This Privacy Policy explains how Discreet Companion Services for Women (“Discreet Companion”, “I”, “me” or “my”) collects, uses, stores and protects personal information obtained through discreet-companion.co.uk, private enquiries, consultations and bookings.
I recognise that enquiries may be particularly personal. Confidentiality, discretion and data minimisation are therefore central to the way I handle information.
1. Who is responsible for your information
The data controller is the proprietor of Discreet Companion Services for Women, trading as Discreet Companion. For a privacy question or request, please use the Contact page and write “Privacy Request” at the beginning of your message.
2. Information I may collect
Depending on how you use the website and the nature of your enquiry or booking, I may collect:
- Contact information: your name, email address, optional telephone number, preferred contact method and preferred time to be contacted.
- Enquiry and booking information: the type of arrangement requested, dates, times, location, occasion, travel requirements, preferences and relevant correspondence.
- Transaction and administration information: booking status, invoices, payment confirmations, agreed expenses and records required for accounting or legal purposes. Please do not send payment-card details through the enquiry form.
- Technical information: internet protocol address, browser and device information, pages viewed, referral information, security logs, cookie choices and basic website-usage statistics collected by the website platform.
- Information you choose to provide: any other details included in a message, telephone conversation or booking discussion.
3. Sensitive information
The nature of an enquiry may occasionally reveal sensitive or special-category personal data. Please do not include medical information, identification documents, payment-card details or other highly sensitive information in the initial website form unless I have specifically asked for it. If sensitive information becomes genuinely necessary, I will explain why it is needed, limit what is collected and identify an appropriate legal condition for processing it, including explicit consent where required.
4. How and why I use information
I use personal information only where there is a lawful reason to do so. This may include:
- responding to an enquiry and taking steps at your request before entering into an agreement;
- assessing suitability, availability, safety and practical arrangements;
- confirming, administering and performing a booking agreement;
- maintaining payment, expense, tax and accounting records where required by law;
- protecting the website, preventing spam or fraud, managing disputes and establishing or defending legal claims;
- maintaining and improving the website where this is necessary for my legitimate interests and does not override your rights; and
- using information for another optional purpose only where you have given valid consent or another lawful basis applies.
The principal lawful bases are steps taken before a contract, performance of a contract, compliance with legal obligations and legitimate interests in operating a safe, confidential and properly administered service. Where I rely on consent, you may withdraw it at any time.
I do not use personal information for unrelated direct marketing without a separate lawful basis, and I do not carry out solely automated decision-making that produces legal or similarly significant effects.
5. Website hosting, Jetpack and form submissions
This WordPress website is hosted on Krystal’s Onyx platform and uses Jetpack services provided by Automattic. Krystal processes website data to provide hosting and related technical services. Enquiry-form submissions may be stored in the WordPress.com/Jetpack Forms system, sent to the email address connected to the website and checked by Akismet for spam. Automattic may also process technical information about visitors to provide security, site statistics and related services.
Further information is available in Automattic’s Privacy Notice for Visitors to Users’ Sites. The enquiry form should not be used to send payment-card information, passport copies or other documents requiring a dedicated secure transfer method.
6. Sharing information
I do not sell personal information. I share it only where reasonably necessary and with appropriate regard for confidentiality. Recipients may include:
- Krystal for website hosting; Automattic and its WordPress.com, Jetpack and Akismet services; and Google for optional Analytics where you consent;
- email, telephone, messaging, payment and secure administration providers used to communicate or manage a booking;
- travel, accommodation, venue, ticketing or other suppliers where necessary for an agreed arrangement and, where appropriate, discussed with you in advance;
- professional advisers, insurers, accountants or technology specialists who are subject to appropriate duties of confidence; and
- courts, regulators, law-enforcement bodies or emergency services where disclosure is required by law or reasonably necessary to protect rights, safety or security.
Testimonials are published only with permission and in the form agreed with the client. They are not submitted to public review platforms by me.
7. International processing
Some technology and communication providers may process information outside the United Kingdom. Where personal information is transferred internationally, I rely on an applicable UK adequacy regulation or appropriate contractual and organisational safeguards, such as the UK International Data Transfer Agreement or an approved UK addendum, as relevant to the provider.
8. How long information is kept
I keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including legal, accounting, safety and dispute-resolution requirements. As a general guide:
- an enquiry that does not proceed to a booking will normally be deleted or anonymised within six months of the last substantive contact;
- booking agreements and relevant correspondence may be retained for up to six years after the arrangement;
- invoices, payment confirmations and accounting records are retained for the period required by tax and accounting law, normally up to six years; and
- technical, security and website-statistics information is retained according to the relevant platform’s settings and retention practices, unless it is needed for longer to investigate a security or legal issue.
Information may be kept for a longer or shorter period where required by law, where a dispute or safety concern is active, or where you validly request earlier deletion and no overriding reason requires retention.
9. Security and confidentiality
I use reasonable technical and organisational measures intended to protect information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to those who genuinely need it. No internet, email, mobile or messaging service is completely secure, so particularly sensitive documents should be transferred only by a method agreed with me in advance.
10. Cookies and website statistics
The website uses cookies or similar technologies for security, administration, accessibility and core operation. Complianz remembers your cookie choices. WordPress.com and Jetpack may also provide aggregated website statistics.
With your consent, I use Google Analytics to understand visits, traffic sources and how pages are used. This can include page addresses and titles, referring websites, browser and device information, approximate location and cookie identifiers. Google Analytics remains off until you accept statistics cookies. You can refuse or withdraw consent through Cookie settings, available on the website, without affecting your ability to make an enquiry.
The Analytics setup does not include enquiry-form contents, names, email addresses or telephone numbers as tracking fields. Further information is available in the Cookie Policy and Google’s explanation of how it uses information from sites that use its services. You can also delete stored cookies through your browser settings. Withdrawing consent stops future Analytics collection through this setup; it does not automatically erase information already collected.
11. Your data-protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
- request access to your personal information;
- ask for inaccurate or incomplete information to be corrected;
- request deletion or restriction of processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format; and
- withdraw consent where processing is based on consent, without affecting earlier lawful processing.
These rights are not absolute and an applicable legal exception may permit or require me to retain or continue processing certain information. To make a request, use the Contact page and clearly mark the message “Privacy Request”. I may need to verify your identity before responding.
12. Complaints
Please contact me first so that I have the opportunity to consider and resolve any concern discreetly. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection regulator. Details are available at ico.org.uk.
13. Changes to this policy
I may update this policy when the website, service providers, data-handling practices or legal requirements change. The latest version will always be published on this page, with the revision date shown below.
Last updated: 1 October 2026.