Privacy Policy
Last updated: 25 August 2026
This policy explains what personal information Emma Voysey Health collects, why, what we do with it, and what you can ask us to do about it. It is written in plain English on purpose.
1. Who we are
Emma Voysey Health is run by Emma Voysey, based in Andorra.
For anything to do with your personal information, email [email protected].
We are the data controller for the information described in this policy, which means we decide what is collected and why.
2. What we collect
When you buy a course or programme:
Your name, email address and billing address
What you bought, when, and what you paid
Your course progress and any homework or notes you submit
We do not see or store your full card number. Card payments are processed by Stripe, and Stripe holds the card details, not us.
When you join our email list:
Your name and email address
Whether you opened an email or clicked a link in it
When you visit our website:
Standard technical information such as your IP address, browser type and the pages you looked at
Cookies, described in section 8
When you send us health information:
If you buy a test analysis, or send us blood results, hair tissue mineral analysis, symptoms or medical history, that is health information and the law treats it as a special category of personal data. We only collect it because you have chosen to send it to us for that purpose, and we ask for your explicit consent before we work with it. We do not share it with anyone else, and you can ask us to delete it at any time.
3. Why we use it, and on what legal basis:
To provide what you bought. Basis: performance of a contract with you.
To give you access to the course portal and send you the emails that come with it. Basis: performance of a contract.
To send you marketing emails. Basis: your consent. You can withdraw it at any time using the unsubscribe link at the bottom of every email.
To analyse a test you have sent us. Basis: your explicit consent.
To keep records for tax and accounting. Basis: our legal obligations.
To keep the website working and secure. Basis: our legitimate interests in running the business.
4. Who we share it with:
We do not sell your information to anyone, ever, and we do not allow anyone to advertise to you through us.
We use a small number of companies to run the business, and they process information on our behalf:
Stripe, for payments
Content Creator Machine (a GoHighLevel product), for our website, course portal, email sending and customer records
Google, for email and website analytics
Our accountant, for tax records
Each of these is bound to use your information only for the service they provide to us.
Some of these companies are based outside the UK and the European Economic Area, mainly in the United States. Where that happens, transfers are covered by the standard safeguards those companies put in place, such as Standard Contractual Clauses.
5. How long we keep it:
Customer and purchase records: for as long as you have access to a course, and then for the period our tax obligations require.
Email list: until you unsubscribe, or until you have not opened anything from us for two years, whichever comes first.
Health information and test results: for twelve months after the analysis, unless you ask us to delete it sooner.
Website analytics: typically 14 months.
6. Your rights
Wherever you live, you can ask us to:
Tell you what we hold about you, and give you a copy
Correct anything that is wrong
Delete your information
Stop using it for a particular purpose
Send it to you or somebody else in a portable format
Withdraw consent you have given, at any time
Email [email protected] and we will respond within one month. There is no charge.
If you are in the UK you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the EU you can complain to your national data protection authority. If you are in Andorra, that is the Andorran Data Protection Authority.
7. Marketing emails:
Every marketing email we send has an unsubscribe link at the bottom, and it works. One click, no questions, no form.
Emails about a course you have actually bought are different. Those are service emails, and you will keep receiving them for as long as you have access, because they contain the things you paid for.
8. Cookies:
Our website uses cookies, which are small files stored by your browser.
Necessary cookies keep the site working, remember you are logged in, and keep your basket. The site cannot work without these.
Analytics cookies tell us which pages people read and where they came from. These are not used to identify you personally.
You can block or delete cookies in your browser settings. If you block the necessary ones, parts of the site will stop working.
9. Children:
Nothing we sell is intended for anybody under 18, and we do not knowingly collect information about children. If you believe we have, email us and we will delete it.
10. Security:
We use reputable providers, we keep access to your information limited to those who need it, and we use two-factor authentication on the systems that hold it. No system is perfectly secure, and we will tell you promptly if anything happens that affects your information.
11. Changes to this policy:
If we change this policy we will update the date at the top. If the change is significant, we will tell you by email.
12. Contact:
We read everything ourselves.