Privacy policy
Last updated: July 2026
Who We Are
The Mental Wealth Academy Ltd is the data controller. Company No.10840080. Registered Office: Charter House, Wyvern Court, Stanier Way, Wyvern Business Park, Derby DE21 6BF. Email: hello@thementalwealthacademy.com
Applicable Law
We process personal data in accordance with the UK GDPR, Data Protection Act 2018 and PECR.
Information We Collect
We collect contact details, booking information, communications, payment information (processed securely by providers), website analytics and technical information.
How We Collect Information
Through forms, bookings, purchases, email, telephone, WhatsApp, social media and website use.
How We Use Information
To provide coaching, training, respond to enquiries, manage bookings, improve services, comply with legal obligations and send marketing where permitted.
Legal Bases
Contract, legitimate interests, consent and legal obligation.
Marketing
We may contact you by email, phone, SMS, WhatsApp or post where permitted. You can opt out at any time.
WhatsApp Communications
If you choose to communicate via WhatsApp we may use it for enquiries, appointments, support, programme updates and (with consent) marketing. WhatsApp is operated by Meta and may involve international transfers protected by appropriate UK GDPR safeguards.
Cookies & Analytics
We use essential cookies and may use analytics cookies to improve our website.
Sharing Information
We do not sell personal data. We share only with trusted providers, advisers or authorities where legally required.
International Transfers
Where data leaves the UK we rely on recognised UK transfer safeguards including adequacy regulations or the UK IDTA/UK Addendum.
Keeping Information Secure
We use SSL encryption, secure storage, restricted access and appropriate technical and organisational measures.
Special Category Personal Data
As part of coaching you may disclose information about mental health, wellbeing or other sensitive matters. Coaches keep confidential session notes. Online sessions may be recorded only with your knowledge and agreement. We process this data to deliver coaching under Article 6(1)(b) UK GDPR and Article 9(2)(a) (explicit consent), and where applicable Article 9(2)(f). Session notes are confidential and accessed only by authorised personnel. Video recordings are securely stored and permanently deleted after two years unless a longer retention period is required by law. Confidentiality will only be broken where legally required or where there is a serious safeguarding concern or risk of harm.
Retention
We retain personal information only as long as necessary. Coaching recordings are deleted after two years.
Your Rights
You have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent where applicable. You may complain to the ICO.
Children
Our services are generally intended for adults unless stated otherwise.
Changes
We may update this policy from time to time by publishing a revised version on our website.