PRIVACY POLICY
Last updated: 4 May 2026
1. Who We Are
This Privacy Policy explains how Dr Tharaka Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit www.drtharaka.com or interact with us.
Data Controller: Dr Tharaka Ltd (Company No. SC554685) Company registered in Scotland
Registered office: Aberdeen, Scotland, UK
Email: systems@drtharaka.com
2. What Personal Data We Collect
2.1 Data You Provide Directly
When you contact us or use forms on our website, we may collect your name, email address, phone number (if provided), organisation name (if provided), and any information you include in your message. This information is used solely to respond to your enquiry and provide relevant services.
2.2 Data Collected Automatically
Our website, hosted by Squarespace, automatically collects certain technical data including IP address, browser type, device type, pages visited, and date and time of visits. This data helps us understand how visitors use our site and improve performance. We do not use this data to identify individuals.
2.3 Sensitive Data
We do not intentionally collect sensitive personal data through our website. Please do not submit confidential or sensitive information via our contact forms.
3. How We Use Your Data
We use your personal data to respond to enquiries and communicate with you; to provide information about our services including speaking, coaching, and transformation programmes; to prepare for or fulfil contracts; to improve our website and user experience; and to comply with legal and regulatory obligations.
We only collect the minimum data necessary for these purposes.
4. Marketing Communications
Where you opt in to receive marketing communications, we may use your contact details to send updates about our services and programmes, event invitations, and insights or relevant content.
You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at systems@drtharaka.com.
We will only send marketing communications where we have your consent or are otherwise permitted by law.
5. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases: legitimate interests to respond to enquiries and operate our business; contract to enter into or perform agreements with you; consent for marketing communications; and legal obligation to comply with applicable laws.
6. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share it with trusted third parties where necessary, including our website host and analytics provider Squarespace; email and marketing platforms; CRM systems; scheduling tools; form providers; professional advisors; and authorities where required by law.
All third-party providers have appropriate data protection safeguards in place.
7. International Data Transfers
Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place such as Standard Contractual Clauses. Please refer to the relevant provider's privacy policy for further details.
8. How Long We Keep Your Data
We retain personal data for as long as is necessary to maintain our business relationship with you and for a reasonable period thereafter, in case you wish to re-engage with our services in future.
Client records are kept for a minimum of 6 years following the end of an engagement in line with our legal and financial obligations.
Marketing data is kept until you unsubscribe or withdraw consent.
Analytics data is retained in accordance with Squarespace's own policies.
You may request deletion of your personal data at any time by contacting systems@drtharaka.com. We will honour all such requests unless we are required by law to retain the data.
9. Your Rights Under UK GDPR
You have the right to access the personal data we hold about you; to request correction of inaccurate data; to request erasure in certain circumstances; to restrict how we process your data; to request transfer of your data; to object to processing based on legitimate interests; and to withdraw consent at any time.
To exercise your rights, contact us at systems@drtharaka.com. We aim to respond within one month.
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
10. Cookies
Our website uses cookies for essential functionality and analytics. Where required, we request your consent before placing non-essential cookies. You can manage your preferences via your browser settings or any cookie consent tools presented on our website. Disabling cookies may affect website functionality.
11. Third-Party Links
Our website may include links to third-party websites including social media platforms. We are not responsible for their privacy practices. Please review their policies separately.
12. Data Security
We take appropriate technical and organisational measures to protect your personal data. Our website uses SSL encryption provided by Squarespace. No method of transmission over the internet is completely secure and we cannot guarantee absolute security.
13. Children's Privacy
Some of our services, including Dr T’s Brain Lab, are designed for use by children and young people aged 5 to 17. However, these services are purchased and managed by a parent or legal guardian, who is the contracting party and our client.
We do not knowingly collect personal data directly from children. All enquiries, bookings, and communications relating to services for children must be made by a parent or legal guardian.
If you believe a child has submitted personal data to us directly without parental consent, please contact us at systems@drtharaka.com and we will delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version.
15. Contact Us
Dr Tharaka Ltd (SC554685) Aberdeen, Scotland, UK
Email: systems@drtharaka.com
Website: www.drtharaka.com