Privacy Policy

Last updated: 22 September 2026

1. Who I am

This website and the services offered through it are operated by Wayne Phipps, a sole trader based in the United Kingdom.

Website: waynephipps.com
Email: [email protected]

For UK data-protection purposes, Wayne Phipps is the data controller responsible for deciding how and why your personal information is used.

This Privacy Policy explains how I collect, use, store and share personal information when you:

• visit this website;

• complete a form, quiz, survey, audit, application or suitability check;

• join the Over 50 Reset Brief or another email list;

• join a waiting list or opening list for a programme or service;

• apply for or participate in Next Stage Plus;

• download or purchase a digital product;

• enquire about, book or attend a consultation, private session, group session, workshop or expert conversation;

• use a member area, course area or private community;

• use an interactive or AI-assisted tool;

• contact me by email, through the website or through a connected platform; or

• otherwise interact with my business.

2. The information I may collect

The personal information collected depends on how you use the website and services.

Identity and contact information

This may include:

• your first name or full name;

• your email address;

• your telephone number, if you choose to provide it;

• your postal or billing address where required for a purchase;

• your account, profile, programme or community details; and

• your communication preferences.

Enquiry, waiting-list and communication information

This may include:

• messages submitted through contact forms;

• emails and replies;

• information submitted when joining a waiting list or opening list;

• information you provide when asking about a service;

• customer-service communications;

• complaints and privacy requests; and

• comments, feedback, reviews or testimonials.

Applications and suitability information

If you apply for Next Stage Plus or another service for which suitability or group fit is considered, I may collect information about:

• your current working or personal situation relevant to the service;

• what you would like to understand, change or become clearer about;

• the type of support you are looking for;

• your expectations of the programme;

• your willingness or ability to participate in small-group activities;

• practical constraints or responsibilities relevant to participation;

• information supplied during any clarification or suitability conversation; and

• my assessment of whether the service appears suitable for you.

Applications are reviewed by me. I do not currently use a solely automated system to decide whether somebody is accepted into Next Stage Plus.

Next Stage Starting Map information

Participants in Next Stage Plus may be asked to complete a Next Stage Starting Map before the programme begins.

This may include:

• what is happening in your working life at the time;

• possibilities or options you are already considering;

• practical constraints and responsibilities;

• your current confidence or clarity rating;

• information you are happy for me to refer to during the group programme;

• information you want to provide privately to me and do not want referred to with the group; and

• relevant information carried forward from your application so that you are not unnecessarily asked for the same information again.

Where information is specifically identified as private, I will not ordinarily disclose it to other participants.

Information that you expressly indicate I may refer to with the group may be used during relevant group discussions.

I may also use information from Starting Maps to prepare an anonymised or aggregated overview of themes, circumstances or areas of overlap within a cohort. The purpose is to help participants understand common themes without unnecessarily exposing individual private information.

Pressure Audit and questionnaire information

When you complete the 50+ Control and Pressure Audit or another questionnaire, I may collect and retain:

• your individual answers;

• your calculated score;

• your result category;

• your first name and email address;

• the date and source of the submission; and

• your consent and email-preference records.

The Pressure Audit is a self-assessment tool. It is not a medical, psychological or diagnostic assessment, and its score is not used to diagnose or infer a medical condition.

Consultation, programme and session information

If you enquire about, book or attend a consultation, clarification call, private session, group session, workshop, expert conversation or similar service, I may collect:

• booking and calendar details;

• information supplied before the session;

• application, qualification or Starting Map information;

• information about your work, finances, time, goals, responsibilities, options or decisions where relevant to the service;

• notes made during or after the session;

• written summaries or agreed actions;

• correspondence connected with the service;

• attendance information; and

• audio or video recordings where recording has been clearly disclosed.

You are not required to disclose medical information or other particularly sensitive information simply to participate.

Because discussions about work and life circumstances can sometimes involve health or other sensitive matters, you should only provide information that is relevant and that you are comfortable providing.

Where I deliberately process special-category information and the law requires explicit consent, I will obtain that consent or rely on another lawful condition where one properly applies.

Purchase and transaction information

This may include:

• the product, service or programme purchased;

• the amount paid;

• the date and status of the transaction;

• billing and invoice information;

• refund or cancellation information; and

• limited payment information supplied by the payment processor.

I do not receive or store your complete payment-card number or card-security code. Card payments are processed by the relevant payment provider, such as Stripe.

