Privacy Notice

Last updated: [September 2026]

Revised Privacy Notice

This privacy notice explains how Chrissy Okafor-Mawdsley, trading as Memory & Brain Health Coach, collects, uses, and protects your personal data.

For the purposes of data protection law, I am the data controller of the personal data I collect and use.

If you have any questions about this privacy notice or how I use your personal data, you can contact me at:

Email: christine@christineom.com

I do not publish a postal address in this privacy notice. Please contact me by email in the first instance.

This privacy notice applies to personal data collected through my website, email communications, newsletters, webinars, bookings, forms, coaching services and related business activities.

1. Who this website and my services are for

My website and services are intended for adults.

I do not knowingly collect personal data from children under 13 through this website. If I become aware that I have collected personal data from a child under 13 without appropriate parental consent, I will take steps to delete it.

Where any online service is directed at children, UK data protection law generally requires parental consent for children under 13.

2. What personal data I collect

I may collect and use the following types of personal data.

Information you provide directly

This may include:

  • your name;

  • email address;

  • telephone number;

  • business name, if relevant;

  • communication and marketing preferences;

  • information you provide in contact forms, enquiry forms, emails or messages;

  • information you provide when signing up to a newsletter, webinar, free resource or lead magnet;

  • information you provide when booking a call, webinar or coaching session;

  • information you provide through forms, questionnaires, audits or assessments, including Google Forms;

  • information discussed during coaching sessions;

  • payment and transaction information;

  • feedback, testimonials or reviews you provide;

  • images, voice, chat comments or contributions if you attend recorded webinars or sessions.

Health and wellbeing information

As a memory and brain health coach, I may collect information relating to your health, wellbeing, lifestyle, symptoms, concerns, medical history or cognitive health where you choose to provide this to me.

This type of information may be classed as special category data under UK data protection law because it may relate to your health.

I will only collect this type of information where it is relevant to the services I provide and where I have a lawful basis and a special category condition for doing so, such as your explicit consent.

Please note that a privacy notice itself does not obtain consent. Where explicit consent is needed, I will ask for it separately, for example through a form, tick box or other clear affirmative action.

Information collected automatically

When you visit my website, certain technical information may be collected automatically, such as:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • pages visited;

  • time and date of access;

  • website usage information;

  • cookie and tracking data, where applicable.

This helps the website function, remain secure and provide a better user experience.

If I use analytics or advertising tools, such as Meta Pixel, Google Analytics or similar tracking technology, further information may be collected through cookies or similar technologies. Please see the cookie section below and my Cookie Policy for more information.

3. How I collect your personal data

I may collect personal data when you:

  • visit my website;

  • complete a contact form;

  • email me;

  • sign up for my newsletter;

  • download a free resource;

  • register for or attend a webinar;

  • book a call or coaching session;

  • complete an audit, assessment, questionnaire or form;

  • attend a Zoom session or webinar;

  • make a payment;

  • provide a testimonial or feedback;

  • interact with my social media pages or adverts.

I may also receive limited information from third-party platforms I use to run my business, such as MailerLite, Squarespace, Acuity, Zoom, Google, Stripe and Meta.

4. How I use your personal data and my lawful bases

I will only use your personal data where data protection law allows me to do so.

To respond to enquiries

I use your name, contact details and message content to respond to enquiries.

Lawful basis: legitimate interests and/or taking steps before entering into a contract.

To send newsletters, free resources and marketing emails

If you sign up to receive emails, free resources, webinar updates or newsletters, I will use your name and email address to send those communications.

Lawful basis under UK GDPR: consent and/or legitimate interests, depending on the circumstances.
Marketing law: I will also comply with the Privacy and Electronic Communications Regulations.

You can unsubscribe at any time using the unsubscribe link in my emails or by contacting me at christine@christineom.com.

I do not add individuals to my marketing list without a lawful basis to do so.

To run webinars and events

I use your personal data to register you for webinars, send joining details, deliver the webinar, send follow-up information and provide replays where applicable.

If webinars are recorded, your name, image, voice, chat messages or contributions may be included in the recording if you choose to participate visibly or verbally.

Where possible, I will notify attendees before a webinar is recorded.

Lawful basis: contract, legitimate interests and/or consent, depending on the circumstances.

To provide coaching services

I use your personal data to book, deliver and manage coaching services, including preparing for sessions, keeping appropriate records and following up with you.

