PRIVACY POLICY

Holistic Fertility with Fion

Last updated: 12th August 2026

1. Introduction

Holistic Fertility with Fion ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit holisticfertilitywithfion.com, download a free resource, join our email list, enrol in the Self-Paced Membership or Guided Coaching Membership, book a coaching session or clinical consultation, or otherwise interact with us.

We take particular care with health-related information, because much of what we discuss with you relates to your fertility and reproductive health, which UK data protection law treats as "special category" data requiring extra protection.

2. Who We Are

We are the data controller responsible for your personal data. Our details are:

Business name: Yin Yu Lam, trading as Holistic Fertility with Fion

Address: 19b North Street, Bishop’s Stortford, CM23 2LD, Hertfordshire, the UK

Email: [email protected]

ICO registration number: ZC213535

3. Information We Collect

3.1 Information you give us

• Contact details: name, email address, phone number.
• Account and membership details: username, password (stored securely/hashed), billing address.
• Payment information: processed by our payment provider — we do not store full card numbers.
• Health and fertility information you choose to share with us: for example, details you provide during coaching sessions, clinical consultations, intake forms, or community posts, which may include information about your menstrual cycle, fertility history, diagnoses, treatment (including IVF), medication, and related emotional wellbeing. This is "special category" data under UK GDPR.
• Correspondence: emails, messages, or forms you send us.

3.2 Information we collect automatically

• Technical data: IP address, browser type, device information, and general location derived from your IP address.
• Usage data: pages visited, course progress, time spent on the platform, links clicked, collected via cookies and similar technologies (see Section 7).

3.3 Information from third parties

• Payment confirmation from our payment processor.
• Engagement data from our email marketing and course platform providers.

4. How and Why We Use Your Information (Lawful Basis)

We only use your personal data where we have a valid lawful basis to do so. Our main uses, and the corresponding lawful bases under UK GDPR, are:

• To provide the Services you have purchased (deliver course access, process payment, run coaching sessions) — necessary for performance of a contract.
• To respond to enquiries and provide customer support — necessary for performance of a contract / legitimate interests.
• To send you free resources and, where you have opted in, marketing emails about our programmes — based on your consent, which you may withdraw at any time.
• To improve our website, content, and Services, and to understand how our programmes are used — legitimate interests.
• To maintain the security of our platform and prevent fraud — legitimate interests / legal obligation.
• To comply with our legal and regulatory obligations, such as accounting and tax records — legal obligation.

4.1 Special category (health) data

Where you choose to share health or fertility information with us — for example during a coaching session, clinical consultation, or intake form — we process this only with your explicit consent, and only for the purpose of providing the coaching or clinical service you have requested. You are always free to choose how much information you share with us, and you may withdraw consent at any time, though this may limit our ability to support you effectively.

We never use your health information for marketing purposes, and we do not sell your personal data to any third party.

5. How We Share Your Information

We do not sell your personal data. We share information only with trusted third parties who help us deliver our Services, and only to the extent necessary:

• Our online learning platform provider (Kajabi), which hosts our course content and manages membership access.
• Payment processors, to securely process membership fees and session payments.
• Email marketing and CRM providers, to send educational content and communications you have opted into.
• Video-conferencing providers, to deliver 1:1 coaching sessions and live Q&As.
• Professional advisers (such as accountants or legal advisers), where necessary for our legitimate business operations.
• Regulators, law enforcement, or other parties where we are required to do so by law, or to protect the safety of you or others.

Where we use providers based outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision, to protect your data in line with UK GDPR requirements.

6. Data Retention

• Account and membership data: retained for the duration of your membership and for a reasonable period afterwards (typically up to 6 years) to meet accounting, legal, and dispute-resolution obligations.
• Coaching and clinical notes: retained in line with relevant professional and clinical record-keeping guidance, typically for a minimum of 7-8 years.
• Marketing data: retained until you unsubscribe or ask us to delete it, or after a period of inactivity.
• Where we no longer need your data for the purposes described in this policy, we will securely delete or anonymise it.

7. Cookies and Similar Technologies

Our website and learning platform use cookies and similar technologies to:

• Enable core website and membership functionality (essential cookies).
• Understand how visitors use our website (analytics cookies).
• Support marketing and remarketing, where you have consented (marketing cookies).

You can control or disable non-essential cookies through our cookie banner when you first visit the site, and through your browser settings at any time. Disabling essential cookies may affect the functionality of our website and membership platform.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten"), in certain circumstances.
• Request that we restrict or object to certain processing.
• Request data portability, where technically feasible.
• Withdraw consent at any time, where we rely on consent (such as marketing emails or sharing health information).
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority if you are based outside the UK.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month, in line with legal requirements.

9. Marketing Communications

If you have opted in to receive our emails (for example, after downloading a free resource), we will send you educational content and, occasionally, information about our programmes. You can unsubscribe at any time using the link in any email, or by contacting us directly. Opting out of marketing emails will not affect service-related communications about a membership or session you have purchased.

10. Children

Our Services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, access controls, and working only with reputable third-party providers. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on our website with a revised "last updated" date, and where changes are material, we will take reasonable steps to notify existing members.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: [email protected]

Address: 19b North Street, Bishop’s Stortford, CM23 2LD, Hertfordshire, the UK