Privacy notice
Last updated: October 2026. Controller: ADD registered business name, ADD registered / correspondence address. ICO registration: ADD ICO registration number. Contact: hello@sherilynndhlovu.com.
What I collect
- Identity and contact: name, email, phone.
- Booking and payment records: sessions booked, payment confirmation (card details are held by the payment provider, not me).
- Account and learning data: course access, dates, progress and quiz completion.
- Messages and notes: what you send me, and my notes of sessions.
- Health and pregnancy information (special category data): only what you choose to tell me, such as due date or birth preferences.
Why and on what lawful basis
- To deliver services you ask for (contract).
- To keep records and meet legal duties, including safeguarding and tax (legal obligation).
- To reply to enquiries and run my business (legitimate interests).
- For health information, I rely on your explicit consent, which you can withdraw at any time. I ask you not to share more health detail than needed.
- Marketing emails only if you opt in.
Who I share it with
Only service providers who help me deliver the service (for example, hosting, email, video calling, payments and file storage), under contracts that protect your data. I do not sell your data. I may share information with health or social care professionals or the police only where you agree, or where safeguarding or the law requires it.
International transfers
If a provider processes data outside the UK, I use appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.
How long I keep it
Session notes and messages: ADD retention period (for example, 8 years after the last contact for adults, in line with insurer and professional advice). Financial records: 6 years. Marketing data: until you unsubscribe. Account and learning data: while your account is open and for a limited period afterwards.
Your rights
You can ask to see, correct, delete, restrict or move your data, and object to some uses. In your account you can download or delete your data. You can also contact me directly. You can complain to the Information Commissioner’s Office at ico.org.uk.
Security
I use access controls, encryption in transit and secure providers, keep course files in private storage, and keep messages inside the platform rather than on social media or personal messaging apps. Notification emails never include message content.