Last updated: March 2026

This Privacy Policy explains how personal information is collected, used, and protected when you visit this website. This website is operated by an individual based in the United Kingdom and this policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using this website, you acknowledge that you have read and understood this Privacy Policy.

1. Who Is the Data Controller?

The data controller for this website is the individual operator of Between the Waves, a guided meditation website by David Southworth, based in the United Kingdom. For any privacy-related enquiries, please email meditations@davidsouthworth.net.

This website is hosted by Hostinger (UAB "Hostinger", Lithuania). Hostinger acts as a data processor on behalf of this website for hosting purposes. Their privacy practices are governed by Hostinger's Privacy Policy.

2. What Personal Data We Collect

2.1 Email Contact

This website does not include a contact form. If you choose to email us directly at meditations@davidsouthworth.net, the following information may be collected:

• Email address — so we can reply to your message
• Message content — the enquiry or feedback you provide

Contacting us by email is entirely optional. You are never required to provide personal data to access the meditations or any other content on this site.

2.2 Automatically Collected Data (Server Logs)

When you visit any website, your browser automatically sends certain technical information to the server hosting it. Hostinger may collect standard server log data, which can include your IP address, browser type, operating system, referring URL, and the pages you visit. This is handled by Hostinger under their own privacy policy and is not directly accessible to or controlled by this website's operator.

2.3 Data We Do Not Collect

This website does not:

• Use cookies of any kind (advertising, tracking, or analytics)
• Use third-party analytics tools (e.g. Google Analytics)
• Place tracking pixels or fingerprinting scripts
• Require account creation or registration
• Collect payment information
• Knowingly collect data from children under 13

3. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. We rely on the following:

• Legitimate interests (Article 6(1)(f) UK GDPR) — when you email us, it is in both your interest and ours to be able to respond to your message. We have assessed that this interest is not overridden by your rights.

4. How We Use Your Data

Personal data received via email is used solely to:

• Respond to your enquiry, question, or feedback
• Follow up on any request you have made

Your data will never be used for unsolicited marketing, sold to third parties, or shared with any organisation without your explicit consent, except where required by law.

5. How Long We Keep Your Data

Personal data received via email will be retained for no longer than 12 months from the date of receipt, or until the purpose for which it was collected has been fulfilled, whichever is sooner. After this period, data will be securely deleted.

If you request deletion of your data before this period, we will action that request promptly (see Your Rights below).

6. Third-Party Services

This website uses the following third-party services:

• Hostinger — website hosting. Hostinger may process technical data such as IP addresses as part of normal server operations. Hostinger Privacy Policy →
• Ko-fi — if you choose to download the full meditation collection, you will be directed to Ko-fi.com, an independent platform operated by Ko-fi Labs Limited. Ko-fi has its own privacy policy and data practices which apply once you leave this website. This may include the collection of your name, email address, and payment information in order to process your download. We encourage you to review Ko-fi's Privacy Policy → before making a purchase. We do not receive or store any payment or personal data processed by Ko-fi.

This website does not embed third-party social media widgets, advertising networks, or any other services that could track you across the web.

7. International Data Transfers

Hostinger is based in Lithuania and operates within the European Economic Area (EEA). As the UK maintains adequacy decisions with the EEA, data processed by Hostinger for hosting purposes is subject to equivalent protections. For full details, see Hostinger's Privacy Policy.

If you choose to download the meditation collection via Ko-fi, your data will be processed by Ko-fi Labs Limited in accordance with their own privacy policy, which may involve international data transfers. Please review Ko-fi's Privacy Policy for details.

Beyond the above, no personal data collected through this website is transferred outside the UK.

8. Cookies

This website does not set any cookies itself. Hostinger, as the hosting provider, may set minimal technical cookies as part of its infrastructure. These are not advertising or tracking cookies and are not within the control of this website's operator.

As no cookies are set by this website, no cookie consent banner is required under the UK Privacy and Electronic Communications Regulations (PECR). Should this change, this policy will be updated accordingly.

9. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights in relation to any personal data we hold about you:

To exercise any of these rights, please email us at meditations@davidsouthworth.net. We will respond within one calendar month as required by UK GDPR. We may need to verify your identity before fulfilling a request.

There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

10. How to Complain

If you believe your data has been handled in a way that does not comply with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection supervisory authority.

We would appreciate the opportunity to address any concerns directly before you approach the ICO. Please email us first at meditations@davidsouthworth.net.

11. Security

We take reasonable technical and organisational precautions to protect personal data against loss, misuse, or unauthorised access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

This website is served over HTTPS (secure, encrypted connection) and hosted on Hostinger's infrastructure, which maintains its own security practices.

12. Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal data to this website, please contact us and we will delete it promptly.

13. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law, our practices, or the services we offer. The "last updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this page periodically.

Continued use of this website after any changes to this policy constitutes your acceptance of the revised terms.

14. Contact

For any questions or concerns about this Privacy Policy or how your data is handled, please email meditations@davidsouthworth.net.