Privacy Policy

This Privacy Policy explains how By EllPill ("we", "us", "our") collects, uses and protects your personal data when you visit our website, purchase a course or get in touch with us. It applies to all visitors and customers, with specific protections for individuals in the UK and European Economic Area under UK GDPR and the Data Protection Act 2018.

By EllPill is the data controller responsible for your personal data.

By EllPill
Unit 8a, Progress Business Park, Orders Lane, Kirkham, Preston, PR4 2TZ, United Kingdom
Email: info@byellpill.com

We may collect identity data (name, business name), contact data (email, phone, postal address), account data (login details), transaction data (purchases and payment history — we do not store full card details), course progress data, marketing preferences, and technical data (IP, browser, device, pages visited).

We use your personal data to deliver courses and services, process payments and issue certificates, send course-related communications, respond to enquiries, send marketing only with your consent, comply with legal and regulatory requirements, improve our website and services, and detect and prevent fraud.

We rely on the following lawful bases under UK GDPR: Contract (to deliver courses and services you've purchased), Consent (for marketing communications, which you can withdraw at any time), Legitimate interests (to improve services and prevent fraud), and Legal obligation (for tax, accounting and regulatory compliance).

We may share data with carefully selected third parties including Shopify (our e-commerce platform), payment processors (Stripe, PayPal), email service providers, accreditation bodies, cloud hosting and analytics providers, and legal/professional advisors where necessary.

Some service providers may be based outside the UK. Where we transfer your personal data internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the UK Information Commissioner's Office.

We keep your data only as long as necessary: course records and certifications for 7 years (accreditation and legal compliance), marketing data until you withdraw consent, financial records for 7 years (UK tax law), and website analytics typically 14–26 months.

Our website uses cookies and similar technologies to provide essential functionality, remember your preferences, process secure payments and analyse site performance. You can control or disable cookies through your browser settings — though essential cookies are required for the site to function properly.

You have the right to access your personal data, correct inaccurate data, request deletion (subject to legal exceptions), restrict processing, object to certain processing, request data portability, withdraw consent for marketing at any time, and lodge a complaint with the Information Commissioner's Office. To exercise these rights, email info@byellpill.com.

Our services are intended for adults (18+). We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

We use industry-standard security measures including encryption in transit, secure payment processing and access controls. However, no system is 100% secure. If we become aware of a data breach affecting your personal data, we will notify you and the Information Commissioner's Office as required by law.

We may update this Privacy Policy from time to time. The version published on our website is the version that applies. The "Last updated" date shows when the policy was last changed.

Questions or concerns about how we handle your data?

By EllPill
Email: info@byellpill.com

If you're not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office: ico.org.uk · 0303 123 1113