Privacy Policy

Charmingwristmot is committed to handling your personal data responsibly and transparently. We collect only what we genuinely need, keep it for only as long as it is useful, and protect it with reasonable care. This document sets out the detail behind that commitment so you can make informed choices about your information.

1. Who we are

For the purposes of data protection law, Charmingwristmot is the data controller responsible for the personal data described in this policy. We are an independent, owner-led mental clarity coaching practice providing general, non-medical, educational guidance.

Our contact and identity details are:

• Trading name: Charmingwristmot
• Registered address: 455 107-111 Briggate, Leeds LS1 6AZ, United Kingdom
• Telephone: +44 113 204 8000
• Email: team@charmingwristmot.world

If you have any question about this policy or about how your data is handled, you can reach us using any of the details above. We aim to acknowledge privacy enquiries promptly and to resolve them within statutory timeframes.

2. Data we collect

We limit collection to what is necessary for the purpose at hand. Depending on how you interact with us, the categories of personal data we may process include:

Information you give us

• Contact form details: your name, email address, and the content of any message you choose to send.
• Correspondence: any further information you share when you reply to us or arrange a session, such as preferred timing or the general topic you would like to discuss.
• Consent records: a record of the consent you provide through the form and the cookie banner, including the date and time.

Information collected automatically

• Strictly necessary technical data: information required for the website to function and remain secure, such as your browser type and basic request data handled by our hosting provider.
• Optional analytics data: aggregated, anonymised usage information, collected only if you enable analytics cookies through the consent banner.

We ask that you do not send special category data (for example, information concerning health) through the contact form. Our service is general and educational, and the form is not designed to receive sensitive details.

3. Why we use your data

We process personal data for clearly defined purposes, and we do not use it for unrelated activities without telling you first. Specifically, we use your data to:

• respond to enquiries you send through the contact form or by email;
• arrange, confirm, and deliver coaching sessions you choose to book;
• keep accurate records of consent and of our correspondence with you;
• maintain the security, integrity, and proper functioning of this website;
• understand, in aggregate and anonymised form, how the website is used, where you have allowed analytics;
• comply with our legal and regulatory obligations.

4. Lawful bases for processing

Under UK GDPR we must have a lawful basis for each processing activity. We rely on the following:

• Consent (Article 6(1)(a)): when you submit the contact form, and when you enable optional analytics or marketing cookies. You may withdraw consent at any time.
• Performance of a contract (Article 6(1)(b)): when you book a session and we need your details to deliver it.
• Legitimate interests (Article 6(1)(f)): to keep our website secure and to respond appropriately to correspondence, balanced against your rights and freedoms.
• Legal obligation (Article 6(1)(c)): where we must retain certain records to meet accounting, tax, or other legal requirements.

5. Sharing and service providers

We do not sell your personal data, and we do not share it for unrelated purposes. We may share limited data with trusted service providers who help us operate, for example our website hosting provider and, where enabled, an analytics provider. These providers act as processors on our instructions and are bound by appropriate contractual safeguards.

We may also disclose data where we are legally required to do so, for example in response to a valid request from a regulator, court, or law enforcement authority. In every case we disclose only what is necessary.

6. How long we keep data

We keep personal data only for as long as it is needed for the purpose it was collected, after which we delete or anonymise it. As a general guide:

• Contact enquiries that do not lead to a booking: retained for up to 12 months, then deleted.
• Records relating to booked sessions: retained for up to 24 months after our last interaction, unless a longer period is required by law.
• Financial and accounting records: retained for the period required by applicable UK law, typically up to 6 years.
• Consent and cookie preference records: retained for up to 12 months, after which we may ask you to confirm your preferences again.

Where data is held in backups, it is removed in line with our routine backup cycle.

7. Security measures

We take reasonable and appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include:

• serving the entire website over encrypted HTTPS connections;
• limiting access to personal data to those who genuinely need it;
• using reputable hosting and service providers with their own security controls;
• reviewing our practices periodically and keeping data collection to a minimum.

While no method of transmission or storage can be guaranteed to be perfectly secure, we work to maintain a level of protection appropriate to the limited, low-risk data we handle.

8. Your rights

Under UK GDPR you have a number of rights in relation to your personal data. These include the right to:

• be informed about how your data is used (which this policy supports);
• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase data where there is no continuing reason to keep it;
• restrict or object to certain processing;
• request portability of data you have provided to us;
• withdraw consent at any time, without affecting earlier lawful processing.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by law. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been handled improperly, although we would welcome the chance to address your concern first.

9. International transfers

We aim to keep personal data within the United Kingdom or the European Economic Area. Where a service provider processes data outside these areas, we take steps to ensure an appropriate level of protection through recognised safeguards, such as adequacy decisions or standard contractual clauses.

10. Children's privacy

This website and our services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

11. Changes to this policy and how to contact us

We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the date shown at the top of this page. We encourage you to review it periodically.

For any privacy-related request or question, please contact Charmingwristmot at 455 107-111 Briggate, Leeds LS1 6AZ, by telephone on +44 113 204 8000, or by email at team@charmingwristmot.world.