Privacy and Cookies Policy

Last updated: 27th July 2026

This Privacy and Cookies Policy explains how Tony Stockwell collects, uses, stores and protects personal information when you:

• visit tonystockwell.com;
• contact Tony Stockwell or a member of the team;
• subscribe to emails;
• purchase a course, event, membership, reading, download or other service;
• participate in an online or in-person event;
• join Tony Stockwell’s online community;
• interact with Tony Stockwell advertising on platforms such as Facebook and Instagram; or
• otherwise provide personal information to us.

We are committed to treating your personal information fairly, lawfully and transparently.

1. Who is responsible for your personal information?

For the purposes of UK data protection law, the data controller is:

Tony Stockwell LTD, The Ridings Chalk Street, Rettendon Common, Chelmsford, Essex, England, CM3 8DB

Email: privacy@tonystockwell.com
Website: https://tonystockwell.com

The data controller determines why and how personal information is used.

We are not currently required to appoint a formal Data Protection Officer. Questions or requests concerning this policy or your personal information should be sent to privacy@tonystockwell.com.

2. Personal information we collect

The information we collect depends on how you interact with us.

It may include:

Identity and contact information

• your name;
• email address;
• telephone number;
• postal or billing address;
• country, region or time zone;
• social-media username or profile information, where relevant; and
• account or community username.

Transaction and booking information

• courses, workshops, events, readings, memberships or products you purchase;
• booking and attendance details;
• transaction references;
• payment status;
• billing information;
• refund or cancellation information; and
• correspondence relating to your booking.

We do not normally receive or retain complete payment-card details when payment is processed through a third-party payment provider.

Course, community and participation information

• course applications and information about your previous experience;
• answers submitted through registration or application forms;
• community posts, comments and messages;
• questions submitted during courses or events;
• webinar or event attendance;
• photographs, video or audio recordings where an event is recorded;
• feedback, reviews and testimonials;
• competition entries; and
• communications with tutors, administrators and other members of Tony Stockwell’s team.

Marketing information

• whether you have subscribed to receive marketing;
• your marketing preferences;
• records of consent;
• email opens, clicks and interactions;
• the source through which you joined our mailing list;
• your response to advertising campaigns; and
• records of marketing objections, unsubscribes and suppression requests.

Website and device information

When you use our website, we may collect:

• your Internet Protocol address;
• approximate location based on your IP address;
• browser type and version;
• device type;
• operating system;
• referring website;
• pages visited;
• dates and times of visits;
• links and buttons selected;
• website errors;
• cookie identifiers; and
• information about how you use the website.

Some of this information is collected through cookies and similar technologies. More information is provided in the cookies section below.

Correspondence

We may retain information you provide when you:

• complete a contact form;
• send us an email;
• contact us through social media;
• ask a question;
• submit a complaint;
• request support; or
• correspond with an event organiser, tutor or member of Tony Stockwell’s team.

Information received from other organisations

We may receive information from:

• payment providers;
• event venues and ticketing providers;
• affiliated event organisers;
• course tutors and administrators;
• Mighty Networks;
• Brevo;
• Meta;
• Google;
• Zoom;
• website, ecommerce and analytics providers; and
• other service providers involved in delivering a service you have requested.

Where an event or service is organised and sold independently by another organisation, that organisation may be a separate data controller and its own privacy policy will apply.

3. Special-category information

UK data protection law gives additional protection to certain sensitive information, known as special-category data.

This includes information concerning:

• religious or philosophical beliefs;
• health;
• racial or ethnic origin;
• political opinions;
• trade-union membership;
• genetic or biometric identification;
• sex life; and
• sexual orientation.

Tony Stockwell’s work relates to mediumship, spirituality and personal development. Information about the courses, events or communities with which a person engages could, in some circumstances, reveal or lead to an inference about philosophical or religious beliefs.

We do not use personal information with the intention of making assumptions about a person’s religion or beliefs unless this is necessary for a specific service and we have an appropriate legal condition for doing so.

We will not upload course titles, spiritual interests, health information, private community posts or similar sensitive details to advertising platforms for customer matching.

Where you voluntarily provide health, accessibility or other sensitive information—for example, to arrange reasonable support at an event—we will use it only for the purpose for which it was provided. Our legal basis will normally be your explicit consent or another condition permitted by law.

You may withdraw explicit consent by contacting privacy@tonystockwell.com. This will not affect processing that lawfully took place before consent was withdrawn.

4. How and why we use personal information

We use personal information only where we have a lawful reason to do so.