Member-area and community information

If you receive access to a member area, course area or the private Next Stage Community, I may collect or process:

• login and account information;

• programme and access status;

• payment history where relevant;

• profile information;

• progress or activity within the member or course area;

• posts, comments, questions or other content you choose to submit;

• attendance at community or programme sessions;

• support requests; and

• your interaction with programme or community resources.

People who complete Next Stage Plus may retain access to the private Next Stage Community after the guided eight-week programme has ended.

Information that you voluntarily post in the community may therefore remain visible to current participants and to people who completed earlier or later Next Stage Plus programmes, depending on the part of the community in which it is posted.

Information shared in group settings

Next Stage Plus is a small-group programme.

Information you say during a live group session, submit to a shared discussion, post in the community or otherwise choose to share with participants may be seen or heard by other participants.

Participants are expected to respect the privacy and confidentiality of others. However, I cannot provide a technical guarantee that another individual will never remember, repeat or disclose something that you voluntarily say in a group environment.

You should therefore avoid sharing information in a group setting that you would not be comfortable with other participants knowing.

Where you would prefer something to remain private, you may use the private parts of the Starting Map or raise it during an appropriate private conversation instead.

3. Recordings and expert conversations

Programme sessions, workshops, community events or expert conversations may sometimes be recorded.

Where a session is to be recorded:

• participants will be told;

• the purpose of the recording will be explained;

• access will be limited to the appropriate people or community area;

• consent will be obtained where required; and

• identifiable participant material will not be used publicly as promotional or public content without an appropriate lawful basis and, where required, separate permission.

A recording may be made available to relevant programme participants or within the private Next Stage Community.

Some expert conversations may be retained in the community as an ongoing resource.

Selected material from an expert conversation may later be adapted for public educational content, including YouTube.

If a participant's identifiable image, voice, personal story or contribution would be included in public material, separate permission will be obtained where required. Alternatively, participant contributions may be removed or anonymised before publication.

External experts or guests may sometimes attend a session. Where this happens, participants will be told beforehand where reasonably practicable. An expert may naturally see or hear information that you choose to share during that session.

Sponsors, experts or commercial partners are not given unrestricted access to member contact information, applications, private notes or private community data merely because they have a commercial relationship with me.

I do not sell member information as a source of leads.

4. How I use your information

I may use personal information to:

• provide and operate the website;

• manage waiting lists and opening lists;

• deliver the Pressure Audit and calculate your result;

• send requested score explanations and practical next steps;

• send the Over 50 Reset Brief where you have agreed to receive it;

• provide videos, articles, tools and digital downloads;

• administer applications for Next Stage Plus or other services;

• assess whether a programme or service appears appropriate;

• contact an applicant where clarification is required;

• process purchases, payments, cancellations and refunds;

• onboard accepted participants;

• prepare for and deliver Next Stage Plus;

• prepare anonymised or aggregated cohort overviews;

• use information that you have expressly indicated may be referred to during a group session;

• arrange and deliver private and group sessions;

• send booking confirmations, reminders and service communications;

• create requested session summaries;

• maintain programme, member-area and community access;

• operate community and interactive features;

• provide recordings or resources where applicable;

• arrange expert conversations and other community resources;

• provide AI-assisted tools or responses where such tools are offered;

• answer enquiries and provide customer support;

• understand how the website, emails and services are used;

• improve the website, programme, resources and customer experience;

• identify recurring themes, questions or areas in which participants may benefit from additional resources;

• measure advertising and promotional performance where permitted;

• protect the website and systems from fraud, misuse and security threats;

• maintain accurate consent, unsubscribe and suppression records;

• manage complaints, disputes and legal claims;

• comply with tax, accounting, regulatory and legal obligations; and

• protect my rights and the rights of customers, participants and website users.

I may use genuinely anonymised or aggregated themes and patterns to improve Next Stage, develop educational material or understand the needs of the audience. Information will not be presented as anonymous if it could reasonably identify you.

I do not sell personal information.

I do not sell application answers, Starting Map responses, community discussions or private participant information to sponsors or other businesses.

5. Pressure Audit and Over 50 Reset Brief

The Pressure Audit gives you an automatically calculated result based on the answers you provide.

Where the audit explains that submitting your first name and email will provide an email explanation, practical next steps and the Over 50 Reset Brief, submitting the relevant form records your request and marketing preference.

The Over 50 Reset Brief may contain:

• practical emails about work pressure, time and direction after 50;

• reflections and educational content;

• links to my videos and articles;

• free tools and resources;

• information about digital products;

• information about Next Stage or other services; and

• occasional commercial or promotional content.

You may unsubscribe at any time by using the unsubscribe link in an email or by contacting me at [email protected].

