Website Privacy & Cookie Notice

Last updated: October 2024

Amy Carter Health Ltd is a company incorporated and registered in England & Wales (company number 15835369) with its registered offices at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ (“ACH”).

ACH provides health coaching and wellbeing services to individual clients & businesses, providing education & support to help people make positive lifestyle & nutrition choices. ACH also delivers talks regarding health & wellness in group settings at events & workshops. In connection with these services, ACH operates a website: amycarterhealth.co.uk (the “Website”).

This Website Privacy Notice explains how ACH processes information relating to individuals who use the Website (“Website User(s)”) in compliance with the UK GDPR (the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) as it forms part of the law of England and Wales, Scotland and Northern Ireland and as defined in section 3(10) of the Data Protection Act 2018 (DPA 2018), supplemented by section 205(4)) and related data protection and e-privacy laws.

Any references to “you”, “your” or similar are references to Website Users; any references to “our”, “we” or similar are references to ACH.

If you are an individual client, personnel representing a corporate client, business collaborator or other business associate, please refer to the Client Privacy Notice for further information regarding our processing of your personal data.

If you have any questions about this Privacy Notice, the information we process about you, or if you would like to exercise one of your data protection rights, please contact us at info@amycarterhealth.co.uk, including “PRIVACY” in the subject line, where possible.

Information we may collect about you

ACH process the following information in relation to the Website, which may include your personal data:

a. General Enquiry Information

We process the following information about Website Users when you submit a general enquiry via the ‘Contact’ page on our Website: time of submission, name, email address, subject of enquiry, a brief explanation of the support/services you are interested in, the questions you have and any other information which you choose to include in your message.

We collect General Enquiry Information directly from Website Users; there is no statutory or contractual obligation for Website Users to provide this information.

b. Discovery Call Enquiry Information

We process the following information about Website Users when you book a discovery call via our Website: name, email address, contact number & your availability / preferred time slot for the discovery call.

We collect Discovery Call Enquiry Information directly from Website Users; there is no statutory or contractual obligation for Website Users to provide this information.

c. Marketing Information

We process the following information about Website Users when you subscribe to our mailing list: name, email address and details as to your consent to receive marketing emails from ACH (including any subsequent withdrawal thereof).

We collect Marketing Information directly from Website Users; there is no statutory or contractual obligation for Website Users to provide this information. We also process details as to your consent to receive marketing emails from ACH (including any subsequent withdrawal thereof) when you book or download a service via the Website and have the option to opt-out of email marketing communications.

d. Booking Information

We process the following information about Website Users when you request to make a booking via the Website: (a) name, email address & the coaching programme which you would like to book (“Request Booking Information”); (b) name, email address, contact number & your availability / preferred time slot for (i) the initial consultation, and (ii) further coaching sessions (“Consultation Booking Information”); and (c) in the case of a webinar booking, your name, email address, acceptance of terms & conditions & the webinar which you would like to attend (“Webinar Booking Information”).

We collect Booking Information directly from Website Users; there is no requirement for Website Users to provide Request Booking Information or Webinar Booking Information. However, existing clients will be required to inform ACH of their availability for coaching sessions (i.e., Consultation Booking Information) in order for both parties to fulfil their contractual obligations – but if you would prefer to provide this information in another format outside of the Website, please do let us know.

e. Analytics Information

We may process the following analytics information about relating to Website Users when you visit the Website: your Visitor Number and information about your visit to the Website (such as the time you visited, from which country you visited and the pages you visited).

We collect Analytics Information from Website Users indirectly via Wix, our web hosts. There is no statutory or contractual obligation for Website Users to provide this information. Please see the section ‘Cookies’ below for further information about our use of cookies on the Website and guidance regarding managing your cookie settings.

Why do we collect this information, and what is our lawful basis for doing so?

We process General Enquiry Information and Discovery Call Enquiry Information to facilitate conversations and relationships between ACH and potential clients/business associates, improve our understanding of what potential clients are looking for and how we can help them and improving the services that we provide to clients.

Lawful Basis: In accordance with UK GDPR, we process General Enquiry Information and Discovery Call Enquiry Information for these purposes on the lawful basis of legitimate interests, being to: (a) facilitate client relationships; (b) improve the quality of our services; and (c) promote our commercial interests.

We process Marketing Information (name and email address) in order to provide you with updates relating to ACH, such as new programmes and services, upcoming events and other related updates.

Lawful Basis: In accordance with UK GDPR, we process this Marketing Information (name and email address) for the above purpose on the lawful basis of legitimate interests, being to: (a) support relationships with clients & potential clients; (b) improve the quality of our services; and (c) promote our commercial interests.

We also process Marketing Information in order to ensure that our marketing practices comply with UK ePrivacy laws.

Lawful Basis: In accordance with UK GDPR, we process this Marketing Information for this purpose on the lawful basis of legal obligation, being our obligations under PECR.

We process Request Booking Information in order to provide you with important booking information and ensure that the programme is appropriate for you (if you have not had a discovery call beforehand) ahead of your booking.

Lawful Basis: In accordance with UK GDPR, we process Request Booking Information for the above purposes on the lawful basis of legitimate interests, being to: (a) promote our commercial interests; and (b) maintain a high quality of service to our clients.

We process Consultation Booking Information in order to allow you to book coaching sessions online.

Lawful Basis: In accordance with UK GDPR, we process Consultation Booking Information for the above purpose on the lawful basis of contract.