Different lawful bases may apply to different activities.

To process purchases and bookings

We use personal information to:

• process orders and registrations;
• take and confirm payment;
• send booking confirmations;
• provide access to courses, events, downloads or memberships;
• administer instalment arrangements;
• manage cancellations, transfers and refunds;
• communicate changes to an event or service; and
• provide customer support.

Lawful basis: Performance of a contract, or taking steps at your request before entering a contract.

We may also retain transaction records to meet our accounting, tax and legal obligations.

Lawful basis: Legal obligation.

To deliver courses, events and services

We use personal information to:

• administer course and event attendance;
• provide access links and joining instructions;
• manage applications and eligibility;
• communicate course materials;
• operate online classes and community spaces;
• answer questions;
• provide readings, mentoring or other booked services;
• support participants;
• manage conduct and safety; and
• maintain appropriate records of participation.

Lawful basis: Performance of a contract.

Where processing is not strictly contractual, we may rely on our legitimate interests in administering and improving Tony Stockwell’s services, provided those interests are not overridden by your rights.

To operate the Mighty Networks community

Where you join Tony Stockwell’s community hosted through Mighty Networks, we may use your information to:

• create or administer your community access;
• communicate community news and updates;
• manage membership;
• provide community content;
• moderate posts and discussions;
• respond to support enquiries;
• enforce community rules; and
• protect members and the community from misuse.

Mighty Networks also processes information under its own privacy policy and platform terms.

Depending on the activity, our lawful basis is:

• performance of a contract;
• your consent; or
• our legitimate interests in operating, protecting and improving the community.

You are responsible for information you voluntarily post within a community space. Please avoid sharing sensitive personal information unless you are comfortable doing so and it is genuinely necessary.

To respond to enquiries

We use information submitted through contact forms, email, telephone or social media to answer questions and provide support.

Lawful basis: Our legitimate interests in responding to enquiries and managing our activities, or taking steps at your request before entering a contract.

To send service communications

We may send administrative communications relating to a purchase, booking, event, account or membership.

These may include:

• payment confirmations;
• joining instructions;
• schedule changes;
• reminders;
• account notices;
• safety or security information; and
• essential changes to a service.

These are service messages rather than marketing messages.

Lawful basis: Performance of a contract, legal obligation or our legitimate interests in administering the service.

To send email marketing

Where permitted, we may send information about:

• Tony Stockwell’s courses;
• events and appearances;
• online programmes;
• community activities;
• meditations and other products;
• news and articles; and
• related services we believe may interest you.

We normally send email marketing where:

• you have actively subscribed; or
• you have purchased a relevant product or service and the law permits us to contact you about similar products or services.

Our lawful basis will normally be:

• your consent; or
• our legitimate interests in marketing similar services to existing customers, where the electronic-marketing rules allow this.

You may unsubscribe at any time by:

• selecting the unsubscribe link in a marketing email; or
• emailing privacy@tonystockwell.com.

We will retain sufficient information on a suppression list to ensure that we do not accidentally add you back to marketing communications.

Unsubscribing from marketing does not prevent us from sending essential service messages relating to an active booking, purchase or account.

To analyse and improve our services

We may use website, purchasing and engagement information to:

• understand how people use the website;
• identify popular content and services;
• improve website performance;
• diagnose technical problems;
• plan future courses and events;
• measure the effectiveness of communications;
• prepare aggregated business reports; and
• improve the customer experience.

Lawful basis: Our legitimate interests in understanding and improving our website and services.

Where non-essential cookies or tracking technologies are involved, we will ask for consent before activating them.

To protect our organisation, website and users

We may use personal information to:

• prevent fraud;
• detect malicious website activity;
• secure accounts;
• investigate complaints;
• enforce terms and conditions;
• prevent abusive or disruptive conduct;
• establish, exercise or defend legal claims; and
• comply with lawful requests from courts, regulators or authorities.

Lawful basis: Legal obligation and our legitimate interests in protecting our organisation, systems, customers and community members.

5. Social-media advertising and Meta customer-list audiences

We use Meta platforms, including Facebook and Instagram, to advertise Tony Stockwell’s courses, events, content and online communities.

We may use contact information such as your email address to help us show relevant Tony Stockwell advertising to existing customers and subscribers through Meta, where we have an appropriate lawful basis to do so.

For this purpose, we may upload selected contact information to Meta’s Customer List Custom Audiences service.

Before upload, contact details are converted into hashed values using Meta’s required hashing process. Meta compares the hashed information with information connected to its user accounts to determine whether there is a match.

