Privacy Notice

The Digital Holistic Therapist
Last updated: August 2026

About This Notice

The Digital Holistic Therapist respects your privacy and aims to collect and retain only the personal information reasonably necessary to provide educational and related administrative services.

This Privacy Notice explains how personal information received directly by The Digital Holistic Therapist is handled in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Udemy Courses

All courses are currently purchased, accessed and delivered through Udemy.

Udemy operates its own platform and is responsible for the personal information it collects and processes through student accounts, enrolments, payments and other platform services in accordance with its own privacy policies.

Where limited student information is made available to me through Udemy's instructor facilities, I use that information only for appropriate educational, communication and administrative purposes.

Information I Collect Directly

Outside Udemy, I collect very limited personal information.

Where you contact me directly regarding an optional personalised Certificate of Completion or another legitimate course-related matter, this may include:

• your name;

• your email address;

• the relevant course;

• information necessary to confirm course completion;

• certificate and invoice information;

• correspondence relating to your request; and

• payment confirmation or transaction references where applicable.

I do not require or directly process payment-card details.

My website does not currently provide a contact form, mailing list or newsletter and I do not use it to collect student information through those facilities.

Optional Certificates of Completion

Where an optional personalised Certificate of Completion is requested, information necessary to prepare, invoice and issue the certificate will be processed.

Certificates are individually prepared as PDF documents and supplied directly to the learner by email for their records.

A minimal certificate record may be retained to verify certificates issued by The Digital Holistic Therapist. This may include the learner's name, course title, certificate/reference number, date of issue and relevant invoice/reference number.

The certificate register will not be used to record personal disclosures or unnecessary sensitive information.

Payments

Payment for an optional personalised certificate may be made following the issue of an invoice by PayPal or direct bank payment.

PayPal and financial institutions process payment information under their own privacy arrangements.

I retain only the payment and transaction information reasonably required for administration, accounting, record keeping and compliance with applicable legal obligations.

Email and Udemy Messaging

Students should ordinarily use Udemy's messaging facilities for course-related communication.

Where direct email contact is made available for legitimate course-related administrative purposes, including personalised certificate requests, information received by email will be used only for appropriate educational, administrative or related business purposes.

Students are encouraged not to include unnecessary sensitive personal information in routine correspondence.

Sensitive Personal Information

Some courses address sensitive subjects including domestic abuse, sexual violence, trauma, safeguarding, mental health and health-related matters.

Students are not required to disclose personal experiences through routine correspondence and are encouraged not to provide sensitive personal information unless genuinely necessary.

Course messaging and email correspondence do not constitute a therapeutic, clinical, legal, crisis or safeguarding service.

Third-Party Communication

I communicate directly with enrolled adult students regarding individual student matters.

I do not ordinarily disclose, confirm or discuss an individual student's course participation, completion, certification, correspondence, personal disclosures or other student-specific information with spouses, partners, relatives, friends or other third parties.

Please refer to the Student Communication, Privacy & Professional Boundaries Policy for further information.

Why Information Is Used

Personal information may be processed where necessary to:

• respond to legitimate student enquiries;

• administer educational correspondence;

• prepare and issue requested certificates;

• issue and maintain appropriate invoice and payment records;

• maintain a minimal record of certificates issued;

• protect appropriate professional and communication boundaries;

• respond to complaints or disputes;

• comply with legal, accounting or regulatory obligations; and

• establish, exercise or defend legal rights where necessary.

The applicable lawful basis will depend upon the purpose for which the information is processed. This may include performance of a contract, compliance with a legal obligation or legitimate interests in responsibly administering and protecting the educational business.

Sharing Information

Personal information is not sold.

Information will only be shared where reasonably necessary, including with payment or financial service providers, professional advisers, Udemy where a matter appropriately concerns the Udemy platform, or public and regulatory authorities where required or permitted by law.

How Long Information Is Kept

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected or where retention is required for legitimate business, accounting or legal purposes.

Financial and invoice records may need to be retained for the periods required by applicable UK tax and accounting requirements.

A minimal certificate register may be retained for long-term certificate verification purposes.

Routine correspondence that is no longer required will be securely deleted.

Security

Reasonable measures are taken to protect personal information against unauthorised access, loss, misuse or disclosure.

Students are responsible for maintaining the security of their own Udemy, email and other personal accounts.

Concerns regarding inappropriate or third-party use of a Udemy account may be referred to Udemy where appropriate.

Your Rights

Under UK data protection law, you may have rights relating to your personal information, including rights to:

• request access to personal information held about you;

• request correction of inaccurate information;

• request deletion in certain circumstances;

• request restriction of processing in certain circumstances; and

• object to certain processing.

Additional rights may apply depending upon the circumstances and lawful basis for processing.

Requests concerning personal information processed directly by The Digital Holistic Therapist can be made using the contact information provided on this website.

Concerns and Complaints

If you have a concern about how The Digital Holistic Therapist has handled your personal information, please contact me in the first instance.

You also have the right to raise a concern with the UK Information Commissioner's Office (ICO).

Changes to This Notice

This Privacy Notice may be updated where necessary to reflect changes in legal requirements or business practices.

The current version will be published on The Digital Holistic Therapist website.