We process Webinar Booking Information in order to allow you to book onto a webinar & allow ACH to provide you will access to the webinar and communicate with you in relation to the webinar.

Lawful Basis: In accordance with UK GDPR, we process Webinar Booking Information for the above purposes on the lawful basis of contract.

We process Analytics Information in order to understand your use of the Website, and the services you are interested in.

Lawful Basis: In accordance with UK GDPR, we process Analytics Information for the above purpose on the lawful basis of legitimate interests, being to: (a) improve the quality of our services, and (b) promote our commercial interests.

Will we share your information with any third parties?

We take confidentiality and protection of your personal data very seriously; information will only be shared in the limited ways described in this Website Privacy Notice.

a. Web Hosts: Our Website is hosted on the Wix.com platform and so your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. You can find out more about Wix.com’s privacy practices here: https://support.wix.com/en/privacy-gdpr.

b. IT Service Providers: We may share information with IT service providers (for example, our web hosts, IT support businesses and IT security businesses) where this is reasonably necessary in order to maintain, improve or fix the Website.

c. Software Providers: We may share information with our software providers, such as Google Workspace, where this is reasonably necessary in order to establish and maintain a user-friendly Website & run our Website efficiently and securely.

d. Email Marketing Platform Providers: If you sign up to our mailing list via the Website, your name, email address and details of your consent may be processed by email marketing providers.

e. Professional Advisors: We may share information with professional advisors (for example, legal or financial advisors or our insurers) where this is reasonably necessary in order to obtain professional advice, manage business risk or for the establishment, exercise or defence of legal claims.

f. Merger or Acquisition: If we are involved in a merger or acquisition, you will be notified via a clear notice on our Website of any changes in ownership of your information, as well as any options you might have regarding this.

g. Legal or Regulatory Requirement: We may share information where we are required to by law, in connection with current or prospective legal proceedings & in the exercise, establishment or defence of our legal rights.

International Data Transfers

Our Website is hosted on the Wix.com platform which, as per Wix's website, uses servers all over the world to store information, including personal data. This means that your personal data may be transferred out of the UK. You can find out more about Wix’s storage and transfers of data, including their commitment to security and safeguards they have in place in section 5 of its privacy policy, here: https://www.wix.com/about/privacy.

As set out above, we also use Google Workspace as a software provider, which processes data using the cloud, using data centres around the world. You can find out more about Google’s data centres here: https://www.google.com/about/datacenters/locations/?hl=en; see also the Google Cloud Privacy Notice here: https://cloud.google.com/terms/cloud-privacy-notice

If we or our service providers transfer personal data out of the UK, we have agreements in place with them which provide that personal data shall stay adequately protected, in line with UK GDPR.

Retention

We will retain personal data for only as long as is reasonable and necessary, taking into account our legal obligations, insurance obligations, guidance from relevant professional associations and business practice.

Security

We take your privacy and our data protection very seriously and, therefore, take a range of reasonable measures in order to ensure that personal data is processed securely and compliantly.

Your Rights

Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.

Informed: The right to be informed about the collection and use of your personal data (as provided in this Website Privacy Notice).
Access: The right to ask us for copies of your personal data, along with some supplementary information. This right always applies, although there are some exemptions which could mean that you might not always receive all the information that we process.
Rectification: The right to have your personal data rectified if you believe that it is inaccurate. You also have the right to ask us to complete information which you believe is incomplete. This right always applies. If you believe that any of your personal data which we are processing is incomplete or inaccurate, please let us know by emailing info@amycarterhealth.co.uk, including “PRIVACY” in the subject line, where possible.
Erasure: The to request the deletion or removal of your personal data in certain circumstances.
Restriction: The right to ‘block’ or restrict processing of your personal data in certain circumstances.
Objection: The right to object to the processing of your personal data in certain circumstances.
Data portability: In respect of information which you have provided, the right to obtain and reuse your personal data for your own purposes across different services in certain circumstances (none of which currently apply to Website Users’ information which we process).
Automated-Decision Making: Rights in relation to automated decision making and profiling; however, ACH does not carry out any automated decision making and profiling.
Complaint: The right to raise a complaint with a data protection supervisory authority. The Information Commissioner’s Office (“ICO”) is the data protection supervisory authority in the UK; it’s contact details can be found here: https://ico.org.uk/make-a-complaint/.

Children

We do not knowingly process data from, offer services or market to children under the age of 18. If you are under the age of 18, or if you are a parent/guardian who is aware that their child has provided us with information, please contact us at info@amycarterhealth.co.uk, including “PRIVACY” in the subject line, where possible.

Cookies

Cookies are small text files, stored on your device when you load a website on your browser, which are used to store small pieces of information. Like most other websites, we use cookies on the Website to ensure that it functions effectively and securely, improve your user experience for Website Users. The table below sets out further details about the cookies that we use on the Website.Cookies are small text files, stored on your device when you load a website on your browser, which are used to store small pieces of information. Like most other websites, we use cookies on the Website to ensure that it functions effectively and securely, improve your user experience for Website Users. The table below sets out further details about the cookies that we use on the Website.

If you would like further information about cookies, you can visit www.allaboutcookies.org.

If you wish to manage the cookie settings in your browser, the following links may be helpful (depending on your browser):

To opt out of being tracked by Google Analytics across all websites, visit: http://tools.google.com/dlpage/gaoptout.