Privacy Policy
Who we are
I am committed to maintaining the trust and confidence of visitors to this website and clients using our coaching services. Confidentiality is our priority, and this Privacy Policy outlines how we collect, store, and use your personal information. If you have any concerns or questions, please contact me directly at hello@richardwine.me.
What does this notice cover?
This Privacy Policy explains how we use your personal data: how it is collected, held, and processed. It also explains your rights under the law relating to your personal data.
What is personal data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the ‘GDPR’) as ‘any information relating to an identifiable person who can be directly or indirectly identified, in particular by reference to an identifier.’
Personal data includes obvious details such as your name and contact information, as well as less obvious identifiers like electronic location data and other online identifiers.
What are your rights?
Under the GDPR, you have the following rights, which we uphold:
- The right to be informed about the collection and use of your personal data (outlined in this Privacy Policy).
- The right to access the personal data we hold about you.
- The right to have inaccurate or incomplete personal data rectified.
- The right to request deletion of your personal data (‘the right to be forgotten’).
- The right to restrict or object to the processing of your personal data.
- Rights relating to automated decision-making and profiling (we do not use personal data in this way).
For any concerns regarding your personal data, you can contact us at hello@richardwine.me. If necessary, you also have the right to lodge a complaint with the Information Commissioner’s Office.
What personal data do we collect?
We collect the following information:
- For digital product purchases (Hypnonscious): first name, email address, and payment details (payment is handled on our checkout provider's secure pages — we never see card numbers).
- For 1:1 coaching services: Name, email address, phone number, and any information voluntarily shared during coaching sessions.
- For website visitors who consent: usage data through Google Analytics 4 and the Meta pixel — pages viewed, actions taken, and purchases — together with online identifiers set by those services. Nothing in this category is collected unless you accept it in the cookie banner. See Cookies and tracking below.
How do we use your personal data?
We use your personal data for the following purposes:
- Providing coaching services: Personalizing sessions and maintaining client records.
- Delivering digital products: Sending download links, course materials, or updates related to your purchase.
- Communicating with you: Responding to inquiries and sending service-related emails.
- Marketing (only with your consent): Sending occasional emails about new products or services, which you can opt out of at any time.
Confidentiality in coaching services
All information shared during 1:1 coaching sessions is strictly confidential and will not be disclosed to third parties unless:
- Required by law (e.g., risk of harm to self or others, legal investigations).
- Explicit consent is given by the client.
How long do we keep your personal data?
- Coaching session records (if applicable) will be securely stored for up to 12 months after our last session, after which they will be deleted.
- Digital product purchase records will be retained as required by tax laws but will not be used beyond necessary business operations.
- Marketing subscriptions remain active until you unsubscribe.
How and where do we store your data?
Your personal data is stored securely. Client records and email are held in the UK/EEA. Where website analytics and advertising services process data outside the UK/EEA, they do so under the safeguards described in Third-party services and international transfers above.
Do we share your personal data?
We do not share your personal data with third parties except:
- If legally required (e.g., court orders, government authorities).
- If necessary for payment processing (handled by secure third-party providers).
How can you access your personal data?
You can request access to the personal data we hold about you by emailing hello@richardwine.me. We will respond within 7 working days, and no later than 14 days.
Cookies and tracking
When you first visit, a banner asks whether you accept analytics and marketing cookies. Until you choose Accept, only the strictly necessary items below are used and no data is sent to Google or Meta — this is enforced with Google Consent Mode. You can change your choice at any time from the Cookie preferences link in the footer.
| Name / technology | Set by | Purpose | Retention | Category |
|---|---|---|---|---|
rw-consent | this site (local storage) | Remembers your cookie choice | Until you clear it | Strictly necessary |
rw-pick3 | this site (local storage) | Remembers which audios are in your cart | Until you clear it | Strictly necessary |
| Google Tag Manager | Loads the tags below according to your consent. Sets no cookies of its own. | — | Necessary | |
_ga, _ga_<id> | Google Analytics 4 | Measures visits, pages, and purchases so we can improve the site | Up to 2 years | Analytics — consent required |
_gcl_* | Google Ads | Attributes a purchase to a Google ad you clicked | Up to 90 days | Marketing — consent required |
_fbp, _fbc | Meta pixel | Attributes a purchase to a Meta (Facebook/Instagram) ad and helps show relevant ads | Up to 90 days | Marketing — consent required |
Checkout and payment happen on our provider's own secure pages (PocketsFlow, with Stripe and PayPal); those pages have their own privacy notices and set their own cookies, which we do not control.
Third-party services and international transfers
If you consent to analytics and marketing cookies, some data (online identifiers, the pages you view, and purchase details) is shared with:
- Google (Google Analytics 4, Google Ads, Google Tag Manager) — policies.google.com/privacy
- Meta Platforms (Facebook/Instagram pixel and Conversions API) — facebook.com/privacy/policy
Both providers may process this data in the United States. They do so under the EU–US and UK Data Privacy Framework and Standard Contractual Clauses, which provide the safeguards required by the GDPR for transfers outside the UK/EEA. For purchases, we also send a server-side confirmation of the sale to Google and (only if you consented to marketing) to Meta, so that ad reporting is accurate even when your browser blocks tracking.
Legal basis. Analytics and marketing cookies and the data sharing above rely on your consent (Article 6(1)(a) GDPR), which you give in the cookie banner and can withdraw at any time. Delivering a product you bought and keeping tax records rely on contract and legal obligation.
Security of this website
The site is a static site served over HTTPS. Order handling runs on serverless functions with signed requests; email is sent through a verified sender. We keep access to any personal data limited to what is needed to run the business.
Email security and personal details
All email correspondence is securely stored and accessible only by us. Your email address and personal details will never be shared with third parties.
How can you contact us?
For any inquiries related to personal data and privacy, contact us at hello@richardwine.me.
Privacy policy review
This Privacy Policy was last reviewed on 3/9/2026 and is reviewed every six months to ensure compliance with regulations.