Privacy Statement
Last updated: 22 September 2026
This Privacy Statement explains how Amy O’Hara, trading as Amy Elizabeth (“I”, “me” or “my”), collects, uses and protects personal information when you visit amyelizabeth.co.uk, access my resources, join my email list, contact me or book a service.
I respect your privacy and only collect and use personal information where I have a reason to do so.
1. INFORMATION I MAY COLLECT
Depending on how you interact with me or my website, I may collect information including:
your name
your email address
information you provide when contacting me
information you provide when booking a 1:1 session
booking and appointment information
purchase and transaction information
communications between you and me
information relating to your email subscription preferences
technical information about how you access and use my website, such as browser, device and website usage information
information collected through cookies and similar technologies
I only ask for information that is reasonably necessary for the relevant purpose.
2. CLEAR THE MIRROR + EMAILS
When you enter your email address to receive Clear the Mirror, you are also signing up to receive occasional emails from me, as explained on the signup page.
I use your email address to:
send you access to Clear the Mirror;
manage your subscription; and
occasionally contact you about my work, resources, services or other things I believe may be relevant to my subscribers.
I do not intend to fill your inbox. Emails may be irregular and are only sent when I have something I want to share.
You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in those emails.
Where UK data protection law applies, I rely on your consent for these marketing communications. You may withdraw that consent at any time.
Unsubscribing from marketing communications does not affect the lawfulness of any processing carried out before you withdrew your consent.
3. 1:1 BOOKINGS
If you book a 1:1 session with me, I may collect information necessary to arrange and provide the session, including your name, email address, booking details and information you choose to provide in connection with your booking.
Bookings are currently managed using Calendly.
Calendly processes scheduling information in order to provide its booking service. Calendly may process information on my behalf as part of providing that service.
Payment for a session is currently processed through Stripe.
I do not receive or store your complete payment card details. Payment information is handled by the relevant payment provider.
4. PAYMENTS
Where you purchase a service or, in future, a digital resource from me, information relating to the transaction may be processed by Stripe or another payment provider identified to you at the time of purchase.
I may receive information confirming your payment and transaction, such as your name, email address, amount paid, date of payment and transaction status.
Payment providers process certain information under their own privacy terms and legal obligations.
If I change or add payment providers in future, I will update this Privacy Statement where appropriate.
5. WHY I USE YOUR INFORMATION
I may use personal information where necessary to:
provide a resource you have requested;
manage my email list and send communications you have signed up to receive;
respond to messages or enquiries;
arrange and provide booked services;
process and administer payments and purchases;
maintain records relating to my business;
operate, secure and improve my website;
understand how my website is being used;
prevent misuse, fraud or security issues;
comply with legal, tax, accounting or regulatory obligations; and
establish, exercise or defend legal rights where necessary.
Where UK data protection law applies, my lawful basis for processing will depend on the purpose.
This may include your consent, taking steps at your request or performing a contract with you, compliance with a legal obligation, or my legitimate interests in operating, protecting and improving my business where those interests are not overridden by your rights.
6. WHO MAY PROCESS YOUR INFORMATION
I do not sell your personal information.
I use third-party services to operate my website and business. Depending on how you interact with me, your information may be processed by providers including:
Squarespace — website hosting, forms, subscriber management, email communications and website functionality.
Calendly — appointment scheduling and booking management.
Stripe — payment processing and transaction management.
These providers process information in accordance with their own privacy practices and, where applicable, on my behalf in order to provide their services.
I may also disclose personal information where required by law, where reasonably necessary to protect my legal rights, or where necessary to prevent or respond to fraud, security issues or misuse.
7. INTERNATIONAL PROCESSING
Some of the services I use operate internationally. This means your personal information may be processed or stored outside New Zealand or the country in which you live.
Where personal information is disclosed or transferred internationally, I take reasonable steps to use providers and arrangements designed to provide appropriate protection for that information in accordance with applicable privacy law.
Where UK data protection law applies, international transfers will be handled using an applicable lawful transfer mechanism where required.
8. HOW LONG I KEEP INFORMATION
I keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain appropriate business and transaction records, comply with legal, tax or accounting obligations, resolve disputes and protect legal rights.
Different information may therefore be retained for different periods.
If you unsubscribe from marketing emails, I will stop using your email address to send those communications. Limited information may be retained where necessary to record and respect your unsubscribe request.
9. COOKIES + WEBSITE DATA
My website is hosted by Squarespace.
Squarespace and other technologies used by the website may use cookies and similar technologies to operate the site, maintain security, remember preferences and understand how visitors use the website.
Some cookies are necessary for the website to function. Other cookies or similar technologies may be used for analytics or other purposes, depending on the website settings and the choices available to you.
Where consent is required by applicable law for non-essential cookies, those cookies should not be used unless the required consent has been obtained.
You can also control certain cookies through your browser settings.
10. KEEPING YOUR INFORMATION SAFE
I take reasonable steps to protect personal information against loss, unauthorised access, disclosure, alteration or misuse.
I also use established third-party providers to operate parts of my website and business.
However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.
11. YOUR PRIVACY RIGHTS
Depending on where you live and the privacy laws that apply to you, you may have rights relating to your personal information.
Under New Zealand privacy law, this includes rights to request access to personal information I hold about you and to ask for incorrect information to be corrected.
Where UK data protection law applies, you may also have rights which can include:
access to your personal data;
correction of inaccurate personal data;
deletion of your personal data in certain circumstances;
restriction of processing in certain circumstances;
objection to certain processing;
data portability where applicable; and
withdrawal of consent where processing is based on consent.
These rights are subject to the circumstances and any exceptions provided by applicable law.
If you would like to exercise a privacy right, contact me using the details below.
You may also have the right to make a complaint to the relevant privacy or data protection authority in your country.
12. THIRD-PARTY WEBSITES
My website or resources may contain links to websites or services operated by other organisations.
I am not responsible for the privacy practices of websites or services I do not control. You should review their privacy information if you choose to use them.
13. CHANGES TO THIS PRIVACY STATEMENT
I may update this Privacy Statement from time to time to reflect changes to my website, services, resources, technology, business practices or legal obligations.
The current version will be published on this page and the “last updated” date will be changed when appropriate.
If I begin using personal information for a materially different purpose, I will provide any additional notice or obtain any consent required by applicable law.
14. CONTACT
Amy O’Hara
trading as Amy Elizabeth
Website: amyelizabeth.co.uk
If you have a question about this Privacy Statement, how I use your personal information, or you would like to exercise a privacy right, you can contact me through amyelizabeth.co.uk.