Hashing provides additional protection during the matching process, but the information remains personal data because it is being used for account matching.

Depending on the campaign and the permissions obtained, Meta audiences may be used to:

• show Tony Stockwell advertising to existing contacts who use Facebook or Instagram;
• exclude existing customers or subscribers from particular campaigns; or
• help identify a broader audience of Meta users who may share characteristics with an existing audience.

Depending on the audience and the information used, our lawful basis for customer-list matching will be either our legitimate interests in promoting related Tony Stockwell services to existing customers and subscribers, or your consent.

Where we rely on legitimate interests, we assess whether the use is necessary, proportionate and within the reasonable expectations of the people concerned. We will not include anyone who has objected to direct marketing or opted out of customer-list advertising.

We will not rely on legitimate interests where personal information is deliberately used to reveal or infer religious or philosophical beliefs, or where another special-category condition is required. In those circumstances, we will normally seek your explicit consent.

You may object to the use of your information for customer-list advertising at any time without unsubscribing from Tony Stockwell’s email updates.

We will not provide Meta with:

• details of private readings;
• community posts or private messages;
• health or accessibility information;
• course application answers;
• notes about an individual;
• the substance of personal correspondence; or
• information deliberately identifying a person’s religious or philosophical beliefs.

You may withdraw your consent or object to the use of your personal information for direct marketing at any time by emailing privacy@tonystockwell.com.

If you withdraw consent or object, we will:

• exclude your information from future customer-list uploads;
• record your objection on our suppression list; and
• where reasonably possible, remove you from customer-list audiences under our control.

You may also manage the advertising shown to you through your Facebook or Instagram advertising settings.

Meta processes information under its own terms and privacy policy. Meta may also use information collected through its platforms independently of Tony Stockwell.

An authorised advertising specialist may perform audience uploads and campaign administration on our behalf. That provider must act under written instructions, use the information only for Tony Stockwell’s advertising and delete any temporary customer-list file once the authorised upload has been completed.

6. Advertising pixels and conversion tracking

Subject to your cookie choices, we may use advertising technologies such as the Meta Pixel or similar tools.

These can help us:

• understand whether an advert led to a website visit or purchase;
• measure advertising performance;
• limit repetitive advertising;
• build website-visitor audiences;
• exclude existing purchasers from some campaigns; and
• improve the relevance of future advertising.

These technologies may collect information about your browser, device, website activity and interactions with advertising.

Non-essential advertising technologies will not be activated until you have provided the required cookie consent.

You can change or withdraw your cookie choices at any time through the cookie settings available on our website.

7. Recordings, photographs and testimonials

Some online or in-person courses and events may be photographed or recorded.

Where recording takes place, we will aim to tell participants before or at the start of the event.

Recordings may be used to:

• provide a replay to registered participants;
• create course materials;
• maintain an internal record;
• promote Tony Stockwell’s work; or
• create extracts for social media, the website or other marketing.

Where a recording is necessary to deliver a service that you have purchased, our lawful basis may be performance of a contract or our legitimate interests.

Where an identifiable recording, photograph, testimonial or personal story will be used for wider promotional purposes, we will normally obtain consent where appropriate.

You may contact us if you have concerns about appearing in a recording. We will consider the circumstances and any applicable rights, although it may not always be possible to remove an individual from material that has already been lawfully published or distributed.

We will not publish a private testimonial, personal story or message as promotional content without permission.

8. Competitions, surveys and feedback

If you enter a competition or complete a survey, we may use the information you provide to:

• administer the competition;
• contact winners;
• deliver prizes;
• analyse responses; and
• improve our services.

Lawful basis: Performance of the competition terms, consent or our legitimate interests, depending on the activity.

We will not add competition entrants to general email marketing unless they have separately agreed to receive it or another lawful marketing basis applies.

9. Children’s information

Tony Stockwell’s paid courses, workshops, events and one-to-one services are generally intended for adults aged 18 or over unless expressly stated otherwise.

We do not knowingly use children’s personal information for customer-list advertising.

Where a specific service is offered to a person under 18, we will take reasonable steps to ensure that the collection and use of information is appropriate and, where necessary, obtain permission from a parent or guardian.

If you believe a child has provided personal information to us inappropriately, please contact privacy@tonystockwell.com.

10. Who we share information with

We do not sell personal information.