This may include personal information about your health, wellbeing, memory, lifestyle and brain health where you choose to share this with me.

Lawful basis: contract or steps before entering into a contract.
Special category condition: explicit consent, where health-related information is collected and used.

To record one-to-one coaching sessions

I may record some one-to-one coaching sessions, but only where this has been agreed with you.

Recordings may include your voice, image, personal information and any health or wellbeing information discussed during the session.

I will only use recordings for the purpose explained to you, such as allowing you to rewatch the session, preparing notes or supporting the coaching process.

Lawful basis: consent and/or contract.
Special category condition, where health information is included: explicit consent.

To provide reviews, assessments and written summaries

If you complete a Cognitive Load Review, questionnaire, form , I may use the information you provide to review your answers and prepare a written summary, recommendations or personalised response.

This may include information about your lifestyle, health, stress, memory, work patterns or wellbeing.

Lawful basis: contract or steps before entering into a contract.
Special category condition, where health information is included: explicit consent.

To process payments

If you buy services from me, I may use your personal data to process payments and keep transaction records.

Payments are processed securely through Stripe or another payment provider if notified to you. I do not store full card details myself.

Lawful basis: contract and legal obligation.

To collect and use testimonials

If you provide a testimonial, review or feedback, I may ask for your consent to use it in my marketing, on my website or on social media.

I will agree with you what information is shown, for example your name, initials, business name, photograph or testimonial wording.

Lawful basis: consent.

You can withdraw consent for future use by contacting me, although this will not affect use that has already taken place before withdrawal.

To run and improve my website and business

I may use personal data to:

  • maintain website security;

  • understand website performance;

  • manage bookings;

  • manage client communications;

  • keep business records;

  • improve services;

  • troubleshoot technical issues;

  • protect my legal rights.

Lawful basis: legitimate interests and/or legal obligation.

To advertise my services

If I use tools such as Meta/Facebook ads, Meta Pixel, custom audiences or similar advertising technologies, I may use personal data to deliver relevant advertising, understand advertising performance and reach people who may be interested in my services.

This may involve cookies or similar tracking technology, and in some cases sharing limited information such as email addresses with advertising platforms in a secure format for matching purposes.

Where required by law, I will obtain consent for non-essential cookies and tracking technologies.

Lawful basis under UK GDPR: consent and/or legitimate interests, depending on the activity.
Marketing/cookie law: I will comply with the Privacy and Electronic Communications Regulations.

If you do not currently use Meta Pixel, custom audiences or advertising cookies, this section should be removed or amended.

5. Marketing communications

I may send you marketing communications if:

  • you have consented to receive them;

  • you have requested a free resource;

  • you have signed up for my newsletter;

  • you have registered for a webinar;

  • you have asked for information about my services;

  • you are an existing or previous client and the law allows me to contact you.

Under the Privacy and Electronic Communications Regulations, email marketing rules differ depending on whether the recipient is an individual subscriber or a corporate subscriber.

If you are an individual, I will generally need your consent unless the “soft opt-in” applies. The soft opt-in may apply where you have bought from me or enquired about similar services, were given the opportunity to opt out when your details were collected, and are given an easy way to opt out in every email.

If you are a limited company or corporate subscriber, marketing emails may be sent without prior consent, but you will still always have the right to opt out.

You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by emailing christine@christineom.com.

I will not sell your personal data to third parties for marketing purposes.

6. Cookies and tracking technologies

My website may use cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. They help websites work properly, remember preferences, improve functionality and, where used, support analytics or advertising.

Cookies may include:

  • essential cookies needed for the website to function;

  • preference cookies;

  • analytics cookies;

  • advertising or tracking cookies, if used.

Essential cookies do not usually require consent.

Non-essential cookies, such as analytics, advertising or tracking cookies, generally require consent before they are placed on your device.

If I use tools such as Meta Pixel, Google Analytics or similar tracking technology, this will be explained in my Cookie Policy and you will be given appropriate choices where required.

You can also set your browser to refuse some or all cookies.

Read my full Cookie Policy here: [ Cookie Policy ]

7. Who I share your personal data with

I only share personal data where necessary for my business, where required by law, or where you have consented.

