Last updated: October 2026

Who I am

I’m Lucy Atkinson, a life coach and hypnotherapist. I’m the person responsible for your personal information (the “data controller”), and I’m registered with the Information Commissioner’s Office (ICO), registration number ZA235308.

If you have any questions about your information, you can reach me at lulubloc@gmail.com.

This notice explains what information I collect, why, how I look after it, how long I keep it, and what your rights are. It covers my website, my mailing list and quiz, my events and retreats, my online courses and products and my one-to-one coaching, hypnotherapy and hypnobirthing work.

What I collect

When you visit my website: technical information your browser sends, such as your IP address, browser type, the pages you visit and how long you spend on them. Some of this is collected through cookies (see Cookies below).

When you take my quiz or join my mailing list: your name, email address and, for the quiz, your answers.

When you book an event or retreat: your name, contact details, booking and payment details, and anything you tell me about access or dietary needs.

When you work with me one to one: your name, contact details and date of birth; your GP’s details; for clients under 18, a parent or guardian’s name and contact details; notes from our sessions; anything you share in forms, emails or messages; and payment records.

Because of the nature of coaching and hypnotherapy, you may share information about your physical or mental health, pregnancy, emotional wellbeing, relationships or other personal matters. The law calls some of this “special category” information and asks me to take extra care with it. I only collect what helps me work with you safely and well.

When you buy or claim a course or digital product: your name, email address, what you’ve bought or signed up for, and your progress on my course platform. Payments are handled securely by Stripe, and I never see or store your full card details. If you claim one of my products through a partner bundle or giveaway, you give your details directly to me when you sign up, and they’re looked after under this notice.

Why I use it, and my legal basis

You can withdraw consent at any time by contacting me. This won’t affect anything I’ve already done with your consent, and I may still need to keep some records as described below.

Who I share it with

I don’t sell your information, and I never share session content with anyone except as described here.

I use trusted service providers to run my business. They only use your information to provide their service to me, and are required to keep it secure. These include:

• my email newsletter service (SendFox)
• my quiz platform (Smart Quiz Builder)
• event booking (Eventbrite)
• WhatsApp, for community groups you choose to join
• Video call platform (Zoom)
• Booking and scheduling tool (Acuity)
• Payment provider (Stripe)
• Where my notes are stored (Google Workspace)
• Website hosting provider (No Hassle Website)
• My virtual assistant, who helps with admin and works under a confidentiality agreement. She does not have access to session notes.
• my course platform (No Hassle, using Smart Creator Press)

I may also discuss my client work with my professional and peer supervisors. Where I do, I remove anything that could identify you.

In rare situations I may need to share information without your permission: if the law requires it, or if I believe you or someone else is at serious risk of harm. Where it’s safe and possible, I’ll talk to you first.

Information stored outside the UK

Some of the services I use are based in, or store data in, the USA or elsewhere. Where this happens, I make sure appropriate safeguards are in place, such as the UK-US Data Bridge or the standard contractual clauses approved for use in the UK.

How long I keep it

You can ask me to delete your information sooner. I’ll do so wherever I can, though I may need to keep some records for legal or insurance reasons, and I’ll explain if so.

How I keep it safe

I keep electronic records on password-protected, encrypted devices and accounts with two-factor authentication. Any paper notes are stored securely under lock and key, and shredded when no longer needed. No system is completely risk-free, but I take reasonable and appropriate steps to protect your information.

If you message me by WhatsApp, text or email, please bear in mind these channels are less private than a session. Keep anything very sensitive for when we talk.

Cookies

Cookies are small files stored on your device when you visit a website. My website uses essential cookies that it needs to work, and analytics cookies to help me understand how the site is used. I’ll only set non-essential cookies if you agree to them through the cookie banner, and you can change your mind at any time.

Your rights

You have the right to:

• ask for a copy of the information I hold about you
• ask me to correct anything that’s wrong or incomplete
• ask me to delete your information
• ask me to limit how I use your information
• object to me using your information, including for marketing
• ask for your information in a format you can take elsewhere
• withdraw your consent at any time

To use any of these rights, just email me at lulubloc@gmail.com. I’ll respond within one month. There’s usually no charge.

Children and young people

My online courses and digital products are designed for adults, and I don’t knowingly sell them to anyone under 18.

I work with young people under 18 (aged 6 to 17). When I do, I take extra care with their information.

For young people under 16, I ask a parent or guardian to agree to the sessions and to how I’ll record and look after information, and I also ask the young person if they’re happy to go ahead. Young people aged 16 and 17 can usually agree to this themselves, and I’ll involve a parent or guardian where that’s appropriate and the young person is comfortable with it.

What a young person shares in sessions is confidential, including from their parents. I may give parents a general sense of how things are going, but I won’t share details without the young person’s agreement. The exception is if I’m worried that they, or someone else, is at risk of harm. Then I may need to share information with a parent or guardian, their GP or the local authority’s children’s services. Wherever it’s safe to, I’ll talk to the young person about this first.

Young people can use their own data rights once they’re mature enough to understand them. A parent or guardian can make a request on their behalf where the young person isn’t able to, or agrees to it.

I keep records for young people until their 25th birthday, or for 7 years after our last session, whichever is later.

If you’re unhappy

If you have a concern about how I’ve handled your information, please tell me first at lulubloc@gmail.com so I can put it right. I’ll acknowledge your complaint within 30 days and let you know what I’m doing about it.

You also have the right to complain to the Information Commissioner’s Office:

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this notice

I review this notice from time to time and will post any changes here, with a new date at the top. If I make a significant change that affects current clients, I’ll let you know directly.