We may share limited personal information with organisations that help us operate our website and deliver services, including:

• website hosting and technical-support providers;
• WordPress and WooCommerce service providers;
• Brevo or another email and customer-communications provider;
• Mighty Networks;
• Meta, including Facebook and Instagram;
• Google, including services such as analytics, advertising and reCAPTCHA;
• Zoom and other webinar or video-conferencing providers;
• Vimeo, YouTube or other video-hosting providers;
• payment providers such as PayPal and its card-processing providers;
• accounting, bookkeeping and professional advisers;
• cloud-storage and document-management providers;
• authorised course administrators, tutors and support personnel;
• advertising, website and marketing service providers;
• event venues, organisers and ticketing providers where necessary;
• delivery providers where physical items are ordered;
• insurers, legal advisers, regulators, courts and law-enforcement agencies where required; and
• a purchaser or successor if all or part of the business is sold or reorganised.

Service providers may use personal information only to provide the relevant service, unless they separately explain that they act as an independent data controller.

Where you purchase tickets or services directly from an affiliated organiser, venue or external ticket seller, that organisation will normally be responsible for its own processing of your personal information.

11. International transfers

Some service providers may process or store personal information outside the United Kingdom.

This may include processing in the United States, the European Economic Area, Australia and other countries in which our service providers operate. Key service providers may also process information from locations in which their personnel, infrastructure or subcontractors operate.

Where a restricted international transfer takes place, we will take reasonable steps to ensure that an appropriate legal safeguard applies. Depending on the destination and provider, this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission’s Standard Contractual Clauses; or
• another lawful transfer mechanism.

You may contact privacy@tonystockwell.com for further information about the safeguards used for a particular transfer.

12. How long we keep personal information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, including legal, accounting, contractual and dispute-resolution requirements.

Our usual retention periods are:

Orders, payments and accounting records

Normally retained for up to seven years after the end of the relevant financial year, where needed for tax, accounting and legal purposes.

Booking and course administration records

Normally retained for up to six years after the service ends, unless a shorter period is appropriate or a legal dispute requires longer retention.

General enquiries

Normally retained for up to two years after the enquiry has been resolved, unless the enquiry leads to a purchase, contract or legal issue.

Marketing records

Marketing contact information is retained while you remain subscribed or while we have another lawful basis to contact you.

When you unsubscribe or object, we may retain a minimal suppression record indefinitely so that your preference continues to be respected.

Customer-list audience files

Temporary files prepared for an authorised Meta customer-list upload should be deleted promptly after the upload has been completed and checked.

Customer-list audiences will be reviewed periodically and deleted when they are no longer required.

Community information

Community account and activity information may be retained for as long as your account remains active and for a reasonable period afterwards to manage security, disputes and community records.

Content posted within the community may remain visible where it forms part of an ongoing discussion, subject to your rights and the community platform’s controls.

Recordings

Course and event recordings will be retained for as long as they remain relevant to the course, service, archive or promotional purpose explained when they were created.

Recordings intended only for short-term participant access will be removed or archived when they are no longer required.

Website analytics

Analytics information is retained according to the settings applied within Google Analytics. Event data is retained for 2 months and user data is retained for 14 months. The user-data retention period resets when new user activity is recorded.

We may keep information longer where:

• required by law;
• needed to resolve a complaint or dispute;
• required to establish or defend a legal claim;
• necessary to protect users or the organisation; or
• the information has been securely anonymised so it can no longer identify anyone.

13. How we protect personal information

We use reasonable technical and organisational measures designed to protect personal information from:

• unauthorised access;
• accidental loss;
• alteration;
• misuse;
• disclosure; and
• destruction.

Measures may include:

• access controls;
• password protection;
• multi-factor authentication where available;
• encryption in transit;
• limited staff and contractor access;
• secure payment providers;
• website security monitoring;
• backups;
• software updates;
• confidentiality obligations; and
• deletion procedures for temporary data exports.

No internet service or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where required by law.

14. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• ask for confirmation that we process your personal information;
• request a copy of your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information;
• ask us to restrict processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• withdraw consent;
• request data portability; and
• complain to the Information Commissioner’s Office.

Not every right applies in every circumstance. We may need to retain some information where we have a legal obligation or another lawful reason to do so.

We may ask for information to confirm your identity before responding to a request.

We normally respond to valid requests within one month, although the law allows additional time for particularly complex requests.

Requests should be sent to:

privacy@tonystockwell.com

Rights of visitors outside the United Kingdom

If you live outside the United Kingdom, local privacy laws may provide additional rights concerning your personal information. These may include rights to access, correct or delete information, withdraw consent, object to certain uses, or make a complaint to a local privacy regulator.

