Who we are
This privacy notice explains how we collect and process your personal data on this web site.
We don’t share or use your data except as described in this Privacy Notice.
The Data Controller for GDPR prposes is Simon Coles.
- We’re not in the data collecting business
- If we collect data about you it is because you ask us to
- We look after that data as best we can
- We don’t give it to other people to use
- We delete it as soon as we can
The data we collect and why
When you order a reading from us you provide us your contact details, photo, and any other information you provide in order to fulfill your request. Our GDPR lawful grounds of processing is “Contract”.
If you communicate with us via email, social media etc. we process this data for the purposes of communicating with you, and for our own record keeping. Our GDPR lawful grounds of processing is “Contract” and in some cases “Legitimate Interest”.
We do not collect or process any data defined as “Sensitive Data” under the EU GDPR.
By providing us with your data, you warrant to us that you are over 13 years of age.
We have a mailing list you can join to receive notification of new articles, offers etc. You may unsubscribe from this at any time by following the instructions in every email.
We do not share your details with any third party for marketing purposes.
Where we process your data
We use a variety of different services to run our business, and they store your data in different countries.
In all cases we have confirmed our suppliers are GDPR compliant and if they are not storing your data in the EEA, then either the EU-US Privacy Shield or other controls are in place.
Types of services we use are:
- Calendar booking system
- Mailing list provider
We have put in measures to safeguard your data; we have also required those who work for us to have similar safeguards and to process your data only on our instructions and keep it confidential.
We keep your data for only as long as necessary to fulfil the purposes for which collected it, including our need to satisfy legal, accounting, and reporting requirements.
Your legal rights
You can contact us using this form to request what data we have about you, to ask us to erase applicable data, correct mistakes etc. When you make a Data Subject Access Request we will ask you for additional information to confirm your identity.
Third party links
In our website we often link to other websites, different plugins etc. This site and its owner(s) are not responsible for the privacy practices or the content of such web sites.
We don’t use any of the really nasty services which track you around the web, and our site respects Do Not Track.
As with most websites, we use Google Analytics to gather website statistics which will place a cookie in your browser.
Whenever there is a request to our web site, there’s a log of the IP address and date stored in a log file. We use this information to operate the website and allow us to detect cyber attacks.
Changes to this Privacy Notice
If we make changes to this Privacy Notice, we’ll update this web page.