CLEAR INFORMATION, BEFORE YOU JOIN
Programme Privacy Notice
Programme enquiries, applications, customers and participants Last updated 11 October 2026. This notice describes how information is handled when you enquire about, buy or take part in an Addiction2Advocate programme.
1. Who controls your information
Sharon House, trading as Addiction2Advocate is the data controller for information collected directly in connection with Addiction2Change and Addiction2You. Contact hello@addiction2advocate.com or write to 10 Bowood Drive, Brockworth, Gloucester, GL3 4UN with privacy questions or requests. This notice concerns programme administration and participant support; third-party websites and platforms may issue their own privacy notices.
2. What we collect
We collect what is relevant to the service you request: name, email, programme/tier interests, eligibility and scheduling preferences, enquiries, your order and refund details, paid/remaining amounts, confirmation and consent records, and programme attendance/participation where relevant. We generally receive transaction confirmations from the payment provider, not your full bank-card details. If you voluntarily share reflections, recovery experiences, voice notes or other sensitive information during an application, direct support or group session, we may receive that information. We will not ask for a detailed diagnosis, drug dosages, medical history or other sensitive details unless genuinely necessary for a clearly explained purpose. Group posts may be visible to other participants.
3. Our reasons and lawful bases
We use ordinary personal information to answer requests and take steps towards a requested programme contract (UK GDPR Article 6(1)(b)); to administer a purchase and deliver agreed lessons or support (Article 6(1)(b)); to keep accounting, tax or legal records where legally required (Article 6(1)(c)); and for proportionate service security, complaints and prevention of misuse where our legitimate interests apply (Article 6(1)(f)), balanced against your rights. We send promotional emails where we have valid consent or another permitted basis under UK data protection and marketing rules. Subscribing to marketing is separate from buying a programme. Every promotional email will have an unsubscribe route. Service messages, receipts and essential joining instructions are not treated as optional marketing.
4. Recovery and health information: additional safeguards
Information revealing substance dependence, mental or physical health can be special-category personal data. For voluntary personal recovery/health information that we ask you to share for individualised programme support, we intend to use UK GDPR Article 9(2)(a) explicit consent in addition to the appropriate Article 6 basis. We request that explicit consent separately, by a clear affirmative statement. You can withhold or withdraw it by emailing hello@addiction2advocate.com. If you choose not to share sensitive information, you can still receive general educational content. Some individualised help that necessarily relies on that specific information may need to be altered or not provided, and we will discuss reasonable alternatives. Withdrawing consent does not retrospectively make earlier lawful use invalid; we will stop the affected consent-based use unless a different legal duty or basis clearly applies. We will not assume that agreeing to programme terms also constitutes sensitive-data consent. Where immediate safety concerns require limited necessary disclosure to an appropriate emergency or safeguarding body, a different lawful basis and Article 9 condition may apply; we assess that against the specific circumstances and document it. We do not promise absolute secrecy where safety or law requires proportionate action.
5. Services and other recipients
We may use relevant providers to process information, for example Stan Store and Stripe for checkout/payment where used, MailerLite for emails, Zoom for online meetings, Discord for voluntary community spaces, and the relevant website/learning hosting platform. The exact providers depend on which services you use; their own terms and notices may also apply. We share the minimum information reasonably needed for provision. We do not sell your recovery history to advertisers. Other group members can see messages, names or profiles you choose to display in shared spaces, and we cannot guarantee what those members will do with information. We may disclose only what is necessary to professional advisers, regulators, public authorities or emergency responders when there is a lawful reason.
6. Storage, security and overseas processing
We take proportionate measures such as access controls, strong account authentication, limited sharing, and secure platform settings, especially for sensitive recovery information. Please avoid sending sensitive details through insecure public channels. Some technology providers may process information outside the UK. Where the UK GDPR restricts transfers, we will rely on an appropriate mechanism and provider safeguards before using the service for relevant personal data.
7. How long we retain information
We retain information for only as long as needed for the described purpose. As an intended operational standard, unanswered or unsuccessful enquiries are reviewed for deletion after 12 months without meaningful contact; participant support notes and voluntarily shared exercises are reviewed for deletion no later than 12 months after programme access ends unless an active request, complaint or justified safeguarding/legal reason requires longer. Financial and contractual records are retained for the applicable tax, accounting and legal periods. Marketing subscription details are kept while you are subscribed, with limited suppression records retained to respect opt-outs. We will review these periods as the service and record-keeping systems are implemented.
8. Your rights
Subject to legal exceptions, you may ask for access, correction, deletion, restriction, portability or to object to particular uses. You may withdraw consent where consent is the basis. You also have the right to complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/. Email hello@addiction2advocate.com first if you want help with a request. We do not make solely automated decisions about programme admission or support that have legal or similarly significant effects.
9. Website cookies and external links
Read our Website privacy & cookies notice for the public website, and our Programme emails privacy notice for MailerLite signups. External checkout, community, video and other websites have their own notices and settings.