We will consider privacy requests in accordance with the laws that apply to our activities and to the individual making the request. Requests should be sent to privacy@tonystockwell.com.

Nothing in this policy is intended to limit any mandatory privacy rights that apply to you under the law of your country or state of residence.

15. Your right to object to direct marketing

You have the right to object at any time to the use of your personal information for direct marketing.

This includes:

• marketing emails;
• customer-list advertising;
• associated marketing profiling; and
• the inclusion of your contact information in future advertising-audience uploads.

To object:

• select the unsubscribe link in a marketing email; or
• email privacy@tonystockwell.com.

There is no charge for making an objection.

We may retain a minimal suppression record to ensure that your objection continues to be respected.

16. Automated decision-making and profiling

We do not normally make decisions about individuals based solely on automated processing where those decisions have legal or similarly significant effects.

We may use limited profiling to:

• understand broad audience interests;
• segment communications;
• measure engagement;
• avoid sending irrelevant messages;
• analyse website use; and
• improve advertising.

Meta and other advertising platforms may use their own automated systems to select which users see particular advertisements. Their processing is also governed by their own privacy information and platform settings.

You may object to direct-marketing profiling by contacting privacy@tonystockwell.com.

17. Cookies and similar technologies

Cookies are small text files or identifiers placed on your device when you visit a website.

We may also use similar technologies such as pixels, tags and local storage.

Cookies can be divided into the following categories.

Strictly necessary cookies

These are required for the website to function.

They may be used to:

• maintain website security;
• remember shopping-basket contents;
• process checkout activity;
• maintain login sessions;
• remember privacy choices;
• balance website traffic; and
• prevent fraudulent or automated submissions.

These cookies do not normally require consent because the service requested by the user cannot operate properly without them.

Preference and functionality cookies

These remember choices such as:

• account preferences;
• display settings;
• video preferences;
• location or language choices; and
• previously entered information.

Where these cookies are not strictly necessary, they will be activated only with consent.

Analytics cookies

Analytics cookies help us understand:

• how many people visit the website;
• which pages are used;
• how visitors move through the website;
• whether errors occur; and
• how the website can be improved.

We may use services such as Google Analytics for this purpose.

Analytics cookies will be activated only where you have provided the required consent.

Advertising cookies

Advertising cookies and pixels may be used to:

• measure advertising campaigns;
• understand whether an advertisement led to a website action;
• build or exclude website audiences;
• limit repeated advertising; and
• improve the relevance of advertising on other platforms.

These may include technologies provided by Meta and Google.

Advertising cookies will be activated only where you have provided the required consent.

Embedded content

Pages may include content from third parties such as:

• YouTube;
• Vimeo;
• Facebook;
• Instagram;
• Mighty Networks; and
• other media or event platforms.

These providers may set cookies or collect information when embedded content is loaded or played.

Where required, non-essential embedded content should remain blocked until the relevant cookie consent is given.

18. Managing cookies

When you first visit the website, you should be given a choice about non-essential cookies.

You can:

• accept or reject cookie categories;
• change your preferences through the website’s cookie settings;
• delete cookies using your browser; and
• block cookies through your browser settings.

Rejecting non-essential cookies should not prevent you from accessing the main content of the website, although some videos, embedded services or optional features may not work correctly.

Your cookie preferences apply to the browser and device on which they were selected. You may need to set them again when using another browser or device or after deleting cookies.

19. Third-party websites and services

Our website may contain links to websites and services operated by other organisations.

These may include:

• event organisers;
• venues;
• ticket sellers;
• social networks;
• payment providers;
• merchandise sellers;
• video platforms; and
• community platforms.

We are not responsible for how an independent third party uses personal information collected directly through its website or service.

You should review the privacy information provided by that organisation before submitting personal information.

20. Complaints

Please contact us first if you have a concern about how your personal information has been handled.

Email: privacy@tonystockwell.com

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk

21. Changes to this policy

We may update this policy when:

• our services change;
• we introduce a new provider or technology;
• our advertising or community activities change;
• the law or regulatory guidance changes; or
• we identify information that should be explained more clearly.

The latest version will be published on this page with an updated revision date.

Where a change would significantly affect how we use existing personal information, we will take reasonable steps to bring it to the attention of affected individuals and obtain consent where the law requires it.

22. Contact us

Questions, objections and rights requests should be sent to:

Email: privacy@tonystockwell.com
Post: The Ridings Chalk Street, Rettendon Common, Chelmsford, Essex, England, CM3 8DB