

You can access all the legal documents here: Cookie Policy Privacy Policy Terms & conditions of Sale Website Terms & Conditions
Privacy Policy
Red Hot Mess Ltd
Last updated: June 2026
Introduction
Welcome to Red Hot Mess Ltd's privacy policy. We respect your privacy and are committed to protecting your personal data. This policy explains who we are, how and why we collect, store, use and share your personal information, and your rights in relation to it.
We collect, use and are responsible for certain personal information about you. When we do so, we are subject to data protection laws which apply across the United Kingdom. We are responsible as 'controller' of that personal information for the purposes of those laws.
By providing us with your data, you confirm that you are over 18 years of age.
Who We Are
Red Hot Mess Ltd is the controller and is responsible for your personal data (referred to as 'we', 'us' or 'our' in this policy).
Contact details:
Red Hot Mess Ltd
Email: hello@ellekay.co.uk
Postal address: Office 2/3, 48 West George Street, Glasgow, Scotland, G2 1BP
Company number: SC836208
If you have any questions about this policy or wish to exercise your legal rights, please contact us at the above email address.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
We would appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with us first.
The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:
Identity Data: first name, last name, username or similar identifier, title
Contact Data: billing address, delivery or postal address, email address and telephone numbers
Financial Data: bank account and payment card details
Transaction Data: details about payments to and from you and details of products and services purchased from us
Profile Data: purchases or orders made by you, your interests, preferences, feedback and survey responses
Usage Data: information about how you use our products and services
Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences
We also collect Aggregated Data (statistical or demographic data) for any purpose. Aggregated Data is derived from your personal data but does not directly reveal your identity and is not considered personal data in law.
Sensitive Data
In order to deliver personalised hypnotherapy programmes, we may collect sensitive health information relating to any issues you would like addressed within hypnotherapy audios and workbooks. We will always ask for your explicit consent before processing this data.
How We Collect Your Personal Data
We use different methods to collect data from and about you, including through:
Direct interactions: when you fill in forms, correspond with us, apply for products or services, subscribe to our mailing list, request marketing, enter a competition, complete a survey, or contact us directly
Analytics: we may receive technical data about you from analytics providers such as Google
Payment providers: we may receive Contact, Financial and Transaction Data from payment processors (see Third-Party Platforms below)
How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:
Where we need to perform a contract we are about to enter into or have entered into with you
Where it is necessary for our legitimate interests and your interests and rights do not override those interests
Where we need to comply with a legal or regulatory obligation
Where you have consented to receive marketing communications from us
You have the right to withdraw consent to marketing at any time by clicking the 'unsubscribe' link in any email we send, or by contacting us at hello@ellekay.co.uk.
Purposes for Which We Use Your Personal Data
| Purpose / Activity | Type of Data | Lawful Basis | Legitimate Interest |
|---|---|---|---|
| To register you as a new customer | Identity; Contact | Performance of a contract | — |
| To process and deliver your order; manage payments; recover money owed | Identity; Contact; Financial; Transaction; Marketing & Comms | Performance of a contract; Legitimate interests | To recover debts due to us |
| To manage our relationship with you — notifying you of changes, asking for reviews or surveys | Identity; Contact; Profile; Marketing & Comms | Performance of a contract; Legal obligation; Legitimate interests | To keep records updated and study how customers use our services |
| To enable you to enter a competition or complete a survey | Identity; Contact; Profile; Usage; Marketing & Comms | Performance of a contract; Legitimate interests | To develop our products and grow our business |
| To administer and protect our business (troubleshooting, testing, system maintenance, data hosting) | Identity; Contact; Technical | Legitimate interests; Legal obligation | Running our business; IT and network security; fraud prevention |
| To deliver relevant advertising and measure its effectiveness | Identity; Contact; Profile; Usage; Marketing & Comms; Technical | Legitimate interests | To study how customers use our services and inform our marketing strategy |
| To use data analytics to improve our products, marketing and customer experience | Technical; Usage | Legitimate interests | To define customer types, develop our business and inform marketing strategy |
| To make suggestions and recommendations about goods or services that may interest you | Identity; Contact; Technical; Usage; Profile | Legitimate interests | To develop our products and grow our business |
Marketing
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us, purchased goods or services from us, or opted in to receive marketing, and in each case you have not opted out.
Under the Privacy and Electronic Communications Regulations, if you are a limited company we may send you marketing emails without prior consent, though you may opt out at any time.
To stop receiving marketing communications, click the 'unsubscribe' link in any email or contact us at hello@ellekay.co.uk. Please note that opting out of marketing does not affect data we hold as a result of a purchase or other transaction.
Third-party marketing:
We do not share your personal data with third parties for their own marketing purposes.
Cookies, Tracking & Meta Pixel
We use cookies and similar technologies to track activity on our site, improve performance, understand user behaviour, and deliver relevant advertising. Our Cookie Policy can be viewed here: https://www.ellekay.co.uk/cookie
This includes the Meta (Facebook) Pixel, which may collect information such as your IP address, device type, and browser activity. This allows Meta to match your website activity with your Facebook or Instagram profile to deliver more relevant ads. All data collected is hashed and anonymised, we cannot see or access your personal information directly, and it is never sold or shared.
You can learn more about how Meta uses your data here:
https://www.facebook.com/policy.php
You can manage your cookie preferences at any time via our cookie banner. By continuing to use our site with preferences enabled, you consent to the use of selected tracking tools.
