Privacy Policy

Michelle Cyril Ltd Privacy Notice –

This privacy notice explains how Michelle Cyril Ltd (incorporating Family Sleep Specialist) (“we”, “us”, “our”) collects, uses and protects personal data when you use our website or our services.

Michelle Cyril Ltd is committed to protecting your privacy and handling your personal data transparently and securely, in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

We may update this notice from time to time. Please review this page periodically to ensure you are happy with any changes.

Michelle Cyril Ltd is the data controller responsible for the personal data described in this notice.

If you have any questions about this notice or how we use your data, please contact us at [email protected]

What we collect

We collect the following information:

 name

 email address

 phone number

 physical address

 health data to help us provide our services

 personal data relating to children, provided with the consent of a parent or legal guardian

What we do with the information we gather

We require this information to understand your needs and provide you with our services, and in particular for the following reasons:

 to provide our services to you and, where applicable, to your children

 to manage our relationship with you

 to operate, maintain and improve our services

 to meet legal and regulatory obligations

We may from time to time need to disclose certain information, which may include your Personal Data, to comply with a legal requirement, such as a law, safeguarding, regulation, court order, subpoena, warrant, in the course of a legal proceeding or in response to a law enforcement agency request. Also, we may use your Personal Data to protect the rights, property or safety of Michelle Cyril Ltd, our clients or third parties.

If there is a change of control in one of our businesses (whether by merger, sale, transfer of assets or otherwise) client information, which may include your Personal Data, could be disclosed to a potential purchaser under a confidentiality agreement.

We would only disclose your information in good faith and where required by any of the above circumstances.

Our lawful basis for processing your data

We process personal data under the following lawful bases, depending on the activity:

Contract (GDPR Article 6(1)(b))

 Where processing is necessary to deliver services you have requested

 To manage agreements with clients, suppliers and staff

Consent (GDPR Article 6(1)(a))

 For children’s services, where consent is provided by a parent or legal

guardian

 For marketing communications, where applicable

 For non-essential cookies

You may withdraw consent at any time.

Legitimate Interests (GDPR Article 6(1)(f))

 To manage and maintain our relationship with you

 To improve our services

 To ensure the security and integrity of our systems

We carry out Legitimate Interests Assessments where this basis is relied upon.

Legal Obligation (GDPR Article 6(1)(c))

 To comply with legal requirements (e.g. tax, employment and safeguarding

obligations)

Where we process health data, we rely on:

 Explicit consent (GDPR Article 9(2)(a)), and/or

 Processing necessary for the provision of health or social care services

(GDPR Article 9(2)(h)), where applicable

We apply additional safeguards, including access controls and confidentiality

obligations, when processing special category data.

Children’s data

We process children’s personal data only where:

 Consent has been provided by a parent or legal guardian

 The processing is necessary to deliver services requested

We take appropriate steps to verify parental responsibility and always process children’s data in their best interests. Parents or guardians may exercise data protection rights on behalf of their children.

Your Privacy Choices and Rights

Your choices

You can choose not to provide us with personal data. If you choose to do this, you can continue to use the Michelle Cyril Ltd website and browse its pages, but we will not be able to continue a relationship without personal data.

You can block cookies by activating a setting on our cookie banner, allowing you to refuse cookies. You can also delete cookies through your browser settings. If you turn off cookies, you can continue to use the Michelle Cyril Ltd website and browse its pages. See the cookie section below for further detail.

You can opt-out of marketing by clicking the unsubscribe option in any marketing communications. 

Your rights

You can exercise your rights by sending an email to [email protected]

You have the right to access the information we hold about you. This includes the right to ask us supplementary information about:

 the categories of data we’re processing

 the purposes of data processing

 the types of third parties to whom the data may be disclosed

 how long the data will be stored (or the criteria used to determine that period)

 your other rights regarding our use of your data

We will provide you with the information within one month of your request unless doing so would adversely affect the rights and freedoms of others (e.g. another person’s confidentiality or intellectual property rights). We’ll tell you if we can’t meet your request for that reason.

You have the right to make us correct any inaccurate personal data about you.

You can object to us using your data for profiling or making automated decisions about you.

You have the right to port your data to another service. We will give you a copy of your data in CSV format so that you can provide it to another service.

If you ask us, and it is technically possible, we will directly transfer the data to the other service for you. We will not do so to the extent that this involves disclosing data about any other individual.

You have the right to be ‘forgotten’ by us subject to legal and contractual limitations.

You can do this by asking us to erase any personal data we hold about you if it is no longer necessary for us to store the data for purposes of your relationship with Michelle Cyril Ltd or any other law.

