Data Policy

Who is responsible for your data

The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], company number [COMPANY NUMBER], ICO registration [ICO REFERENCE]. You can reach us at alexandra@beesymom.com.

What we collect

• Sleep assessment form: your name, email address, phone number, and — if you choose to give them — your child's name, age, bedtime, night wakings, naps and a description of their sleep difficulties.
• Account data: your email address, your name, and an encrypted password, held by our authentication provider.
• Sleep logs: the bedtimes, wake times, nap details and notes you record in your client area.
• Expert assessment: the written assessment your sleep consultant prepares for you after your consultation.
• Purchase records: which course or package you bought, the amount, the currency and the payment reference.
• Email updates: if you ask for them, your email address and name, when and where you asked, the wording you agreed to and when you confirmed — our proof of your consent.
• Email activity: whether you opened our email updates and which of their links you clicked. Each update carries a tiny image and links that pass through our own site, which record this. We use it to see which topics help and to stop writing to addresses that never read our emails. Blocking images in your mail app stops the open being recorded.
• Course access: when you open a course lecture, the device and internet address it was opened from, kept for 90 days to stop accounts being shared.

We never see or store your card details. Payments are handled entirely by Stripe; we only receive a confirmation that a payment succeeded.

Information about your child

The details you share about your child's sleep and development are sensitive. We treat them as health-related information, we use them only to prepare and deliver your sleep plan, and we never use them for marketing or share them with anyone outside the consultancy.

Why we may use your data

• To arrange and carry out your free consultation, after you submit the assessment form.
• To deliver the package or course you bought and to give you access to your client area — this is necessary to perform our contract with you.
• To send service messages, such as your account activation link or a password reset.
• To keep records of sales for our legal and tax obligations.
• To send you email updates — sleep tips, course news and offers — only if you ticked the box and confirmed from your inbox, or, if you bought from us, about similar services until you say no. Every update has an unsubscribe link, and you can switch them off in your Account.

Who else processes your data

• Supabase — database, authentication and file storage.
• Stripe — payment processing.
• Microsoft 365 — the mailbox our emails are sent from.
• Lovable — application hosting.
• WhatsApp (Meta) — only if you choose to start a chat using the button on our site.

Each of these acts as our processor under contract. Where data is transferred outside the UK, it is covered by the safeguards those providers maintain. We do not sell your data and we do not share it with advertisers.

How long we keep it

Assessment enquiries that do not become clients: [RETENTION PERIOD TO CONFIRM]. Client records, sleep plans and sleep logs: for the duration of your programme and [RETENTION PERIOD TO CONFIRM] afterwards. Purchase records: six years, as UK tax law requires. You can ask us to delete your data sooner.

Your rights

You have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. To exercise any of these, email us and we will respond within one month.

If you are unhappy with how we handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.