Privacy policy
Last updated: 28 October 2026
This policy explains what personal information The Daffodil Effect collects, why, what we do with it, and your rights. We have tried to write it in plain English. If anything is unclear, email us at info@thedaffodileffect.com.
The Daffodil Effect is a coaching practice run by Dan and Meg Jones. We are not yet a registered company; until we are, Dan and Meg are jointly responsible for your information as the people running The Daffodil Effect. When the business is registered, we will update this policy with its legal name.
We are the "controller" of your personal information, which means we decide how it is used. You can contact us about anything in this policy at info@thedaffodileffect.com.
What: your first name, email address, your answers to each question, your score, your result and the areas that came up most, the date, and whether you asked for follow-up emails.
Why: to send you your results by email, to send the three follow-up emails if you ticked the box, and, if you book a call with us, so we can understand where you're starting from.
Sensitive information: several scorecards ask about your mental and emotional health, your body and nervous system, your relationships, or your sexuality and use of pornography. The law calls this "special category" information. We only process it with your explicit consent, which you give when you submit your answers, and you can withdraw that consent at any time by emailing us.
Legal basis: your consent (UK GDPR Article 6(1)(a)), and your explicit consent for sensitive information (Article 9(2)(a)).
Your results are shown to you on screen before you give us any details. If you don't enter your name and email, your answers are not sent to us.
What: we use the details above to send three short follow-up emails over about ten days, only if you ticked the box asking for them.
How to stop them: every follow-up email has a "Stop the follow-up emails" link. You can also just reply and ask.
Legal basis: your consent.
What: your email address (and your name, if the form asks for it), and the consent choices you tick on the form.
Why: to send you news, new articles and podcast updates you asked for.
Legal basis: your consent. Every newsletter has an unsubscribe link.
What: the details you enter in the booking calendar (your name, email address, phone number if you give it, and anything you tell us about what you'd like to talk about), and the date and time of your call.
Why: to arrange and hold the call, and to send you reminders.
Legal basis: taking steps at your request before any agreement with you (Article 6(1)(b)), and your explicit consent for anything sensitive you choose to share.
What: whatever you include when you email us or use the contact form.
Why: to reply to you.
Legal basis: our legitimate interest in answering messages (Article 6(1)(f)), and your explicit consent for anything sensitive you choose to share.
If you work with us, we also keep your intake form, brief session notes and payment records. Our programme terms explain this in more detail.
Legal basis: our agreement with you (Article 6(1)(b)); your explicit consent for health information (Article 9(2)(a)); and legal obligations for financial records (Article 6(1)(c)).
Your safety: if we believe you or someone else is at serious risk of harm, we may share information with emergency services or your emergency contact without your consent (Article 6(1)(d) and Article 9(2)(c), protecting someone's vital interests). We will always try to talk to you first.
What: information about your visit, such as the pages you view, roughly where you are (country or city level), the device and browser you use, and how you arrived at the site. This is collected by cookies and similar technology (see "Cookies" below).
Why: to understand which pages help people, and to improve the site.
Legal basis: your consent, which you give or refuse through our cookie banner.
We use a small number of trusted services to run the website and send emails. They process information only on our instructions, under data protection agreements.
| Service | What it does for us | Where data is held |
|---|---|---|
| HubSpot | Stores contact details and scorecard results; runs our forms, newsletter and booking calendar; website analytics cookies | EU (HubSpot's European data centre) |
| Make (Celonis) | Passes your scorecard results from the website to HubSpot and our email system, and schedules follow-up emails | EU (Make's EU region) |
| Microsoft 365 | Sends our emails from info@thedaffodileffect.com and holds our inbox | UK (Microsoft's UK data centres) |
| Google Analytics | Website statistics, only if you accept analytics cookies | USA and elsewhere (see "International transfers") |
| Google Fonts | Displays the fonts on some pages; your browser contacts Google to fetch them | USA and elsewhere |
| 123 Reg | Hosts our website and domain | UK |
We may also share information if the law requires it, or to protect someone's safety (see section 6).
Some of these services may handle data outside the UK, mainly in the EU (which the UK recognises as having adequate protection) and the USA. Where data goes to the USA, it is protected by safeguards the UK recognises, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
We only keep your information for as long as we need it, then delete it.
| Information | How long |
|---|---|
| Scorecard answers and results | 2 years after your last contact with us (for example, your last scorecard, email reply or call), then deleted |
| Follow-up email schedule | Deleted within 30 days of your last follow-up email being sent, or of you stopping them |
| Newsletter subscription | Until you unsubscribe. After that we keep only your email address on a "do not contact" list, so we don't email you by mistake |
| Booking and contact messages | 2 years after your last contact with us |
| Coaching and workshop records (intake form, session notes) | 6 years after your programme ends, the usual period in which a legal claim could be made, then securely deleted |
| Financial records | 6 years, as required by UK tax law |
| Website analytics | 14 months |
If you ask us to delete your information sooner, we will, unless the law requires us to keep it.
You have the right to:
To use any of these rights, email info@thedaffodileffect.com. We will reply within one month. There's no charge.
Cookies are small files a website stores on your device.
| Cookie | Set by | Purpose | Type |
|---|---|---|---|
__hstc, hubspotutk, __hssc, __hssrc | HubSpot | Recognise returning visitors and link form submissions to visits | Analytics / marketing (needs your consent) |
_ga, _ga_* | Google Analytics | Count visits and see how the site is used | Analytics (needs your consent) |
| Cookies for the booking calendar | HubSpot Meetings | Make the booking calendar work | Necessary for that feature |
You can change your cookie choices at any time through the "Cookie settings" link at the bottom of every page, or by clearing cookies in your browser.
Our scorecards, coaching and workshops are for adults aged 18 and over. We don't knowingly collect information from children. If you think a child has given us their details, please tell us and we will delete them.
We use reputable providers with strong security, keep access limited to Dan and Meg, and use strong passwords and two-factor sign-in on every account that holds your information.
Please don't send us urgent or crisis information by email or through the website, because we can't respond around the clock. If you need help now, see our Get support now page.
If we change this policy, we'll update the date at the top. If the change is significant, we'll tell people on our email list.
If you're unhappy with how we've handled your information, please tell us first at info@thedaffodileffect.com. You also have the right to complain to the UK's data protection regulator, the Information Commission (still widely known as the ICO): ico.org.uk, or 0303 123 1113 (weekdays 9am to 5pm).
