Privacy Notice | Dr Lucy Hooper

In plain English

This site is run by Dr Lucy Hooper. The legal data controller is Coyne Medical Ltd.
If you subscribe to Clinical Updates or enrol on a course, we store your email and professional details.
We will only contact you about clinical education — no spam, no selling your data.
We may share your data with related education companies directed by Dr Lucy Hooper or Dr Hugh Coyne, for educational purposes only.
You can unsubscribe or ask us to delete your data at any time.

Section 1

Who we are

Data controller: Coyne Medical Ltd, 660 Fulham Road, London SW6. Registered in England and Wales.

Platform: drlucyhooper.com is operated by Dr Lucy Hooper, co-founder and director of Coyne Medical Ltd, as a medical education platform. For the purposes of UK GDPR and the Data Protection Act 2018, Coyne Medical Ltd is the data controller for all personal data collected via this website.

ICO registration: Coyne Medical Ltd is registered with the Information Commissioner's Office. Registration number: ZA158836.

Data protection contact: [email protected]

Section 2

What data we collect and why

Data collected	Purpose	Lawful basis	Retention
Email address	Sending Clinical Updates and course notifications	Consent	Until unsubscribed or deletion requested
Professional role / specialty	Ensuring content is relevant; HCP verification	Consent	Until unsubscribed or deletion requested
Country	Tailoring regulatory content (UK vs US)	Consent	Until unsubscribed or deletion requested
HCP confirmation	Ensuring clinical content reaches appropriate audience only	Consent + Legitimate interest	Until unsubscribed or deletion requested
Course enrolment data	Delivering purchased courses; financial records	Contract + Legal obligation	7 years (financial records)
Contact form submissions	Responding to professional enquiries	Legitimate interest	2 years from last contact
Course progress and completion	Issuing CPD certificates	Contract	3 years from completion

      This website is intended for qualified healthcare professionals. We do not knowingly collect data from members of the public for clinical education purposes. If you indicate during sign-up that you are not a healthcare professional, your data will not be added to our clinical education subscriber list.
    

Section 3

How we collect your data

Typeform — subscriber sign-up and course enrolment forms
Contact form — enquiries submitted via drlucyhooper.com
Stripe — payment processing (Stripe processes payment data directly; we do not store card details)
Vimeo — course video delivery; Vimeo may collect usage data per their own privacy policy
Cloudflare — website hosting and security

Section 4

Who we share your data with

Data processors (companies that process data on our behalf under contract):

Typeform — form data collection and storage
Google LLC — Google Sheets (subscriber list), Google Drive (course materials), Gmail (notifications), processed under a Data Processing Agreement compliant with UK GDPR
Stripe Inc — payment processing
Vimeo Inc — video hosting
Cloudflare Inc — website hosting, CDN, and Zero Trust access control

Related education companies:

      We may share your data with associated companies in which Dr Lucy Hooper or Dr Hugh Coyne holds a directorship, where those companies are engaged in medical education, clinical training, or related healthcare professional development, and where sharing is necessary to deliver educational content you have consented to receive. Any such companies will process your data in accordance with UK GDPR and will not use it for unrelated commercial purposes. You will be informed of any such sharing at the point of collection or before sharing takes place, and you retain the right to object at any time.
    

We will never:

Sell your personal data to third parties
Share your data with advertisers or commercial partners unrelated to medical education
Transfer your data outside the UK/EEA without appropriate safeguards in place

Legal disclosure: We may disclose your data if required to do so by law, court order, or a regulatory authority.

Section 5

Your rights under UK GDPR

You have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — ask us to delete your data ("right to be forgotten")
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a portable format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — withdraw at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

Section 6

Unsubscribing and opting out

Every email we send includes an unsubscribe link. You can also opt out at any time by emailing [email protected] with the subject "Unsubscribe".

On unsubscribing, your email address will be removed from our active subscriber list within 5 working days. We may retain a suppression record (email address only, flagged as unsubscribed) to prevent accidental re-addition to our list.

Section 7

Cookies

drlucyhooper.com uses minimal cookies. We do not use advertising or tracking cookies. The cookies in use are:

Cloudflare — security and performance cookies (strictly necessary)
Vimeo — video player cookies when you watch course content (functional)
Typeform — form session cookies (functional)

We do not use Google Analytics, Facebook Pixel, or any behavioural advertising cookies on this site.

Section 8

Security

We take reasonable technical and organisational measures to protect your data, including:

Cloudflare Zero Trust access control for course content
HTTPS encryption across the entire site
Access-controlled Google Sheets for subscriber and enrolment data
Stripe's PCI-DSS compliant payment processing (we never handle card data directly)

In the event of a data breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR Article 33.

Section 9

Changes to this notice

We may update this privacy notice from time to time. The date at the top of this page reflects the most recent revision. For material changes, we will notify active subscribers by email.

Data protection enquiries

Data controller: Coyne Medical Ltd, 660 Fulham Road, London SW6

Platform operated by: Dr Lucy Hooper, Co-Founder and Director

Email: [email protected]

Clinic: coynemedical.com · 020 7731 3077

Governed by the laws of England and Wales. Jurisdiction: English courts.