Privacy Policy

Updated January 2026
Next review due January 2028

Worthy Earth is committed to protecting your privacy. This Privacy Policy explains how we collect, use and safeguard your personal information when you use our website, enrol on our courses, purchase products, attend events, or communicate with us.

We handle your personal data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

We may collect and process the following information:

Course enrolments and event participation:

  • Name

  • Email address

  • Any additional information required for course delivery or event administration

Online purchases

  • Name

  • Email address

  • Postal address

  • Payment information (processed securely by our payment providers; we do not store card details)

Website contact forms

  • Name

  • Email address or telephone number

  • Any information submitted as part of your enquiry

Marketing sign-ups

  • Name

  • Email address

Website usage data

  • IP address

  • Browser and device details

  • Cookies and analytics information

We do not collect special category data unless it is strictly necessary for a specific programme and only with your explicit consent.

Where information is collected from

We collect personal data through:

  • Course and event booking systems

  • Purchases made through our website

  • Website forms submitted directly to us

  • Mailing list sign-ups via Squarespace

  • Cookies and analytics tools (such as Google Analytics and Google Tag Manager

Why we collect this information

We use your information to:

  • Administer course enrolments and event participation

  • Process and fulfil online orders

  • Respond to enquiries and support requests

  • Send marketing communications where you have given consent

  • Improve the performance, usability and content of our website

We will never sell your personal information to third parties or share it for marketing purposes without your explicit consent.

Legal basis for processing

We rely on the following legal bases under UK GDPR:

  • Contract
    To process course enrolments, purchases and enquiries.

  • Legitimate interests
    For administering our programmes, improving our website, and communicating with you regarding your participation or purchase.

  • Consent
    For sending marketing communications such as newsletters and updates. You can withdraw your consent at any time.

  • Legal obligation
    For maintaining financial records for audit and tax purposes.

How long we keep data

We retain personal data only for as long as necessary:

  • Course enrolments and enquiries: 1 year

  • Marketing subscriptions: until you unsubscribe

  • Online purchase data: 7 years (for financial and audit compliance)

  • Website analytics data: in line with provider retention schedules

All data is securely deleted once the retention period expires.

Marketing communications

If you sign up to our mailing list, we will send you updates about Worthy Earth’s courses, events, products and resources. You can unsubscribe at any time using the link in our emails or by contacting us at info@worthy–earth.co.uk.

We use Squarespace to manage subscriber data. Their privacy policy can be found here:
https://www.squarespace.com/privacy

We do not share marketing data with external organisations for their own purposes.

Cookies

Cookies are small text files placed on your device to help our website function properly and collect anonymous usage data. For general information, visit www.aboutcookies.org or www.allaboutcookies.org.

We use:

  • Necessary cookies for core site functionality

  • Analytics cookies to understand site performance

  • Tracking technologies from trusted partners such as Google LLC for measurement and optimisation

You can manage or refuse cookies through your browser settings or our cookie banner. Some site features may not function correctly without essential cookies.

We do not use cookies for profiling or automated decision-making.

International data transfers

Some of our trusted service providers (such as Google, Mailchimp/Intuit, payment processors and booking platforms) may process data outside the UK.

Where this occurs, we rely on appropriate safeguards, including:

  • The UK–US Data Bridge

  • Standard Contractual Clauses

  • Equivalent protective measures recognised by UK GDPR

Data security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

Your data protection rights

You have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate information

  • Request deletion of your data

  • Restrict how your data is processed

  • Object to processing based on legitimate interests

  • Withdraw consent for marketing at any time

  • Request a copy of your data in a portable format

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact: info@worthy-earth.co.uk

Accessing and updating your information

We want to ensure your personal information is accurate and up to date. If you believe any data we hold is incorrect or incomplete, please contact us, and we will promptly correct it.

Worthy Earth
12 Cranmore Gardens
Aldershot
Hampshire
GU11 3BE
United Kingdom
Email: info@worthy-earth.co.uk

Changes to this privacy policy

We keep this policy under regular review and may update it from time to time. Any changes will be published on this page.

This policy was last updated on 21/01/2026.