PRIVACY POLICY
Last updated: April 2026Who we are
Bobbie Spry Wellness is a trading name of Barbara Spry, a sole trader based at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom.
This Privacy Policy explains how I collect, use and protect your personal data when you visit bobbiesprywellness.com or purchase products or services from me.
I am committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions, please contact me at [email protected]Data controller
For the purposes of UK GDPR, Barbara Spry (trading as Bobbie Spry Wellness) is the data controller. Third party services I use (such as Stripe, Email Octopus and Payhip) act as either data processors on my behalf or as independent data controllers. Please refer to their own privacy policies for details of how they process your data.What personal data I collect
I may collect the following personal data:
- Your name and email address when you sign up to my newsletter or contact me
- Your name, email address and payment information when you purchase a course or service
- Technical data such as your IP address and device identifiers, collected automatically when you visit my website via Google Analytics
Health data: Where you engage with me for 1:1 coaching, I may ask you to complete a health questionnaire which may include information about medical conditions, medications or diagnoses. This is health data (special category data under UK GDPR) and will only be collected with your explicit consent. You are not required to provide this information to purchase a digital course.How I collect your data
I collect data when you:
- Sign up to my email newsletter via my website
- Purchase a course or service
- Contact me by email
- Complete a coaching intake form (health data, with explicit consent)
- Visit my website (technical data collected automatically via Google Analytics)Why I use your data and the legal basis
I use your personal data for the following purposes:
- To fulfil your purchase — delivering your course and sending order confirmation (legal basis: performance of a contract)
- To send you my newsletter and marketing emails — only where you have given your consent (legal basis: consent). You can withdraw consent at any time by unsubscribing.
- To respond to your enquiries (legal basis: legitimate interests — it is in both our interests to communicate effectively)
- To analyse website usage — using Google Analytics to understand how visitors use my site and improve my content (legal basis: consent via cookie banner)
- To comply with legal obligations — such as keeping financial records (legal basis: legal obligation)
- To provide 1:1 coaching services — including processing health data where you have given explicit consent (legal basis: explicit consent under Article 9 UK GDPR)Third parties I share your data with
I use the following trusted third party services to run my business. Your data may be processed by these services, which may include transfers outside the UK. Each provider uses appropriate safeguards such as standard contractual clauses or adequacy decisions:
- Payhip (course hosting and payment processing)
- Stripe (payment processing — data may be processed outside the UK)
- Email Octopus (email marketing)
- Zapier (automation between services — data may be processed outside the UK)
- Carrd (website hosting)
- Google Analytics (website analytics — data may be processed outside the UK)
I do not sell your personal data to any third party.International data transfers
Some of the third party services I use may transfer and process your data outside the United Kingdom. Where this occurs, appropriate safeguards are in place, such as the UK Government's adequacy regulations or standard contractual clauses, to ensure your data is protected to the same standard as within the UK.How long I keep your data
- Customer purchase data — kept for 7 years in line with HMRC requirements
- Email newsletter subscribers — kept until you unsubscribe or withdraw consent
- Enquiry emails — kept for up to 2 years
- Coaching health data — kept only for the duration of the coaching relationship and deleted securely within 12 months of the relationship ending, unless you consent to longer retentionHow I keep your data safe
I take reasonable steps to protect your personal data, including:
- Using secure, reputable third party platforms with their own security measures
- Password protecting all accounts and devices used for business purposes
- Limiting access to your personal data to myself only
However, no online transmission is completely secure and I cannot guarantee absolute security.Your rights
Under UK GDPR you have the following rights:
- Right of access — to request a copy of the personal data I hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data
- Right to restrict processing — to request that I limit how I use your data
- Right to data portability — to request your data in a portable format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — at any time where processing is based on consent (e.g. unsubscribe from emails)
- Rights related to automated decision making — I do not use automated decision making or profiling
To exercise any of these rights, please contact me at [email protected] I will respond within one month.Complaints
If you are unhappy with how I have handled your personal data, please contact me in the first instance at [email protected]
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.Changes to this policy
I may update this policy from time to time. The current version will always be available on my website.Contact
Barbara Spry trading as Bobbie Spry Wellness
61 Bridge Street
Kington
HR5 3DJ
United Kingdom
[email protected]