 12 of this Privacy Policy and in our Cookie Policy.

3. How we collect your information

We may collect personal information:

  • directly from you when you purchase a Course, complete a form, create an account, book a call or contact us;

  • through your use of our website or course platform;

  • through cookies and similar technologies;

  • from our payment, booking, email-marketing or course-platform providers;

  • from social-media platforms when you interact with our accounts; and

  • from another person where, for example, someone purchases a Course on your behalf.

Where someone provides your information to us on your behalf, they are responsible for ensuring that they have permission to do so.

4. How and why we use your information

We only use personal information where we have a lawful basis for doing so.

To process purchases and provide the Course

We use identity, contact, transaction and account information to:

  • process your order;

  • confirm your purchase;

  • provide access to the Course;

  • administer your course-platform account;

  • send essential service communications;

  • provide Course materials and support; and

  • manage cancellations, refunds and complaints.

Our lawful basis is that this processing is necessary to enter into or perform our contract with you.

To provide the one-to-one support call

We use your contact, booking and relevant support information to:

  • arrange and administer your call;

  • understand the Course-related questions you wish to discuss;

  • provide appropriate Course support; and

  • rearrange or follow up on the appointment where necessary.

Our lawful basis is that this processing is necessary to perform our contract with you.

To process health information

Where you choose to provide health information in connection with the Course or support call, we will only use it to respond to your question, consider whether a Course practice may be unsuitable or provide the support you have requested.

Our lawful basis under Article 6 of the UK GDPR is normally that the processing is necessary to provide the service you requested. Our additional Article 9 condition for processing health information is your explicit consent.

You may withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing that took place before consent was withdrawn. However, we may be unable to provide certain personalised support if we cannot use relevant information you have provided.

We do not use health information for advertising or unrelated marketing.

To respond to enquiries and provide customer support

We use your contact details and communications to answer questions, resolve technical issues, manage complaints and provide customer service.

Our lawful basis is performance of our contract where your enquiry relates to a purchase. For general enquiries, our lawful basis is our legitimate interest in responding to people who contact us and operating our business effectively.

To send essential Course communications

We may contact you about matters such as:

  • order confirmation;

  • course access;

  • password or account information;

  • changes affecting the Course;

  • support-call arrangements;

  • safety information;

  • changes to our Terms or Privacy Policy; and

  • service interruptions.

These are service communications rather than marketing messages. Our lawful basis is performance of our contract, compliance with our legal obligations or our legitimate interest in administering the Course.

To send marketing communications

Where you have agreed to receive marketing, we may send you information about courses, services, events, resources, news or offers.

Our lawful basis is normally your consent. In limited circumstances, we may rely on the existing-customer exception permitted under electronic-marketing law, where applicable.

You can unsubscribe at any time by:

  • clicking the unsubscribe link in a marketing email; or

  • contacting us at  info@ellylindsay.co.uk

Withdrawing from marketing will not stop essential communications relating to a Course or service you have purchased.

To operate and improve our website and services

We may use website, technical, Course and feedback information to:

  • maintain the website and Course platform;

  • understand how our website and Course are used;

  • improve Course content and customer experience;

  • identify and fix technical problems;

  • protect the security of our systems; and

  • prevent fraud or misuse.

Our lawful basis is our legitimate interest in operating, securing and improving our business and services. Where cookies or similar technologies legally require consent, we rely on your consent.

To comply with legal and financial obligations

We may process and retain information to:

  • maintain accounting and tax records;

  • establish or defend legal claims;

  • respond to lawful requests from regulators or public authorities;

  • prevent or investigate fraud; and

  • comply with other legal or regulatory requirements.

Our lawful basis is compliance with a legal obligation or our legitimate interest in protecting our legal rights.

5. If you do not provide your information

Where we need personal information to enter into or perform a contract, failure to provide it may mean that we cannot:

  • process your purchase;

  • provide Course access;

  • create or maintain your account;

  • arrange your support call;

  • respond properly to your request; or

  • provide another service you have requested.

You are not required to provide health information unless it is genuinely necessary for the specific support you are requesting. You may choose to ask a general question without providing detailed health information.

6. Who we share your information with

We may share relevant personal information with trusted service providers that help us operate our business, including:

  • our website provider, currently Wix

  • our course-platform provider, Wix

  • our payment provider, Stripe

  • our appointment-booking provider, Wix

  • our video-call provider Google/Zoom

  • our email and email-marketing providers,

  • cloud-storage and document-management providers

  • website hosting, security, analytics and technical-support providers;

  • accountants, legal advisers, insurers and other professional advisers; and

  • government bodies, regulators, courts or law-enforcement agencies where disclosure is required or permitted by law.

We only provide service providers with the information reasonably necessary to perform their functions. Where they process personal information on our behalf, they are required to protect it and use it only in accordance with our instructions and applicable law.

