1. Who we are
Leilah Mirza Coaching and Healing Ltd is the data controller. Company number: 16242713. Registered office: Ground Floor Nautica House, Waters Meeting Road, Bolton, United Kingdom, BL1 8SW. Contact: info@leilahmirzacoachingandhealing.com.
2. Information we collect
- Identity and contact details, such as your name, email address and telephone number.
- Application, enquiry, booking and payment information. The website stores your application contact details, suitability outcome and consent status; detailed written answers are passed to Calendly when you continue to booking.
- Marketing preferences and interactions with emails or resources.
- Information you choose to share during coaching or wellbeing sessions, which may include sensitive information about health, experiences or beliefs.
- Technical information produced when you use the website or embedded services.
3. How and why we use information
We use personal information to respond to enquiries, assess suitability, arrange and provide services, administer payments, deliver resources, maintain appropriate client records, meet legal obligations, protect our services and send marketing where you have consented.
4. Lawful bases
Depending on the purpose, we rely on performance of a contract or steps requested before a contract, legal obligations, legitimate interests in operating and protecting the business, and consent for optional marketing. Where special-category information is processed, we rely on an appropriate additional condition, which may include your explicit consent. You may withdraw consent at any time.
5. Service providers and sharing
We do not sell personal information. We may use trusted providers for website hosting, email delivery and marketing, scheduling, coaching communications, payment processing, file storage and professional administration. These currently include ChatGPT Sites, Brevo, Calendly, Voxer and relevant payment providers. Information may also be disclosed where required by law, safeguarding duties or legal claims.
6. International processing
Some providers may process information outside the UK. Where this occurs, we use providers and safeguards intended to protect information in accordance with applicable data-protection law.
7. Retention
We keep information only for as long as reasonably necessary for the purpose collected, including service delivery, professional record-keeping, safeguarding, tax, accounting, dispute resolution and legal requirements. Marketing information is retained until you unsubscribe or consent is otherwise withdrawn, subject to a minimal suppression record where necessary.
8. Security and confidentiality
We use appropriate organisational and technical safeguards and limit access to those who need it. No internet service can guarantee absolute security. Session confidentiality is subject to legal obligations and circumstances involving serious risk or safeguarding concerns.
9. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or transfer of your information, object to certain processing, and withdraw consent. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
10. Marketing and cookies
You can unsubscribe from marketing emails at any time using the link in an email or by contacting us. Embedded third-party forms and booking services may use necessary or functional cookies. Any non-essential analytics or advertising technologies will be used only in accordance with applicable consent requirements.
11. Updates
Leilah AI and Your Healing Space
The three-question guest trial asks for your first name and email without verification. It does not sign you into an existing account or provide access to saved memory. Supabase stores these contact details privately to register the trial and prevent repeated allowances; they are cleared after 90 days when trial cleanup runs. A non-public email hash and usage metadata enforce the three-question limit. Trial sessions expire after 24 hours. A hashed network identifier limits abuse and is cleared from request records after a day when cleanup runs. Registration does not subscribe you to marketing. Paid accounts and saved memory use verified sign-in.
Leilah AI is an AI companion, not Leilah herself, therapy or crisis support. Leilah does not monitor the chat. Account sign-in, meditation storage and message allowances use Supabase; messages and recent conversation context are sent to OpenAI to generate replies. Please avoid identifying or sensitive personal details. The app journal stays on your device and is not sent to the AI.
Chat memory is optional and off by default. When enabled on an eligible account, up to 200 messages and a note you choose to write are stored in Supabase. The latest 12 saved messages and your note may be used for subsequent replies. Switching memory off pauses use and saving; use Forget everything to delete stored chats and the note. After 180 days without an update, saved conversation context is no longer used, but this is not an automatic physical deletion schedule. Provider retention rules and international processing may apply.
When payments are available, Stripe processes card details on its hosted checkout. Account email and an account identifier are shared for app billing and membership access. Chat messages, memory notes and journal entries are not sent to Stripe. You can manage eligible subscriptions through the app’s billing controls.
We may update this policy when our services, providers or legal obligations change. The current version will remain available on this website.