Who I Am

This website is operated by Derek Richards, a sole trader providing strategic advisory and business consulting services. For the purposes of GDPR, Derek Richards is the Data Controller. Contact: derek@derekrichards.co.uk

Data I Collect

I collect the following personal data only when you voluntarily provide it:

• Contact enquiries: Your name, email address, and message content
• Booking requests: Your name, email address, selected service, date, time, and any additional message
• Wellbeing Assessment: Your responses to the 24 diagnostic questions. Because these questions relate to psychological stress and wellbeing, this is classified as "special category data" under UK GDPR.

I do not use tracking cookies, analytics platforms, or any third-party advertising tools.

How I Use Your Data (Lawful Basis)

• To respond to your enquiry (Legitimate Interest)
• To confirm and manage your booking (Contract)
• To generate your Wellbeing Assessment profile (Explicit Consent)

Your data is never sold, shared, or used for marketing without your explicit consent. By checking the consent box before starting the assessment, you provide unambiguous consent for your responses to be processed for the sole purpose of generating your profile.

Data Storage & Processing

Wellbeing Assessment (Client-Side Only): Your assessment responses are processed entirely within your web browser (client-side). They are never transmitted to, stored on, or processed by our servers. This ensures maximum privacy. Once you close the tab, the data is gone.

Bookings & Contact: Booking data is stored in a SQLite database on a secure, privately managed Linux VPS located in the United Kingdom. Contact form submissions are processed via email only and are not stored in a database.

Your Rights (GDPR)

You have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email derek@derekrichards.co.uk.

Data Retention

Booking records are retained for 2 years for business record-keeping purposes, then permanently deleted.

Third-Party Services

This site embeds content from Substack via a server-side RSS proxy. No personal data is shared with Substack during this process.

Contact

For any privacy enquiries: derek@derekrichards.co.uk