1. Who we are
The controller responsible for your personal data is [PLACEHOLDER: Johnny Wood / trading name], trading as Fuck Advisor, [PLACEHOLDER: business postal address]. ICO registration number: [PLACEHOLDER: ICO registration number].
Questions or requests about your data: hello@fuckadvisor.co.uk. We're a small business and don't need a Data Protection Officer, so this inbox goes straight to the person responsible.
This policy covers fuckadvisor.co.uk, our emails and newsletter, and our sessions, classes and manuals. It follows the UK GDPR and the Data Protection Act 2018.
2. What we collect, why, and our legal basis
When. You use the contact form or email us
What we collect. Name, email, topic, your message, how you found us, your 18+ confirmation
Why. To reply and help with your enquiry
Lawful basis. Legitimate interests (answering people who contact us). If your message includes sensitive details, see section 3
How long we keep it. 12 months after our last contact, unless it turns into a booking
When. You sign up for the newsletter
What we collect. Email, first name (optional), 18+ confirmation, when and how you signed up and confirmed (double opt-in), whether emails are opened or clicked
Why. To send the free guides and occasional updates you asked for
Lawful basis. Consent. You can unsubscribe in one click at any time
How long we keep it. Until you unsubscribe. After that we keep just your email on a "do not send" list so you're never emailed by mistake. Subscribers who haven't opened anything in 2 years are removed
When. You book a call, session or class
What we collect. Name, email, phone number (optional), what you booked, your answers to booking questions, attendance, and short coaching notes (1:1 only)
Why. To arrange and deliver your coaching, and to run bookings, reminders and rescheduling
Lawful basis. Contract (to provide what you booked). Sensitive details: explicit consent (section 3)
How long we keep it. Coaching notes and booking answers: 12 months after your last session, or sooner if you ask. Booking records: 6 years (tax and legal reasons)
When. You pay for something
What we collect. Name, email, billing details, what you bought, amount, date and transaction reference. Card details go straight to the payment provider. We never see or store your full card number
Why. To take payment, issue receipts and refunds, prevent fraud, and keep tax records
Lawful basis. Contract, and legal obligation (tax and accounting records)
How long we keep it. 6 years from the end of the tax year of the purchase
When. You buy a manual
What we collect. Name, email, order details, download records
Why. To deliver the download and help if something goes wrong
Lawful basis. Contract
How long we keep it. 6 years (tax and legal reasons)
When. You come to an in-person class
What we collect. Name, attendance and, rarely, a note of any conduct problem
Why. To run classes safely and act on concerns
Lawful basis. Legitimate interests (keeping classes safe)
How long we keep it. 2 years
When. You browse the website
What we collect. Pages visited, referring site, device and browser type, approximate location (from your IP address), via [PLACEHOLDER: analytics tool, or "no analytics"]
Why. To understand which pages are useful and fix problems
Lawful basis. See cookies (section 9). Where we ask, consent
How long we keep it. [PLACEHOLDER: e.g. 13 months]
| When | What we collect | Why | Lawful basis | How long we keep it |
|---|---|---|---|---|
| You use the contact form or email us | Name, email, topic, your message, how you found us, your 18+ confirmation | To reply and help with your enquiry | Legitimate interests (answering people who contact us). If your message includes sensitive details, see section 3 | 12 months after our last contact, unless it turns into a booking |
| You sign up for the newsletter | Email, first name (optional), 18+ confirmation, when and how you signed up and confirmed (double opt-in), whether emails are opened or clicked | To send the free guides and occasional updates you asked for | Consent. You can unsubscribe in one click at any time | Until you unsubscribe. After that we keep just your email on a "do not send" list so you're never emailed by mistake. Subscribers who haven't opened anything in 2 years are removed |
| You book a call, session or class | Name, email, phone number (optional), what you booked, your answers to booking questions, attendance, and short coaching notes (1:1 only) | To arrange and deliver your coaching, and to run bookings, reminders and rescheduling | Contract (to provide what you booked). Sensitive details: explicit consent (section 3) | Coaching notes and booking answers: 12 months after your last session, or sooner if you ask. Booking records: 6 years (tax and legal reasons) |
| You pay for something | Name, email, billing details, what you bought, amount, date and transaction reference. Card details go straight to the payment provider. We never see or store your full card number | To take payment, issue receipts and refunds, prevent fraud, and keep tax records | Contract, and legal obligation (tax and accounting records) | 6 years from the end of the tax year of the purchase |
| You buy a manual | Name, email, order details, download records | To deliver the download and help if something goes wrong | Contract | 6 years (tax and legal reasons) |
| You come to an in-person class | Name, attendance and, rarely, a note of any conduct problem | To run classes safely and act on concerns | Legitimate interests (keeping classes safe) | 2 years |
| You browse the website | Pages visited, referring site, device and browser type, approximate location (from your IP address), via [PLACEHOLDER: analytics tool, or "no analytics"] | To understand which pages are useful and fix problems | See cookies (section 9). Where we ask, consent | [PLACEHOLDER: e.g. 13 months] |
We don't sell your data, share it for advertising, or use it to make automated decisions about you.