Some providers, such as payment or social-media platforms, may act as separate data controllers for information they collect and process under their own privacy policies.

We do not sell your personal information.

If our business is sold, transferred or reorganised, relevant personal information may be disclosed to prospective buyers or transferred to the new owner, subject to appropriate confidentiality and data-protection safeguards.

7. International transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

  • transferring information to a country recognised by the UK as providing an adequate level of protection;

  • using approved contractual safeguards, such as the UK International Data Transfer Agreement or an approved UK Addendum; or

  • relying on another lawful transfer mechanism.

You can contact us if you would like further information about the safeguards used for your personal information.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.

Our usual retention periods are:

  • purchase, payment, invoice and tax records: normally six years after the relevant transaction or the end of our relationship;

  • Course and account records: for the duration of your access and normally for up to two years afterwards;

  • support-call booking records and relevant support notes: normally for up to two years after the call;

  • health information provided for Course support: only for as long as necessary to provide that support, normally no longer than two years unless a longer period is reasonably required for legal or insurance purposes;

  • general enquiries and correspondence: normally up to two years after the last communication;

  • complaints and information relevant to a legal claim: for as long as reasonably necessary to resolve the matter and comply with applicable limitation periods;

  • marketing records: until you unsubscribe or we determine that the information is no longer current; and

  • records showing that you unsubscribed: for as long as necessary to ensure that we continue to respect your preference.

These periods may be extended where necessary to comply with law, deal with a dispute or establish, exercise or defend a legal claim.

We may retain anonymised information that no longer identifies you for statistical, research or business-planning purposes.

9. How we protect your information

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, disclosure, access or destruction.

These measures may include:

  • password-protected accounts and devices;

  • access controls;

  • secure service providers;

  • software updates and security measures;

  • limiting access to people who genuinely need the information; and

  • taking additional care with health and other sensitive information.

No online system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will investigate it and notify affected individuals and the Information Commissioner’s Office where legally required.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • ask for confirmation that we process your personal information;

  • request access to and a copy of your personal information;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase your information;

  • ask us to restrict how your information is used;

  • object to certain processing, including direct marketing;

  • request the transfer of information you provided to us in a portable format;

  • withdraw consent where processing is based on consent; and

  • complain to the Information Commissioner’s Office.

These rights are not absolute and may not apply in every circumstance.

To exercise a right, contact us at  info@ellylindsay.co.uk. We may need to request information to confirm your identity before acting on your request.

We will normally respond within one month, although the law allows additional time in certain circumstances. We will tell you if an extension is required.

You will not usually have to pay a fee. However, a reasonable fee may be charged or a request refused where the law permits us to do so, including where a request is manifestly unfounded or excessive.

11. Marketing preferences

You have the right to object to the use of your personal information for direct marketing at any time.

Every marketing email will provide a way to unsubscribe. You may also contact us directly at  info@ellylindsay.co.uk

After you unsubscribe, we may retain limited information on a suppression list so that we do not accidentally send further marketing to you.

Unsubscribing from marketing will not affect service messages necessary to administer a Course or purchase.

12. Cookies and similar technologies

Our website may use cookies and similar technologies to:

  • provide essential website functions;

  • remember your settings;

  • maintain security;

  • understand website use;

  • measure website performance; and

  • support advertising or marketing where applicable.

Cookies that are strictly necessary may be used without consent. Where consent is legally required for analytics, advertising or other non-essential cookies, these will not be used unless you have made the relevant choice through our cookie banner or settings tool.

You can change your cookie preferences through the cookie settings link.

13. Third-party websites and social media

Our website or Course may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy practices of those third parties. You should read their privacy policies before providing personal information.

If you contact or interact with us through a social-media platform, that platform may also collect and use your information under its own privacy policy.

14. Children’s information

The Course is intended primarily for adults.

A person under 18 may only participate where we have given prior written permission and a parent or legal guardian has purchased the Course or provided any necessary consent on their behalf.

Where we process a young person’s information, we will only collect information reasonably necessary to administer the Course and provide the agreed service. A parent or legal guardian should contact us before providing health or other sensitive information about a person under 18.

If you believe that a child has provided personal information to us without appropriate permission, please contact us.

15. Automated decision-making

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required by law.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, providers or legal obligations.

The latest version will be published on our website with the date it was last updated. Where a change materially affects how we use your information, we will take reasonable steps to bring it to your attention.

17. How to complain

If you have a concern about how we use your personal information, please contact us first so that we can try to resolve it.

Email:  info@ellylindsay.co.uk
Postal address: Baker Miller, 133 Highland Road, Southsea, Hampshire PO4 9EY

You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK regulator for data protection:

Website: https://www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You can contact the ICO at any time, although it will usually recommend giving us an opportunity to address your concern first.

bottom of page