Hummingbird Mindsets with Ayesha – Teen Mental Health Coach, Somatic Trauma Informed Coach, IEMT Practitioner and Trainer.

Last updated: [December 2025]

Hummingbird Mindsets with Ayesha (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Notice explains how we collect, use, store, and protect personal information when you engage with our services.

We work primarily with teenagers, young adults, parents and carers, schools, Virtual Schools, and professional teams, and we take data protection and confidentiality seriously.

1. Who We Are

Organisation name: Hummingbird Mindsets with Ayesha
Role: Founder
Email: [email protected]
Website: www.hummingbirdmindsets.com

For the purposes of data protection law, Hummingbird Mindsets with Ayesha is the Data Controller.

2. What Information We Collect

We may collect the following personal data where relevant and necessary:

Personal information

Name

Email address

Phone number

Age or age range

Role (e.g. young person, parent/carer, professional)

Information about children and young people

First name or preferred name

Age or school year

Wellbeing information shared voluntarily

Programme participation or attendance information

Special category data
Where appropriate, this may include information about:

Mental health or emotional wellbeing

Care experience or education context

We only collect information that is necessary to deliver services safely and effectively.

3. How We Collect Information

Information may be collected through:

Website contact or enquiry forms

Booking or registration systems

Programme sign-up forms

Email or direct communication

Referrals from schools, Virtual Schools, or professionals

Coaching sessions, workshops, or digital products

4. How We Use Your Information

We use personal data to:

Deliver coaching, workshops, programmes, and resources

Communicate with you about services and updates

Support safeguarding and wellbeing responsibilities

Monitor and improve service quality

Meet legal, professional, or contractual obligations

We do not use personal data for automated decision-making or profiling.

5. Lawful Basis for Processing

Under UK GDPR, we process personal data using one or more of the following lawful bases:

Consent

Contract

Legal obligation

Legitimate interests, where these do not override individual rights

For children and young people, consent is obtained from a parent or carer where required.

6. Confidentiality and Safeguarding

All information is treated confidentially. However, confidentiality may be broken if:

There is a safeguarding concern

There is a risk of harm to the individual or others

We are legally required to share information

Any information shared will be limited to what is necessary and shared with appropriate services only.

7. Data Sharing

We do not sell or trade personal data.

Information may be shared with:

Schools, Virtual Schools, or commissioning organisations (where relevant and agreed)

Secure third-party systems used for service delivery (e.g. email or booking platforms)

Safeguarding or statutory services where legally required

All third parties are required to handle data securely and confidentially.

8. Data Storage and Security

Personal data is stored securely using:

Password-protected devices and systems

Secure online platforms

Restricted access to authorised individuals only

We take reasonable steps to protect personal information from loss, misuse, or unauthorised access.

9. How Long We Keep Information

Programme and service records are usually retained for up to 7 years, or in line with commissioning requirements

Enquiry and contact data is retained only as long as necessary

Safeguarding records are retained in line with safeguarding guidance

10. Your Rights

Under UK GDPR, you have the right to:

Access your personal data

Request corrections

Request deletion (where applicable)

Withdraw consent at any time

Object to or restrict processing

Request data portability

To exercise any of these rights, please contact us using the details above.

11. Children’s Privacy

Protecting children’s privacy is a priority. We only collect children’s data with appropriate consent and always act in the child’s best interests.

12. Complaints

If you have concerns about how your information is handled, please contact us first.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk

13. Changes to This Privacy Notice

This Privacy Notice may be updated from time to time. The most recent version will always be available on our website.