You have the right to complain about our use of your data; please tell us first so we have a chance to address your concerns. If we fail in this, you can address any complaint to your local authority by following this link:

https://globalprivacyassembly.org/participation-in-the-assembly/members-online/

These rights apply to all the data categories listed in the ‘Data we collect and how we collect it’ section.

Security

We do everything we can to ensure the security of your data.

In today’s data-driven and connected world, the security of your data is more critical than ever. We recognise this and have implemented security to keep your data safe. All staff are bound by confidentiality and will never disclose or share your data unless authorised to do so.

Michelle Cyril Ltd’s data protection role

Michelle Cyril Ltd is a controller in relation to all data we collect. As a controller we use 3 rd parties to process data.

Where is your data stored?

Like most companies, Michelle Cyril Ltd utilises 3 rd parties to provide services to our clients and to store data.

These 3 rd parties will be based in the UK, EEA and in some cases outside of all three territories.

Michelle Cyril Ltd conducts thorough reviews of all its 3 rd parties, including implementing data processing agreements, where possible, to ensure that every possible safeguard is in place and that the data is secure. Should there be a possibility that data could be exposed to a high level of risk, a Data Protection Impact Assessment will be completed and will be available upon request.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

 UK adequacy regulations

 The UK International Data Transfer Agreement (IDTA)

 The UK Addendum to EU Standard Contractual Clauses

The third parties we use include: Microsoft, WhatsApp, Google, Zoom, Funnel Sketchers, Many Chat, Facebook, Instagram, LinkedIn and our virtual assistant as an outsourced service.

If you would like to see a full list of processors who Michelle Cyril Ltd shares your data with please contact us.

Links To Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.

Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy notice applicable to the website in question.

Marketing

When you provide us with your details or where we have collected your data lawfully, we will send you marketing emails, contact you by Facebook Messenger or

WhatsApp to keep in touch and keep you updated on our services.

These messages will be specific to our services; we do not sell your data or share it with other companies for advertising purposes; your data is used only to promote us.

Our marketing messages are sent via a specialist marketing tool. You can opt-out of marketing at any time by clicking the unsubscribe link in your emails or by contacting

us directly.

There will be occasions when we send administrative messages. These messages are not deemed marketing and cannot be opted out of. Marketing and administration emails you receive from us contain a tracking pixel. This pixel lets us know things such as our email campaigns; open rates and click rates.

The pixel also lets us know if an email has not been delivered to update our records and keep them current.

Payment processing

Michelle Cyril Ltd does not collect your card payment details online or process them in any way. Payments are taken via funnel sketchers and stripe, card details are collected and stored there.

How long is your data stored?

We retain personal data only for as long as necessary for the purposes for which it was collected.

Typically, personal data is retained for up to 5 years, unless a longer retention period is required by law or justified by safeguarding or contractual obligations. We conduct annual data reviews and securely delete data that is no longer required. You can requests a shorter retention period by emailing us on [email protected].

Cookies

We use cookies to enhance your browsing experience and improve our website.

Cookies are small files stored on your device that help us recognize you when you return.

Our cookies include:

 Necessary cookies – essential for site functionality.

 Analytics cookies – track site usage to help us improve.

 Preference cookies – remember your settings like language or location.

 Advertising cookies – deliver relevant ads and measure campaign effectiveness.

You can manage your cookie preferences via the cookie banner. For more on cookies and how to control them, visit aboutcookies.org.

First-party cookies are set directly by our site and are required for full functionality. Disabling them may affect site use.

Third-party cookies include tools that collect anonymous data on how you interact with our site (e.g., mouse clicks, scrolling) to improve usability. This data is aggregated and not shared externally.

Breaches

Should a breach of your data occur that is likely to result in harm to the rights and freedoms of you as an individual or group of individuals, we will notify you without undue delay, and where required, within 72 hours along with the appropriate supervisory authority, where applicable.

Additional information

Michelle Cyril Ltd has not appointed a statutory Data Protection Officer as we are not required to by law. However, we have committed resources to manage our compliance with all applicable Data Protection laws.

A Record of Processing Activities (ROPA), in which the lawful basis for processing all of our data is maintained. Wherever Legitimate Interests is relied upon, an impact assessment has been created, available upon demand to those whose data is included.

As of January 1st, 2021, the UK left the European Economic Area (EEA). As Michelle Cyril Ltd does not process the data of EU Residents/Citizens we are not required to appoint a European representative to comply with Article 27 of the GDPR.

This notice was created in December 2025 and is due for review no less than one calendar year from this date.

How to contact us

This website is owned and operated by Michelle Cyril Ltd.

Please email [email protected] to speak with us directly.