Privacy Policy

At Depth Solutions

Last Updated: 1st October 2026

1. Who We Are

This website (atdepthsolutions.co.uk) is operated by Alan Hayward, trading as At Depth Solutions (“we”, “us”, “our”), a sole trader based at:

105 Eclipse Court, 1 Barnard Square, Ipswich, IP2 8FD, United Kingdom

For any questions about this policy or how we handle your personal data, contact us at: info[at]atdepthsolutions[dot]co[dot]uk

We are the data controller for the personal data described in this policy.

2. What This Policy Covers

At Depth Solutions provides personal development and corporate training courses and Stand-Up Comedy gigs, along with a website, newsletter and membership. This policy explains how we collect, use, store, and protect your personal data when you:

  • Browse our website
  • Sign up to our newsletter and / or membership
  • Purchase a course, ticket, membership or service through our checkout
  • Contact us directly

3. What Personal Data We Collect

Depending on how you interact with us, we may collect:

  • First name and last name
  • Email address
  • Postal address
  • Phone number
  • E-commerce checkout data (e.g. billing details, order history, transaction records)
  • Payment information (processed directly by our payment processor — see Section 6; we do not store full card details ourselves)

We do not collect any special category data (such as health, religious, or biometric data) through this website.

4. How We Collect Your Data

We collect personal data directly from you when you:

  • Sign up to our newsletter and / or membership
  • Book or purchase a course, membership, training session, comedy gig ticket, or related services
  • Fill in a contact form or email us directly

We do not currently purchase or receive personal data about you from third-party sources, data brokers, or social media platforms.

5. How and Why We Use Your Data

We use your personal data for the following purposes, and rely on the following lawful bases under UK GDPR:

Purpose of why we collect your data, which data and the lawful basis to it

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

6. Who We Share Your Data With

We share personal data with the following third-party service providers, who process data on our behalf (“data processors”) strictly to help us run our business:

  • Flodesk — our email marketing platform, used to send newsletters and marketing emails
  • ThriveCart — our checkout/order management and membership system
  • Stripe — our payment processor, used to securely process card payments

These providers are based outside the UK (primarily in the United States). Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place:

  • Stripe: Stripe is certified under the UK Extension to the EU-US Data Privacy Framework, which provides an approved legal safeguard for transferring personal data from the UK to the US. Stripe’s Data Processing Agreement is available at stripe.com/legal/dpa.
  • Flodesk: Flodesk relies on the EU Standard Contractual Clauses (incorporating the UK Addendum for UK-originating data) as its safeguard for transferring personal data to its US servers. Flodesk has also appointed a UK Representative (HelloDPO Law Limited) and an EU Representative (Bizlegal t/a EUREP) under Article 27 of the UK/EU GDPR, which UK data subjects or the ICO can contact directly with data protection queries. Flodesk has stated it is working towards (but has not yet completed) self-certification under the EU-US Data Privacy Framework; until that is complete, the Standard Contractual Clauses remain the operative safeguard. Flodesk’s Data Processing Addendum is available via their Help Center.
  • ThriveCart: The website checkout is provided by ThriveCart LLC, incorporated in Delaware, USA. ThriveCart is currently working towards following the EU/US Data Privacy Framework.

We do not sell your personal data to any third party.

7. Cookies

Our website and email communications use cookies and similar tracking technologies set by the third-party services that power our checkout, payments, and email marketing. These fall into different categories:

  • Strictly necessary cookies (no consent required under PECR): used by ThriveCart and Stripe for session management, shopping cart functionality, and fraud prevention during checkout. Stripe has confirmed it collects information on customer interactions with its checkout elements — using cookies and IP addresses — to provide its services, prevent fraud, and improve its services. Flodesk has also confirmed that the cookies set by its embedded newsletter sign-up forms (e.g. remembering that a visitor has subscribed, and basic form-analytics queuing) are first-party and serve an essential function, with no data used for marketing purposes.
  • Analytics cookies (consent required under PECR): ThriveCart has confirmed it uses analytics cookies on its checkout platform to understand and improve its services.
  • Affiliate tracking cookies (consent required under PECR): if you arrive at our checkout via an affiliate link, ThriveCart sets a tracking cookie to attribute the referral.
  • Email tracking pixels: Flodesk deploys an email open pixel and click tracking in the newsletters we send, to measure deliverability and engagement. Flodesk has confirmed these are enabled by default and cannot currently be disabled at account level, though they have stated they are developing this option. A separate, optional pixel Legislation relating to a potential requirement to address the issue of email tracking pixels that cannot be switched off is pending – this is currently a genuinely unsettled area for UK enforcement and will be monitored in case it needs adjusting in the future.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

  • Newsletter/membership/marketing data: retained for as long as you remain subscribed. If you unsubscribe, we will stop using your data for marketing purposes, though we may retain minimal records (e.g. suppression lists) to ensure we don’t contact you again.
  • Course, membership, training and event booking data: retained for the duration of our relationship with you, plus a period afterwards to deal with any post-purchase queries.
  • Financial and transaction records (invoices, payment records): retained for 6 years from the end of the relevant tax year, in line with HMRC record-keeping requirements.
  • Enquiry/contact data: retained only as long as needed to resolve your query, unless you go on to become a customer, client, member or subscriber.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), in certain circumstances
  • Restrict how we use your data
  • Object to processing based on legitimate interests or direct marketing
  • Data portability — receive your data in a portable format
  • Withdraw consent at any time, where we rely on consent (e.g. newsletter marketing)

To exercise any of these rights, contact us at info[at]atdepthsolutions[dot]co[dot]uk. We will respond within one month, as required by law.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO):

  • Website: www.ico.org.uk
  • Helpline: 0303 123 1113

10. Marketing Communications

We only send you newsletter and marketing emails if you have actively subscribed via double opt-in (you must confirm your subscription via a confirmation email before we begin sending marketing content).

Every marketing email includes an unsubscribe link, allowing you to opt out at any time. We do not carry out SMS or telephone marketing.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data, including relying on reputable third-party providers (Flodesk, ThriveCart, Stripe) who maintain their own industry-standard security measures (including PCI DSS compliance for payment processing via Stripe).

No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data against unauthorised access, loss, or misuse.

12. Children's Data

Our courses, membership, services, and comedy gigs are intended for adults. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will indicate when it was last revised. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact:

Alan Hayward, trading as At Depth Solutions

105 Eclipse Court, 1 Barnard Square, Ipswich, IP2 8FD, United Kingdom

Email: info[at]atdepthsolutions[dot]co[dot]uk