Privacy Policy

For You v Anxiety – The Academy, Courses & LynBot

Last updated: 17th September 2025

1. Introduction

This Privacy Policy sets out how You v Anxiety (a trading name of Lyn Penman, sole trader, and in future, services may also be provided through Mental Wellbeing Solutions Ltd, registered office: 128 City Road, London, EC1V 2NX) (“we”, “us”, “our”) collects, uses, stores and protects your personal data.

We are committed to safeguarding the privacy of our clients and complying with all applicable data protection laws, including:
- The UK General Data Protection Regulation (UK GDPR),
- The Data Protection Act 2018, and
- The Privacy and Electronic Communications Regulations 2003 (PECR).

2. Definitions

“Services” – our courses, memberships, hypnosis recordings, resources, and LynBot (AI-supported therapeutic tool).
“Personal Data” – information that identifies or can identify a living individual.
“Special Category Data” – sensitive personal data such as health information.
“LynBot” – our AI-supported service powered by Chatbase.
“User,” “you,” “your” – anyone using our Services.

3. Data We Collect

Identity Data – name, email address, and other identifiers.
Account & Billing Data – address, payment card details (processed securely via Stripe).
Course Data – enrolment details, course progress, resources accessed.
LynBot Data – text-based conversations. These are stored temporarily on secure servers in the United States (via Chatbase) and automatically deleted on a weekly basis. No names, emails or phone numbers are stored.
Technical Data – IP address, browser type, device details.
Marketing Data – preferences for receiving communications.
Special Category Data – only where voluntarily provided by you (e.g. information about anxiety or wellbeing when engaging with courses or LynBot).

4. How We Use Your Data

We process your data to:
- Provide and manage courses, memberships and resources.
- Deliver support through LynBot.
- Process payments and manage subscriptions.
- Communicate with you (updates, offers, service changes).
- Comply with legal obligations (e.g. accounting, tax).
- Improve our Services.

We will never sell your personal data.

5. Legal Basis for Processing

Under UK GDPR, the lawful bases we rely on are:
- Consent – e.g. when you sign up for newsletters.
- Contract – to deliver paid services.
- Legitimate Interests – to improve services, protect against misuse.
- Legal Obligation – compliance with accounting or tax law.

6. Data Sharing

We may share data with trusted third parties including:
- Payment processors – Stripe.
- Email and marketing providers.
- Analytics providers.
- Chatbase (for LynBot services).

All third parties are required to comply with GDPR.

7. International Transfers

LynBot data is processed and stored by Chatbase on servers in the United States. Adequate safeguards (Standard Contractual Clauses) are in place to ensure compliance with UK GDPR.

8. Data Storage & Retention

Course and account data: retained for the duration of your membership and up to 6 years afterwards for legal purposes.
LynBot conversations: stored temporarily and deleted weekly.
Marketing data: retained until you unsubscribe.

9. Security

We apply appropriate technical and organisational measures to protect data, including encryption, access controls, and monitoring. Chatbase uses encryption, rate limiting, and SOC 2 compliant systems.

10. Cookies

We use cookies for essential functionality, analytics and marketing. You may manage cookies through your browser settings. See our Cookie Policy for further details.

11. Your Rights

You have rights under UK GDPR, including to:
- Access your data.
- Rectify inaccurate data.
- Erase data (“right to be forgotten”).
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.

Requests may be made by contacting lyn@lynpenman.com. We will respond within one month.

12. Children’s Data

Our Services are intended for individuals aged 16 and over. We do not knowingly collect data from children under 16. If we discover such data has been provided, it will be deleted.

13. Health & Hypnosis Information

Some courses may include or recommend hypnosis. By engaging with such content, you confirm you do not have:
- Active psychosis, or
- Uncontrolled epilepsy.

Our Services are not a substitute for medical advice or treatment. Always consult a qualified professional for health matters.

14. Changes to this Policy

We may update this Privacy Policy at any time. A revised version will be posted with a new “last updated” date.

15. Business Information

Trading Name: You v Anxiety
Sole Trader: Lyn Penman
Future Services May Be Provided By: Mental Wellbeing Solutions Ltd
Registered Office: 128 City Road, London, EC1V 2NX
Email: lyn@lynpenman.com