Affiliate Tracking Cookies
Our website uses cookies to track affiliate referrals. When you click an affiliate link, a small cookie is placed on your browser to attribute any purchases you make within the referral window (currently 60 days) to the referring affiliate. These cookies do not collect any personally identifiable information.
Users have the legal right to opt out of non-essential cookies. If cookies are declined or cleared, affiliate tracking may be disabled and commissions may not be recorded. This does not affect your experience or access to our content.
Affiliate data (such as name, email address and referral link performance) is stored securely and used only to administer our affiliate programme.
Third-Party Platforms and Data Processing
Our website, digital programmes, and email communications are hosted and managed using Systeme.io, an all-in-one platform for online businesses. When you sign up to our mailing list, access content, or make a purchase, your personal data (such as your name, email address and purchase details) may be stored and processed by Systeme.io on our behalf.
Systeme.io complies with applicable data protection laws. You can learn more in their privacy policy:
https://systeme.io/privacy-policy
Payments
We use Systeme.io's integrated payment system to securely process transactions. Depending on your location and payment preferences, payments may be processed via the following third-party providers:
These providers handle your payment information securely and do not share your full financial details with us. We recommend reviewing the relevant provider's privacy policy when choosing your payment method.
Subscription and Recurring Payments
Where you purchase a subscription product (such as the Red Hot Club, Red Hot Mentorship or DM Coaching), you authorise us to charge your payment method on a recurring monthly basis until you cancel. Your billing date will be the same date each month as your initial purchase. You may cancel at any time by contacting us at hello@ellekay.co.uk. Cancellations take effect at the end of your current billing period. No refunds are issued for partial months.
ManyChat (Messaging Automation)
We use ManyChat to manage communications through Facebook Messenger and Instagram Direct Messages. When you interact with us via these channels (for example, to request a free resource), your personal data, such as your name, username, and email address (if provided), may be collected and processed to deliver the requested content and provide marketing updates.
ManyChat may process data on servers outside the UK/EU, including the United States. All transfers are subject to appropriate safeguards. You can opt out at any time by replying STOP in Messenger or Instagram, or by contacting us at hello@ellekay.co.uk.
ManyChat's privacy policy:
https://manychat.com/privacy.html
Zapier
We use Zapier to automate certain processes, such as sending email notifications after form submissions. Zapier may process limited personal data (such as your name and email address) solely to perform these automations on our behalf.
Zapier's privacy policy:
Make (formerly Integromat)
We use Make to automate certain processes, such as transferring data between systems (for example, from ManyChat to Systeme.io). Make may process limited personal data (such as your name and email address) solely to perform these automations on our behalf.
Make's privacy policy:
https://www.make.com/en/privacy-notice
Google reCAPTCHA
To protect our site from spam and abuse, we use Google reCAPTCHA. This tool may collect information such as your IP address, mouse movements, and browser details to verify that you are a human user.
Google's privacy policy and terms of service:
https://policies.google.com/privacy
Use of Artificial Intelligence (AI) Tools
Red Hot Mess Ltd may use trusted third-party AI tools to support the creation of certain content, including written scripts, workbooks, and audio narration. This may include AI-generated voiceovers (including synthetic or cloned voices) and AI-assisted content drafting.
All content published under the Elle Kay brand is personally developed, reviewed, and approved by a qualified and registered hypnotherapist (DHP Acc Hyp, AMACCPH) to ensure it meets appropriate professional standards.
AI is used solely to enhance user experience and improve consistency. No automated decision making systems are used to profile users or make determinations about their personal circumstances.
By continuing to access and engage with our services and content, you acknowledge and accept that some materials may have been created or delivered with the support of AI tools.
International Transfers
To deliver services to you, it is sometimes necessary for us to share your personal information outside the United Kingdom. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:
We only transfer personal data to countries deemed to provide an adequate level of protection by the UK government
Where we use certain service providers, we may use specific contracts recognised by the UK government that give personal data the same protection it has in the UK
Please contact us if you would like further information about the safeguards we use.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed. Access to your personal data is limited to those employees, agents, contractors and third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements.
By law we are required to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
If you are not a customer, we will retain your data for two years following your last engagement with us.
In some circumstances you can ask us to delete your data see 'Your Legal Rights' below. We may also anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice.
Your Legal Rights
Under data protection law, you have the following rights in relation to your personal data:
Right to access: request a copy of your personal data
Right to correction: request that inaccurate or incomplete data is corrected
Right to erasure: request that your data is deleted in certain circumstances
Right to object: object to the processing of your data in certain circumstances
Right to restriction: request that processing of your data is restricted in certain circumstances
Right to data portability: request transfer of your data to a third party
Right to withdraw consent: where we rely on consent as the legal basis, you may withdraw it at any time
To exercise any of these rights, please contact us at: hello@ellekay.co.uk
You will not usually be required to pay a fee to exercise your rights, though we may charge a reasonable fee or decline to act where a request is clearly unfounded, repetitive or excessive.
Data Protection Complaints
You have the right to make a complaint directly to us if you believe we have not handled your personal data in accordance with UK data protection law. To do so, please contact us at hello@ellekay.co.uk. We will acknowledge your complaint within 30 days and handle it without undue delay. If you are not satisfied with our response, you have the right to escalate your complaint to the Information Commissioner's Office at ico.org.uk.
Changes to This Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
If you have any questions about this policy or our privacy practices, please contact us at hello@ellekay.co.uk.