3. Sensitive information
Talking about dating, relationships and intimacy can mean you tell us things about your sex life, your sexual orientation or your health. The law calls this "special category data" and gives it extra protection. So do we.
- We only record this kind of information with your explicit consent. We'll ask for it clearly when you book a session or class, with a tick box that isn't pre-ticked.
- We only keep what we need to coach you. Usually that's a few short notes, not a transcript.
- You can withdraw your consent at any time by emailing hello@fuckadvisor.co.uk. We'll delete the sensitive notes. We may not be able to keep coaching you without them, but we'll talk that through with you.
- We never use sensitive information for marketing, and we only share it in the rare situations in our policies (/policies), for example if someone is at serious risk of harm or the law requires it.
- Please don't put sensitive details in the contact form or newsletter sign-up. Keep those for a session. If you do send them, we'll only use them to reply to you, and we'll delete them when we no longer need them.
- Please don't give us names or details that could identify other people you talk about.
4. Who helps us (our processors)
We use a small number of trusted providers to run the business. They handle data only on our instructions and under a data processing agreement.
What they do. Email, calendar and file storage
Provider. Microsoft (Microsoft 365)
What they do. Newsletter
Provider. [PLACEHOLDER: newsletter provider, e.g. Buttondown or MailerLite]
What they do. Online booking
Provider. [PLACEHOLDER: booking provider, e.g. Cal.com]
What they do. Card payments
Provider. [PLACEHOLDER: payment provider, e.g. Stripe]. For fraud prevention and financial regulation, the payment provider also acts as a separate controller under its own privacy policy
What they do. Selling and delivering manuals
Provider. [PLACEHOLDER: e.g. Payhip]
What they do. Video calls for online sessions and classes
Provider. [PLACEHOLDER: e.g. Zoom or Microsoft Teams]
What they do. Contact form
Provider. [PLACEHOLDER: form service, e.g. Formspree]
What they do. Website hosting
Provider. [PLACEHOLDER: hosting provider]
What they do. Website analytics
Provider. [PLACEHOLDER: analytics tool, or delete this row]
What they do. Accounting
Provider. [PLACEHOLDER: accountant or bookkeeping software]
| What they do | Provider |
|---|---|
| Email, calendar and file storage | Microsoft (Microsoft 365) |
| Newsletter | [PLACEHOLDER: newsletter provider, e.g. Buttondown or MailerLite] |
| Online booking | [PLACEHOLDER: booking provider, e.g. Cal.com] |
| Card payments | [PLACEHOLDER: payment provider, e.g. Stripe]. For fraud prevention and financial regulation, the payment provider also acts as a separate controller under its own privacy policy |
| Selling and delivering manuals | [PLACEHOLDER: e.g. Payhip] |
| Video calls for online sessions and classes | [PLACEHOLDER: e.g. Zoom or Microsoft Teams] |
| Contact form | [PLACEHOLDER: form service, e.g. Formspree] |
| Website hosting | [PLACEHOLDER: hosting provider] |
| Website analytics | [PLACEHOLDER: analytics tool, or delete this row] |
| Accounting | [PLACEHOLDER: accountant or bookkeeping software] |
We may also share information if the law requires it, to protect someone from serious harm, or to deal with a legal claim.
5. International transfers
Some of our providers store or access data outside the UK, for example in the European Economic Area or the United States. When that happens, we make sure your data stays protected. We rely on UK adequacy regulations (including the UK-US "data bridge" for certified US companies), or the UK International Data Transfer Agreement or Addendum, in the provider's contract. Email hello@fuckadvisor.co.uk if you'd like details.
6. How long we keep things
We keep personal data only as long as we need it, as set out in the table in section 2. When it's no longer needed, we delete it securely or make it fully anonymous.
7. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you (access)
- have inaccurate data corrected
- have your data deleted
- ask us to limit how we use your data
- object to how we use your data, including an absolute right to stop marketing emails
- get your data in a portable format, in some cases
- withdraw consent at any time, where we rely on consent (this doesn't affect anything we did before you withdrew).
To use any of these rights, email hello@fuckadvisor.co.uk. It's free. We may need to check it's really you. We'll reply within one month. If your request is complicated, we can take up to two more months, but we'll tell you within the first month if we need longer.
8. Complaints
If you're unhappy with how we've handled your data, please tell us first at hello@fuckadvisor.co.uk. We'll acknowledge your complaint within 30 days and look into it properly.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
10. Keeping your data safe
We use multi-factor sign-in, encrypted connections and providers with strong security, and we limit who can see your data (in practice, that's just me). If a data breach could put you at risk, we'll tell you, and we'll report it to the ICO within 72 hours where the law requires it.
11. Adults only
Our services are for people aged 18 and over. We don't knowingly collect data from anyone under 18. If we find we have, we'll delete it.
12. Changes
We'll update this policy if anything changes and show the date at the top. If it's a significant change, we'll email you if we have your address.