Tony Womersley
logo

Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how Tony Womersley ("I", "me", "my") collects, uses, shares and protects your personal information when you visit www.tonythemedium.com (the "Website"), join my mailing list or readings waitlist, download a free meditation, contact me or book a session.

I have written it to meet the requirements of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), and applicable United States privacy laws, including state laws such as the California Consumer Privacy Act as amended (CCPA). Where these laws give you different rights, you can rely on the rights that apply to you.

1. Who is responsible for your information

The person responsible for your personal information (the "data controller" under UK law) is Tony Womersley, a sole proprietor based in St. Thomas, Ontario, Canada. I am also the person accountable for privacy under PIPEDA.

Email: tony@tonythemedium.com

2. Information I collect

Information you give me

  • Contact details: your name and email address when you join my mailing list or readings waitlist, download a meditation or send a message through the contact form.
  • Booking details: your name, email address, time zone, and any information you choose to share when booking a session, such as the reason for your booking or questions you would like to explore.
  • Payment details: when you pay for a session, payment is handled by my payment and booking providers. I receive confirmation of payment and limited details such as the amount paid, but I do not see or store your full card number.
  • Messages: anything you write to me by email or through the contact form.
  • Information shared during sessions: during a reading or healing session you may share personal and sometimes sensitive information, for example about loved ones who have passed, your health or your emotional wellbeing. You choose what to share, and this information is treated with the strictest confidence.

Information collected automatically

When you visit the Website, some information is collected automatically through cookies and similar technologies, including your IP address, browser and device type, the pages you visit, how long you spend on them and the website that referred you. See section 7 for more about cookies.

Information from others

If someone books a session for you as a gift, they may give me your name and email address. They should only do this with your knowledge.

3. How and why I use your information
Purpose Information used Legal basis (UK GDPR)
To book, deliver and manage your sessions Contact, booking and payment details, information shared during sessions Performing our contract with you
To send the free meditation or other content you ask for Name and email address Your consent
To send my newsletter, offers and updates Name and email address Your consent
To manage the readings waitlist Name and email address Your consent
To reply to your messages Contact details and message Legitimate interest in responding to you
To understand how the Website is used and improve it Usage and device data Your consent (cookies)
To keep business, tax and accounting records Booking and payment details Legal obligation
To protect my legal rights and deal with disputes Relevant booking and communication records Legitimate interest

Where I rely on information you share during a session that relates to your health or other sensitive matters, I do so on the basis of your explicit consent, given by choosing to share it with me for the purpose of your session.

Under PIPEDA, I collect, use and disclose your personal information only with your consent and only for the purposes described in this policy, or as otherwise permitted or required by law.

4. Emails and marketing

I will only send you marketing emails if you have opted in, for example by joining my mailing list or downloading a free meditation. Every email includes my contact details and an unsubscribe link, and you can unsubscribe at any time. Unsubscribing does not affect emails about sessions you have booked.

5. Who I share your information with

I do not sell your personal information. I share it only with trusted service providers who help me run my business, and only as much as they need to do their job:

  • Mailchimp (Intuit) for my mailing list, waitlist and email delivery
  • Calendly for online booking and scheduling
  • Payment processors such as Stripe for taking payments
  • Zoom for online sessions
  • Vercel for hosting the Website
  • Google Analytics for understanding how visitors use the Website
  • My website form provider for passing contact form messages to my inbox

I may also disclose your information if required by law, to protect my rights or the safety of others, or if my business is ever transferred to someone else, in which case your information would remain protected by this policy.

6. International transfers

I am based in Canada, and many of my service providers store information in the United States or other countries. This means your information may be processed outside your home country, where it may be accessible to courts and law enforcement under local laws. Where UK GDPR applies, I rely on recognised safeguards for these transfers, such as the UK International Data Transfer Addendum, standard contractual clauses or the UK-US Data Bridge, as offered by each provider.

7. Cookies and similar technologies

Cookies are small files placed on your device when you visit a website. I use:

  • Essential cookies, needed for the Website, booking and payment to work.
  • Analytics cookies (Google Analytics), to understand how visitors use the Website. IP addresses are anonymised.

You can block or delete cookies through your browser settings, and you can opt out of Google Analytics using Google's opt-out tool. Blocking essential cookies may stop parts of the Website, such as booking, from working.

8. How long I keep your information
  • Mailing list and waitlist: until you unsubscribe or ask me to delete your details.
  • Booking and payment records: as long as required for tax and accounting purposes, generally six years after the end of the tax year.
  • Contact form messages and emails: up to two years, unless they relate to a booking.
  • Information shared during sessions: kept only as long as needed for your sessions. I do not record sessions unless we agree to it beforehand.
  • Analytics data: in line with my Google Analytics data retention settings.

When information is no longer needed, I securely delete or anonymise it.

9. How I protect your information

I use reputable service providers with strong security, secure (HTTPS) connections, and password-protected accounts. No method of sending or storing information online is completely secure, but I take reasonable steps to protect your information from loss, misuse and unauthorised access.

10. Your rights

Depending on where you live, you have some or all of the following rights:

  • Access: ask for a copy of the personal information I hold about you.
  • Correction: ask me to correct information that is wrong or incomplete.
  • Deletion: ask me to delete your information, unless I need to keep it for legal reasons.
  • Withdraw consent: withdraw your consent at any time, for example by unsubscribing. This does not affect anything I did before you withdrew it.
  • Objection and restriction (UK): object to, or ask me to limit, how I use your information.
  • Portability (UK): receive your information in a commonly used format, or have it sent to another provider.
  • Opt out of sale, sharing or targeted advertising (US): I do not sell your personal information, and I do not use advertising cookies for targeted advertising.
  • Non-discrimination (US): I will never treat you differently for using your privacy rights.

To use any of these rights, email tony@tonythemedium.com. I may need to confirm your identity before acting on your request. I will reply within 30 days, or within any longer period the law allows, and will tell you if I need more time. There is no charge unless a request is clearly unfounded or excessive. If you live in a US state that offers an appeal, you can appeal my decision by replying to my response.

11. Age

My Website, services and mailing list are only for adults aged 18 or over. I do not knowingly collect information from anyone under 18. If you believe a child has given me their information, please email me and I will delete it.

12. Links to other websites

The Website links to other sites, such as my social media pages. Their privacy practices are their own, so please read their privacy policies.

13. Complaints

If you have a concern, please email me first and I will do my best to put it right. You also have the right to complain to a privacy regulator:

14. Changes to this policy

I may update this policy from time to time. The current version will always be on this page, with the date it was last updated. If I make significant changes, I will let mailing list subscribers know by email.

15. Contact

For any questions about this policy or your personal information, please email tony@tonythemedium.com.