top of page

PRIVACY POLICY

Last updated: 29th November 2025

​

This Privacy Policy explains how Gareth Lewis – Psychic Medium (“we”) collects uses, and protects your personal information when you visit www.gareth-lewis.com, make a booking, purchase a product, or contact us.

We are committed to safeguarding your privacy and complying with the UK GDPR, Data Protection Act 2018, and all relevant UK laws.

1. Who We Are

Gareth Lewis – Psychic Medium
Website: www.gareth-lewis.com
Email: admin@gareth-lewis.com
Location: United Kingdom

We act as the Data Controller of your personal information.

​

2. Information We Collect

A. Personal Information You Provide

  • Name

  • Email address

  • Phone number

  • Postal address (if required for posted items)

  • Booking details (date, time, service)

  • Messages included in booking/contact forms

  • Payment details (processed securely via Stripe, PayPal, or Wix Payments — we do not store card details)

 

B. Automatically Collected Information

  • IP address

  • Browser information

  • Device type

  • Pages visited

  • Time spent on the website

  • Cookies (see Cookie Policy)

 

C. Sensitive Information (Readings/Mentorship)

You may share personal emotional or spiritual information during readings or mentoring sessions.
This is treated with strict confidentiality.

​

3. How Your Information Is Used

We use your data to:

  • Process bookings and appointments

  • Provide online and in-person readings

  • Deliver purchased services or products

  • Send booking confirmations and reminders

  • Respond to enquiries

  • Process payments securely

  • Send newsletters (with your consent)

  • Improve website performance

  • Fulfil legal obligations (tax, accounting, fraud prevention)

 

4. Legal Basis for Processing

We process your data under:

  • Contract — to provide your booked service or send your purchased item

  • Consent — for marketing emails and optional communication

  • Legitimate interests — improving services and website experience

  • Legal obligation — accounting, record keeping, fraud prevention

 

5. Data Security

We protect your information through:

  • SSL encrypted website

  • Password-protected systems

  • Secure third-party payment processing

  • Limited access to personal data

  • Regular security updates

We do not sell your data to third parties.

 

6. When Information Is Shared

Your data may be shared with:

  • Payment providers

  • Email and marketing systems

  • Booking platforms

  • Delivery companies

  • Legal or professional advisers (when required)

All third parties must comply with GDPR and keep your data safe.

 

7. Data Retention

We keep your information for:

  • Booking & payment records: 6 years

  • General enquiries: 12 months

  • Reading/mentorship notes (if any): up to 12 months

  • Newsletter subscribers: until you unsubscribe

 

8. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate details

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Withdraw consent for newsletters

  • Request a copy of your data

To exercise these rights, email: admin@gareth-lewis.com

 

9. Cookies

We use cookies to improve website performance and user experience.
See our Cookie Policy for full details.

 

10. Children’s Privacy

This website is not intended for anyone under 16.
We do not knowingly collect children’s data without parental consent.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time.
The date at the top will show the latest update.

 

12. Contact

For privacy-related questions or requests:

📧 admin@gareth-lewis.com

​

bottom of page