Unsubscribing will stop future marketing emails, but I may retain a minimal suppression record so that your preference continues to be respected.

Service emails necessary to fulfil a purchase, application, booking or active programme are separate from marketing emails.

6. AI-assisted and automated tools

The website, member area or future services may include questionnaires, chat tools, AI-assisted resources or other interactive features.

Where an AI-assisted tool is enabled, information entered into it may be processed:

• to generate the response or result you requested;

• to operate and maintain the tool;

• to prevent misuse;

• to improve the service where lawful; and

• by technology providers acting on my behalf.

You should not enter highly sensitive, confidential, medical, legal or financial information into an AI-assisted tool unless the tool clearly explains that it is designed to receive that type of information.

AI-generated responses are intended for reflection and general information. They are not medical, legal, regulated financial or other professional advice.

The Pressure Audit uses automated scoring to calculate a result category. This does not produce a legal or similarly significant decision about you.

Applications for Next Stage Plus are reviewed by a person and are not currently accepted or declined solely by an automated decision-making system.

7. My lawful bases for using personal information

UK data-protection law requires me to have a lawful basis for using personal information.

The basis used depends on the purpose and circumstances.

Consent

I may rely on consent for matters including:

• the Over 50 Reset Brief and other email marketing;

• non-essential cookies and tracking technologies;

• optional disclosure or use of information where you have been given a genuine choice;

• recordings where consent is the appropriate basis;

• testimonials, case studies or promotional use of personal material;

• public use of identifiable participant contributions where consent is required;

• optional profiling or personalisation; and

• special-category information where explicit consent is the appropriate condition.

You may withdraw consent at any time. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.

Contract and steps before entering a contract

I may process information where necessary to:

• respond to a request about a paid service;

• administer and consider an application;

• take steps requested before entering into a contract;

• process a purchase or booking;

• deliver a digital product;

• provide Next Stage Plus or another service;

• provide agreed member-area or community access;

• maintain an account;

• administer payments, cancellations or support; and

• fulfil my obligations to you.

Legitimate interests

I may rely on legitimate interests where appropriate to:

• operate and improve the website and free resources;

• provide the Pressure Audit and its automated score;

• respond to ordinary enquiries;

• understand use of the website and services;

• improve Next Stage and other services;

• identify recurring participant needs and useful resources;

• maintain records of communications;

• protect the integrity of the community;

• prevent fraud and protect systems;

• manage and defend legal claims;

• operate the business efficiently;

• maintain unsubscribe and suppression records; and

• understand which content, services and resources are useful.

When relying on legitimate interests, I consider whether the processing is necessary and proportionate, what you would reasonably expect and whether your rights and interests override my interests.

Legal obligation

I may process or retain information where required to:

• maintain tax and accounting records;

• respond lawfully to regulators, courts or law-enforcement bodies;

• comply with consumer, data-protection or other legal requirements; and

• establish or demonstrate legal compliance.

Special-category information

Some personal information receives additional protection under data-protection law. This includes information concerning matters such as health.

If I deliberately process special-category information, I need both an Article 6 lawful basis and an appropriate additional condition for processing that information.

Where appropriate, that additional condition will normally be your explicit consent. In limited circumstances another lawful condition may apply, for example where information is necessary to establish, exercise or defend legal claims.

I do not ask participants to provide unnecessary health or other special-category information.

8. Cookies and similar technologies

This website may use cookies, pixels, scripts, tags, local storage and similar storage or access technologies.

Strictly necessary technologies

These may be used for functions such as:

• website and account security;

• form operation;

• login and member-area access;

• payment and checkout functions;

• remembering privacy choices; and

• maintaining website sessions.

These may operate without consent where the law permits because they are necessary to provide a service requested by the user or another statutory exception applies.

Analytics and performance technologies

These help me understand matters such as:

• which pages are visited;

• how visitors navigate the website;

• whether pages work correctly;

• which content attracts interest; and

• how the website or service can be improved.

Providers may include Google Analytics, Microsoft Clarity, Hotjar or similar services.

Some limited analytics technologies may be used without prior consent where they have been configured to meet a statutory statistical-purpose exception. Where that exception is relied upon, the use must remain within its legal limits and users must receive the required information and a simple way to object.

Where analytics use falls outside an applicable exception, the required consent will be obtained.

Advertising and measurement technologies

Advertising or tracking technologies may be used to:

• measure whether advertising leads to website visits, applications or purchases;

• understand campaign effectiveness;

• build advertising audiences where permitted; and

• show relevant advertising through services such as Google or Meta.

