Privacy Policy

Last updated: 21 September 2026

This Privacy Policy explains how Andrew Codling collects, uses and protects your personal information when you visit this website, contact me, book a session, attend a course, workshop or retreat, or use one of my services.

For UK data protection purposes, Andrew Codling is the data controller. If you have any questions about your personal information, you can contact me through the Contact Me page on this website.

Information I collect and why

Depending on how you interact with me, I may collect your name, email address, telephone number, booking details, payment and transaction information, correspondence, and information you choose to provide through booking or enquiry forms.

This may include information you provide when booking mediumship, intuitive, healing, mentoring or Personal Guidance sessions, or when attending courses, workshops or retreats.

I use this information to respond to enquiries, manage bookings, provide the services you have requested, process payments, communicate important information about your booking, administer courses or retreats, maintain appropriate business and financial records, and operate my website and services.

I do not routinely make or retain written notes from individual sessions. Records are generally limited to information provided through the booking process and associated administrative records.

Some information you voluntarily provide may be personal or sensitive, for example information about your health, wellbeing, relationships or personal circumstances. Please only provide information you feel is relevant to the service you are requesting. Where information is classed as special-category personal data under UK law, it will only be processed where an appropriate lawful basis and additional legal condition applies.

Depending on the circumstances, I process personal information because it is necessary to provide a service you have requested, because I have a legitimate interest in operating and administering my business, because I have a legal obligation, or because you have given consent where consent is required.

Who your information may be shared with

I do not sell or trade your personal information.

I use trusted services to operate my business. These may include Squarespace for this website, Acuity Scheduling for appointments and booking forms, Stripe or PayPal where used for payments, Zoom for online sessions, MailerLitefor email communications, and relevant email or administrative service providers.

Where you book a jointly delivered course, workshop or retreat, information necessary to administer that event may also be shared with an appropriate co-facilitator, venue or service provider.

These organisations have their own privacy and data-protection responsibilities. Some may process information outside the United Kingdom. Where this occurs, information will be handled using the safeguards required by applicable UK data-protection law.

I may also disclose information where required by law or where reasonably necessary to protect someone's legal rights or safety.

How long I keep information

I keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Booking and correspondence records may be retained for an appropriate period after a service has been provided. Financial and transaction records may be kept for longer where required for accounting, taxation or other legal purposes.

Information provided through booking or intake forms, particularly information of a sensitive nature, will not knowingly be kept longer than reasonably necessary.

If you subscribe to marketing emails, your contact information will normally remain on the mailing system until you unsubscribe. Limited information may then be retained on a suppression list so that your preference not to receive marketing can be respected.

Email marketing and cookies

If you choose to subscribe to my mailing list, I may send you information about services, courses, workshops, retreats and other relevant updates. You can unsubscribe at any time using the link contained in the email.

Where permitted by UK electronic-marketing rules, I may also contact existing customers about my own similar services, provided the relevant requirements are met and you have an opportunity to opt out.

This website may use cookies and similar technologies to enable the site to function, maintain security, remember preferences and understand how the website is used. Where consent is required, the website's cookie controls will provide an appropriate choice. You can also control cookies through your browser settings.

Protecting your information

I take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure. This includes using reputable service providers, password-protected accounts, secure devices and appropriate access controls.

No online system can be guaranteed to be completely secure, but reasonable measures are taken according to the nature of the information being handled.

Your rights

Under UK data-protection law, depending on the circumstances, you may have the right to ask for access to your personal information, have inaccurate information corrected, request deletion or restriction of your information, object to certain uses, receive certain information in a portable form, or withdraw consent where processing is based on consent.

You can also object to direct marketing at any time.

To exercise your rights or ask a question about your personal information, please contact me through the Contact Mepage on this website.

You also have the right to raise a concern with the Information Commissioner's Office (ICO) if you are unhappy with how your personal information has been handled.