I may share personal data with:

  • Squarespace – website hosting and website platform;

  • MailerLite – email sign-up forms, newsletters and email marketing;

  • Acuity / Squarespace Scheduling – appointment bookings;

  • Zoom – webinars, calls and online sessions;

  • Google Workspace, Google Forms and Google Sheets – forms, assessments, documents and business administration;

  • Stripe – secure payment processing;

  • Meta/Facebook/Instagram – advertising, if used;

  • IT, system administration and software providers;

  • professional advisers, where necessary;

  • regulators, authorities or other third parties where legally required;

  • third parties involved in the sale, transfer or restructuring of my business, if applicable.

I require service providers to protect personal data and only use it in accordance with my instructions and data protection law.

8. International transfers

Some of the platforms and service providers I use may process personal data outside the UK.

Where personal data is transferred outside the UK, I will take steps to ensure appropriate safeguards are in place, such as:

  • transferring data to a country with UK adequacy arrangements;

  • using the UK International Data Transfer Agreement or UK Addendum to Standard Contractual Clauses;

  • relying on approved certification schemes or other recognised safeguards where applicable;

  • relying on explicit consent only where appropriate and where you have been informed of the possible risks.

9. Data security

I take reasonable steps to protect your personal data from loss, misuse, unauthorised access, disclosure or alteration.

These steps may include:

  • using trusted platforms with built-in security;

  • password protection;

  • account access controls;

  • secure devices;

  • HTTPS/SSL website security;

  • limiting access to personal data where possible;

  • reviewing the personal data I hold.

No online system is completely secure, but I take data protection seriously and use appropriate measures for the size and nature of my business.

If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, I will notify the Information Commissioner’s Office where legally required. If the breach is likely to result in a high risk to you, I will also notify you where required.

10. How long I keep your personal data

I only keep personal data for as long as necessary for the purpose for which it was collected, including to meet legal, regulatory, accounting, reporting or contractual requirements.

As a general guide:

Type of data

Retention period

Enquiries and general emails

Up to 12 months after the last contact, unless needed longer for legal or business reasons

Newsletter and marketing data

Until you unsubscribe or are removed as inactive

Webinar registration data

Up to 24 months after the webinar unless needed longer

Webinar recordings

Up to 24 months, unless used as part of ongoing course or replay content

One-to-one coaching recordings

Usually up to 12 months, unless agreed otherwise or needed for legal reasons

Client records and coaching notes

Up to 6 years after the end of the client relationship, unless a shorter or longer period is appropriate

Health-related information

Only for as long as necessary for the coaching purpose and any related legal reasons

Review, questionnaire and assessment responses

Up to 6 years if connected to paid services, or up to 24 months if not

Payment and transaction records

Generally up to 6 years

Testimonials

Until consent is withdrawn or the testimonial is no longer used

Technical website data

For the period set by the relevant cookie or platform

When personal data is no longer needed, I will delete it, anonymise it or securely archive it.

11. Your legal rights

Under UK data protection law, you have rights in relation to your personal data. These may include the right to:

  • request access to your personal data;

  • request correction of inaccurate data;

  • request deletion of your data;

  • object to processing;

  • request restriction of processing;

  • request transfer of your data;

  • withdraw consent where processing is based on consent;

  • complain to the Information Commissioner’s Office.

To exercise your rights, email:

christine@christineom.com

I may need to ask for information to confirm your identity before responding.

I aim to respond to valid requests within one month. If your request is complex or you have made multiple requests, this may take longer, but I will let you know.

You will not usually have to pay a fee. However, I may charge a reasonable fee or refuse to comply where a request is clearly unfounded, repetitive or excessive.

12. Automated decision-making

I do not use your personal data for automated decision-making that has legal or similarly significant effects on you.

13. Third-party links

My website may include links to third-party websites, plug-ins or applications.

If you click on those links, third parties may collect or share data about you. I am not responsible for the privacy practices of third-party websites. You should read their privacy notices before providing them with personal data.

14. Complaints

If you have concerns about how I use your personal data, please contact me first at:

christine@christineom.com

I will acknowledge your complaint within 30 days and investigate it without undue delay. I will keep you updated on progress and tell you the outcome. If you remain unhappy, you can complain to the Information Commissioner's Office the UK regulator for data protection matters, at

Website: www.ico.org.uk

You also have the right to complain directly to the Information Commissioner’s Office, ,

15. Changes to this privacy notice

I may update this privacy notice from time to time.

The latest version will always be available on my website and the “last updated” date will be amended when changes are made.

I recommend keeping a copy of previous versions for your records so you know which privacy notice applied at any particular time.