Privacy Policy

1. Who I am

I am David Thomas Wright. I trade under my own name from Murieston Terrace, Edinburgh, EH11 2LH, United Kingdom. I am the controller of the personal information described in this policy, which means I decide how and why it is used.

You can contact me about this policy at davidthomaswright@hotmail.co.uk. [I am registered with the Information Commissioner’s Office (ICO), registration number: ZA376636

2. What this policy covers

This policy covers my website (davidthomaswright.com), my booking and payment process, and the coaching and intuitive guidance services I provide, including calls, audio recordings, voice notes, messages and email. I am based in the UK and handle your information under UK data protection law, including the UK GDPR and the Data Protection Act 2018. This applies wherever in the world you live.

3. The information I collect

  • Contact details: your name, email address, phone number and, if you have a written agreement with me, your address.

  • Booking and payment information: what you book, when, and what you pay. Card details are handled by my payment providers. I never see or store your full card number.

  • What you share with me: your questions, the topics you bring, and what you tell me during calls and in messages, voice notes and emails.

  • My notes and recordings: my notes of our work, recordings of our calls, and the audio recordings, voice notes, written rituals and affirmations I make for you.

  • Website information: technical information about how you use my website, such as pages viewed and device type, collected through cookies and similar tools.

  • Marketing preferences: whether you have asked to hear from me, and what about.

  • Testimonials: any feedback you give me permission to use.

Our work can involve sensitive information, such as your health, beliefs, relationships, family or finances. I only use this kind of information with your explicit consent. You give it by choosing to share it with me, and you can withdraw it at any time.

4. How and why I use your information

What I use it for

My legal basis

Booking you in, delivering the service, and keeping in touch about it

Contract: it is needed to provide what you have asked for

Taking payment, issuing invoices and keeping accounts

Contract, and legal obligation (tax and accounting law)

Keeping notes and call recordings to support our work

Contract and my legitimate interest in keeping accurate records. For sensitive information, your explicit consent

Sending you news, offers or information about my services

Your consent. If you are an existing client, I may email you about similar services, and you can opt out at any time

Using your words as a testimonial

Your consent

Understanding how my website is used and keeping it secure

Your consent for non-essential cookies, and my legitimate interest in running a secure website

Dealing with complaints, disputes or legal claims

My legitimate interest in protecting my business, and legal obligation where it applies

Protecting someone from serious harm, where I reasonably believe there is an imminent or likely risk

Vital interests, and legal obligation where it applies

5. Call recordings

I record our calls to support my own notes. I tell you this in my terms and agreements, and you are welcome to ask me about it. Recordings are a courtesy and not part of the service you pay for. I treat them as client notes, keep them in password-protected cloud storage, and keep them for the period set out below. I strongly encourage you to record calls yourself too, in case of technical problems at either end.

6. Who I share your information with

I do not sell your information, and I do not share what you tell me in our work with anyone else, except where the law requires or allows it, as set out below. I use a small number of trusted providers to run my business. They process information on my behalf and only as I instruct. They include:

  • Squarespace, for my website, and Acuity Scheduling, for bookings

  • Google and Microsoft for email and cloud storage

  • PayPal, Squarespace Payments and Klarna for payments

  • My accountant, who sees invoices and payment records but not the content of our work

  • WhatsApp for clients calls, messaging and voice note services

If someone else pays for your sessions, I share only what is needed for invoicing and payment with them.

I may also share information where I am required to by law, subpoena or court order, where I reasonably believe there is an imminent or likely risk of danger or harm to you or others, or where the matter involves illegal activity.

7. Transfers outside the UK

Some of my providers are based in, or store information in, the United States or other countries outside the UK. Where this happens, I rely on safeguards that UK law recognises

8. How long I keep your information

  • Client notes, call recordings and audio files: up to seven years, in password-protected cloud storage. I will erase them sooner if you ask me to, unless I need to keep something for a legal reason.

  • Invoices and payment records: for as long as tax and accounting law requires, which is usually around six years.

  • Enquiries that don’t lead to a booking: 12 months

  • Marketing emails: until you unsubscribe or ask me to stop.

  • Website information: as set out in the cookie settings and my website provider’s policy.

9. Your rights

Under UK data protection law, you have the right to:

  • ask for a copy of the information I hold about you

  • ask me to correct anything that is wrong or incomplete

  • ask me to erase your information

  • ask me to restrict how I use it, or object to my using it

  • ask for the information you gave me in a portable format

  • withdraw your consent at any time, where I rely on it

To use any of these rights, email me at davidthomaswright@hotmail.co.uk. I will usually reply within one month. Some of these rights have limits. For example, I may need to keep certain records for legal or tax reasons, and I will explain if that applies.

If you are unhappy with how I handle your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

10. Keeping your information safe

I keep your information in password-protected accounts and cloud storage, and I limit who can access it. No online system is completely secure, but I take sensible steps to protect what you share with me.

11. Cookies

My website uses cookies and similar tools. Some are essential to make the site work. Others help me understand how it is used, and I only use these if you agree through the cookie banner. You can change your choice at any time. [Describe the banner and settings your website provides.]

12. Children

My services are for people aged 18 and over. I do not knowingly collect information from anyone under 18. If you think I have, please contact me and I will delete it.

13. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed. If I make a significant change, I will tell you.

14. Contact

David Thomas Wright, Email: davidthomaswright@hotmail.co.uk