Privacy Policy

Last updated: 20 March 2026

Lulla by Claire is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The data controller for Lulla by Claire is Claire [Surname], operating as a sole trader in the United Kingdom.

Contact: info@lullabyclaire.com

Website: www.lullabyclaire.com

2. What Data We Collect

We may collect and process the following personal data:

•       Your name and contact details (email address, phone number)

•       Your baby's name, age, and sleep-related information

•       Information about your family situation and support network

•       Health-related information where relevant to sleep coaching (e.g. medical conditions affecting sleep)

•       Payment information (processed securely via our payment provider - we do not store card details)

•       Communications shared via WhatsApp, email, or video call

3. How We Use Your Data

We use your personal data to:

•       Provide and manage the sleep coaching services you have booked

•       Communicate with you throughout your coaching package

•       Send relevant follow-up information or resources

•       Process payments

•       Comply with our legal obligations

We will never sell your data to third parties or use it for unsolicited marketing without your explicit consent.

4. Lawful Basis for Processing

We process your data on the following lawful bases:

•       Contract: to fulfil the services you have booked with us

•       Legitimate interests: to provide effective sleep coaching support

•       Legal obligation: where required by law

•       Consent: for any marketing communications (you may withdraw consent at any time)

5. Special Category Data

Where you share health-related information about yourself or your baby (for example, information about postnatal depression, feeding difficulties, or medical conditions), this is treated as special category data under UK GDPR. We process this data only with your explicit consent and only to the extent necessary to provide our services.

6. How We Store and Protect Your Data

Your data is stored securely. We use [e.g. encrypted email, secure cloud storage] to protect your information. Access is restricted to Claire [Surname] only. WhatsApp communications are subject to WhatsApp's own privacy and security measures.

We retain your data for no longer than 2 years after the completion of your coaching package, after which it is securely deleted, unless we are required to retain it for legal purposes.

7. Sharing Your Data

We do not share your personal data with third parties, except:

•       Payment processors (e.g. Stripe) who are bound by their own privacy policies

•       Where required by law or regulatory authority

We will never share your information with other clients, or use your story publicly without your explicit written consent.

8. Your Rights

Under UK GDPR, you have the right to:

•       Access the personal data we hold about you

•       Request correction of inaccurate data

•       Request deletion of your data ('right to be forgotten')

•       Object to or restrict processing of your data

•       Data portability

•       Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at info@lullabyclaire.com. We will respond within 30 days.

9. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated effective date.