Where consent is legally required for advertising, tracking or related measurement technologies, these technologies will not be used until that consent has been obtained.

Embedded content

Pages may contain embedded video, audio, scheduling, community or other content from third-party services, including services such as YouTube or Zoom.

Those providers may place or access technologies when you interact with their content.

You can use the website's cookie or privacy controls to accept, reject or change your preferences where those controls are provided.

You may also control cookies through your browser, although blocking necessary technologies may affect website operation.

9. Marketing communications

I may send marketing emails where:

• you have consented;

• you have positively requested a clearly described email service or marketing communication; or

• the law permits me to contact an existing customer about my own similar products or services and the requirements of the customer soft opt-in have been met.

Every marketing email will identify me and provide a clear way to unsubscribe.

I may keep records showing:

• when and where you subscribed;

• the wording shown when you subscribed;

• the form, audit, application or page used;

• the date and time of consent;

• your email preferences;

• emails sent;

• delivery or engagement information; and

• any withdrawal of consent or unsubscribe request.

I will not require you to remain subscribed to marketing emails to continue receiving a product, programme or service you have already purchased.

Operational or service messages relating to an active application, purchase, programme or community account are not treated as marketing merely because they are sent by email.

10. Who I share information with

I may share personal information with trusted providers where necessary to operate the website, programme and business.

These may include:

• GoHighLevel and LeadConnector, for forms, surveys, applications, the Pressure Audit, contact management, email communications, workflows, bookings, course access, community access and automation;

• Stripe, for payment processing;

• Zoom, for video consultations, programme sessions, group calls, expert conversations and authorised recordings;

• Google services, which may include Google Calendar, Google Analytics, Google Ads, YouTube and related services;

• Zoho Mail, for business email;

• FreeAgent, for accounting, invoicing and financial administration;

• Meta, for social-media services, advertising and campaign measurement where enabled;

• Microsoft Clarity, for website analytics and interaction insights where enabled;

• Hotjar, for analytics, heatmaps and website-interaction insights where enabled;

• website hosting, content-delivery, domain, security and technical-support providers;

• video, transcription or recording providers where required to process authorised recordings;

• course, community or AI technology providers where those services are enabled;

• contractors who assist with website, administrative, technical or customer-support work;

• accountants, legal advisers, insurers and other professional advisers;

• appropriately selected external experts participating in a clearly identified programme or community event;

• regulators, tax authorities, law-enforcement bodies, courts or government agencies where disclosure is lawfully required; and

• a buyer, successor or adviser involved in a genuine sale, restructuring or transfer of the business, subject to appropriate confidentiality and legal safeguards.

These organisations may act as processors acting on my instructions or, in some circumstances, as independent controllers responsible for their own use of information.

I only share information reasonably necessary for the relevant purpose.

An expert, sponsor or commercial partner does not receive unrestricted access to participant applications, private notes, email addresses or community data merely because they work with or pay my business.

11. International transfers

Some providers operate or store information outside the United Kingdom, including in the United States and other countries.

Where personal information is transferred outside the UK, I take reasonable steps to ensure that an appropriate lawful transfer mechanism and protections are in place.

Depending on the provider and destination, these protections may include:

• UK adequacy regulations;

• the UK Extension to the EU-US Data Privacy Framework where applicable;

• the UK International Data Transfer Agreement;

• the UK Addendum to approved EU Standard Contractual Clauses;

• contractual, technical and organisational safeguards; and

• any required transfer-risk assessment.

You may contact me if you want further information about safeguards relevant to a particular provider or transfer.

12. How long I retain information

I keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Normal retention periods are as follows.

Contact enquiries and ordinary correspondence: normally up to 24 months after the last meaningful contact.

Pressure Audit answers, scores and result categories: normally up to 24 months after submission.

Next Stage applications and suitability information: normally up to 24 months after the application or last relevant contact.

Starting Maps and substantive programme or private-session notes: normally up to 24 months after the end of the relevant programme or last substantive contact, unless a shorter or longer period is appropriate.

Ordinary programme or group-session recordings: normally up to 90 days unless participants are clearly told that a particular recording will remain available for longer.

Expert conversations or recordings retained as community resources: for as long as they remain a useful and appropriate part of the private community or resource area. Identifiable participant contributions will be handled consistently with the recording and permission arrangements explained when the session takes place.

Booking, purchase, programme, invoice and accounting records: normally six years where required for accounting, tax, contractual or legal purposes.

Community and member-area account data: while access remains active and normally up to 24 months after access ends, unless deletion is requested earlier and can lawfully be carried out, or longer retention is reasonably necessary.

