PRIVACY POLICY.
1. Introduction
This Privacy Policy explains how I collect, use and protect personal data.
I am committed to respecting your privacy and handling personal information responsibly, transparently and in accordance with UK data protection law.
2. Who I Am
I am Emma Gannon, professionally known as Emma Osborne Gannon, trading through my company Tardis UK Ltd.
Company number: 5376672
Registered address:
2 The Robins, Burley in Wharfedale,
West Yorkshire, LS29 7PR
For the purposes of data protection law, Tardis UK Ltd is the data controller.
3. The Data I Collect
I may collect and process the following types of personal data:
a) Contact information
Name
Email address
Telephone number
Organisation or institution (where relevant)
b) Engagement information
Enquiry details
Booking information
Programme participation details
Feedback or reflections (where shared voluntarily)
c) Additional information (where relevant)
Information shared to support safe and appropriate delivery of services
Emergency contact details (for private work where appropriate)
I only collect information that is necessary, proportionate and relevant to the services provided.
4. Special Category Data
In some cases, information shared may include special category data (for example, information relating to wellbeing or personal circumstances).
This information is:
shared voluntarily
handled with care and discretion
used only to support the appropriate delivery of services
I do not provide medical or therapeutic services and do not collect clinical records.
5. How I Use Personal Data
I use personal data to:
respond to enquiries
deliver agreed services and programmes
manage bookings, invoices and communications
support safeguarding and duty-of-care responsibilities
request feedback where appropriate
meet legal or regulatory obligations
I may also contact clients about other services, programmes or offerings that are closely related to my work and aligned with their original engagement, where this is reasonably expected and relevant.
You can opt out of receiving such communications at any time by contacting me directly
6. Lawful Basis for Processing
I process personal data under one or more of the following lawful bases:
Contract – where processing is necessary to deliver agreed services
Legitimate interests – to manage and improve my services responsibly
Consent – where you have explicitly agreed (e.g. testimonials, marketing)
Legal obligation – where required by law
7. Safeguarding & Confidentiality
Information shared during my work is treated with discretion.
Confidentiality may be limited where:
there is a safeguarding concern
there is a risk of harm
disclosure is required by law
Safeguarding always takes priority over confidentiality. Please refer to my Safeguarding Policy for full details.
8. Sharing Personal Data
I do not sell or share personal data for marketing purposes.
Personal data may be shared only where necessary:
with education institutions or safeguarding leads (where agreed)
with professional advisors (e.g. accountant)
to comply with legal or safeguarding obligations
Any sharing is proportionate and appropriate.
9. Data Storage & Security
Personal data is stored securely using appropriate technical and organisational measures.
I take reasonable steps to protect personal data from unauthorised access, loss or misuse.
10. Data Retention
I retain personal data only for as long as necessary to:
deliver services
meet legal or safeguarding requirements
maintain appropriate records
Data is securely deleted when no longer required.
11. Your Rights
Under UK GDPR, you have the right to:
access your personal data
request correction of inaccurate data
request erasure (where applicable)
restrict or object to processing
request data portability
Requests can be made by contacting me directly.
12. Cookies & Website Use
My website may use cookies to support functionality and improve user experience.
You can manage cookie preferences through your browser settings.
13. Third-Party Links
My website may contain links to third-party websites. I am not responsible for their privacy practices.
14. Changes to This Policy
This Privacy Policy may be updated periodically to reflect changes in practice or legal requirements.
The most current version will always be available on my website.
15. Contact
If you have any questions about this Privacy Policy or how your data is handled, you can contact me at:
Last updated: February 2026