Community posts and contributions: these may remain while the relevant community discussion remains available. Where a participant leaves and asks for removal, deletion or anonymisation will be considered in accordance with applicable data-protection rights and the need to preserve legitimate community records and conversation context.

Marketing contact information: until you unsubscribe, withdraw consent or the address remains persistently inactive.

Suppression records: for as long as reasonably necessary to ensure that an unsubscribe or objection continues to be respected.

Consent records: while the relevant processing continues and afterwards for as long as reasonably necessary to demonstrate compliance.

Website analytics information: according to the provider's configured retention settings and the purposes for which the information is used.

Complaints and privacy-rights correspondence: normally up to six years after the matter is closed where this is reasonably required to demonstrate how the matter was handled or deal with a legal claim.

Information may remain temporarily in encrypted or restricted backups after deletion from active systems. Backup information is deleted or overwritten according to the relevant backup cycle and is not ordinarily restored except for disaster recovery or security purposes.

I may retain information for longer where necessary to comply with the law, investigate fraud, resolve a dispute or establish, exercise or defend a legal claim.

13. Security

I use reasonable technical and organisational measures intended to protect personal information from:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• disclosure; and

• destruction.

Measures may include:

• reputable service providers;

• password and access controls;

• multi-factor authentication where available;

• restricting access to participant and customer information;

• secure payment processors;

• software updates;

• backups; and

• appropriate contractual arrangements.

No internet transmission or storage system can be guaranteed to be completely secure.

You should also take reasonable care when submitting sensitive information electronically or sharing information in a group or community environment.

14. Your data-protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• ask whether I hold personal information about you;

• receive a copy of personal information I hold about you;

• correct inaccurate or incomplete information;

• request deletion of information;

• request restriction of processing;

• object to processing based on legitimate interests;

• object to direct marketing;

• receive certain information in a portable format;

• withdraw consent;

• ask for information about qualifying automated decision-making;

• challenge a qualifying automated decision; and

• complain about how your information has been handled.

These rights are not all absolute. In some circumstances, the law permits or requires information to be retained or allows part of a request to be refused.

Your right to object: where I process your information on the basis of legitimate interests, you may object to that processing in circumstances provided by data-protection law. You have an absolute right to object to the use of your personal information for direct marketing.

To exercise a right, email [email protected].

I may request reasonable information to verify your identity and understand your request.

I will normally respond to a valid data-protection rights request within one month, subject to any extension or other provision permitted by law. If additional time is lawfully required, I will explain this.

There is normally no charge for exercising your rights. A reasonable fee may be charged, or a request may be refused, where the law allows this because a request is manifestly unfounded or excessive.

15. Data-protection complaints

You may complain if you believe that personal information has been collected, used, stored, shared or otherwise handled in a way that does not comply with data-protection law.

Send a complaint to:

Email: [email protected]
Subject line: Data Protection Complaint

Please include enough information for me to understand:

• who you are;

• what happened;

• the information or activity concerned;

• what you believe went wrong; and

• what outcome you are seeking.

I will:

• provide a clear way for you to raise a data-protection complaint;

• acknowledge receipt within 30 days;

• take appropriate steps to investigate the complaint without undue delay;

• keep you reasonably informed while the matter is being investigated; and

• communicate the outcome without undue delay.

You may also complain to the UK supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

You do not lose your right to approach the ICO because you have first raised the matter with me.

16. Children

The website, Pressure Audit, Next Stage Plus, products, consultations, community and other paid services are intended for adults.

I do not knowingly seek personal information from children under 18.

If you believe that a child has supplied personal information without appropriate authority, contact me so that the circumstances can be reviewed and the information deleted where appropriate.

17. Third-party websites and services

The website, programme or community may link to websites, videos, payment services, booking systems, expert resources or other third-party services.

Those organisations may be responsible for their own privacy practices when they act as independent controllers.

You should read their privacy information before supplying personal information directly to them.

This Privacy Policy does not control how an independent third party uses information collected through its own website, service or platform.

18. Changes to this Privacy Policy

I may update this Privacy Policy when:

• my services change;

• Next Stage or other programmes develop;

• new products or technologies are introduced;

• providers change;

• legal requirements change; or

• privacy practices are improved.

The current version will be published on this page with its latest revision date.

Where a change materially affects an existing use of personal information, I will take reasonable steps to bring the change to the attention of affected individuals and obtain fresh consent where the law requires it.

19. Contact

Questions, privacy requests and data-protection complaints should be sent to:

Wayne Phipps
Email: [email protected]
Website: waynephipps.com