Privacy Policy

This policy explains how Write Well Workshop collects and uses personal information when you visit our website, create an account, purchase a course, submit writing or contact us. Write Well Workshop is responsible for the personal information described in this policy. Privacy enquiries and requests should be sent to contact@writewellworkshop.com.

Information we collect

We collect the information you provide when registering or using your account, including your name, email address and any optional profile information you choose to supply. Account sign-in credentials are handled by our authentication service; we do not have access to your plain-text password. We keep course access and purchase records, including transaction references, payment status and access dates. Our payment provider processes your payment and may supply billing and transaction information to us. We do not store full payment card details.

When you use the course, we collect saved drafts, exercise responses, feedback, follow-up questions and conversations, and information about your course progress. We also keep messages and details you provide when making an enquiry or requesting support, together with records needed to administer that enquiry. Information about your device, browser, requests and network connection, including IP addresses or derived identifiers, may be processed in service logs and security or usage records.

How and why we use information

We use account, purchase and learning information to provide the services you request, manage course access, save your work and progress, process payments, provide feedback and respond to service enquiries. Our lawful basis for these activities is the performance of our contract with you, or taking steps at your request before entering into a contract. An email address and the information needed to associate a payment with your account are required to provide account and purchase services. Without them, we cannot create or administer the relevant access. Optional profile information is not required to study.

We rely on our legitimate interests in operating a reliable service to prevent misuse and fraud, enforce usage allowances, investigate technical problems, manage support and maintain proportionate administrative records. We consider your rights and limit this processing to what is necessary for those purposes. We process financial and other records where necessary to comply with legal obligations, including tax, accounting and valid legal requests. Where we rely on consent, including for any optional marketing or non-essential browser storage that requires consent, you may withdraw that consent at any time. We do not currently operate a newsletter or add account holders to a promotional mailing list.

Writing and personalised feedback

Your saved writing is associated with your account and is available to authorised administrators where needed to operate or support the service. When you request personalised feedback or ask a follow-up question, the relevant writing, question, lesson instructions and conversation context are sent to an external automated writing-feedback provider to generate a response. Saving a draft alone does not request this external feedback. Please avoid submitting confidential information or sensitive personal details about yourself or anyone else. Feedback is intended to support your learning; it is not used to make solely automated decisions that have legal or similarly significant effects on you.

Sharing information

We use service providers for cloud hosting and databases, account authentication, payment processing, automated writing feedback and abuse prevention. These providers receive the information needed for their respective functions and process it under applicable service and data-protection arrangements. Payment and other providers may also act independently for their own legal, security or payment-processing purposes. Third-party video services receive technical information when their content is loaded. External websites and community groups have their own privacy policies.

We do not sell your personal information or publish your submitted exercises. We may disclose necessary information to professional advisers, public authorities or other recipients where legally required, or where necessary to establish, exercise or defend legal claims. Any future arrangement allowing a school or business to view learner records will be explained separately before that sharing is enabled.

International processing

Our service providers may store or process personal information outside the United Kingdom, including in the United States. Where UK data-protection law restricts a transfer, the transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as approved contractual terms with the required UK transfer provisions. You may contact us for information about the transfer arrangements applicable to your data and how to obtain a copy of the relevant safeguards.

Storage, security and retention

We use access restrictions and other appropriate technical and organisational measures to protect personal information. Access is limited to authorised people and service providers who need it for their work. No internet service can guarantee absolute security. Keep your account credentials private and contact us if you suspect unauthorised access.

We retain account and learning information while it is needed to provide and administer your account and course access, resolve enquiries or fulfil a relevant legal obligation. Expiry of course access does not itself delete your saved work. You may request account deletion by email. Purchase and accounting records may need to be retained after account deletion for the applicable statutory period. We determine retention for support, security and operational records by the purpose of the record, whether an enquiry or dispute remains open, the time needed to investigate misuse, and applicable legal requirements. Records that are no longer needed should be deleted or anonymised; retained transaction or operational references may remain where necessary for accounting, fraud prevention or legal claims.

Cookies, browser storage and external content

With your consent, we use Google Analytics on our public information and article pages to understand visitor numbers, the pages people view, how they arrive at the website and general device and location statistics. Google receives technical visit information and uses first-party analytics cookies, including _ga and _ga_RXTEVT5570, to distinguish browsers and sessions. These cookies are configured to last up to six months. Analytics is optional and is not loaded until you select Accept analytics. Rejecting analytics does not affect account, payment or course features. We do not install Analytics on account, administrator, checkout or course pages. On the payment-confirmation page, after the server confirms a real purchase belonging to the signed-in account, we may send a purchase event containing the product, amount, currency and an opaque transaction reference to avoid duplicate counting. This allows us to understand which public pages lead to purchases. With consent, we also store the last public page viewed in the same browser tab, using it for purchase reporting for up to 24 hours, and keep up to 100 opaque references to reported purchases in browser storage for up to six months. We do not send names, email addresses, submitted writing, account identifiers, card details, Stripe identifiers or URL query strings to Analytics. Automatic form and outbound-link measurement and advertising personalisation are disabled for this setup.

Our lawful basis for optional analytics is your consent. You can withdraw or change that consent at any time using Cookie settings in the footer of a public page. Withdrawal stops further analytics collection from that browser and removes accessible analytics cookies; it does not undo processing that took place before withdrawal. We store your accept or reject choice in your browser for up to six months, after which we ask again. If you clear browser storage or use another browser or device, your choice may need to be made again. Analytics information is processed by Google, including internationally, under the applicable data-processing and transfer arrangements. Further information is available in Google's Privacy Policy.

The website uses browser storage and similar technologies to maintain sign-in, remember necessary session information and operate account features. These technologies are required for the services you request. Embedded videos and spam-protection features may process device and connection information and use their own storage technologies. Where consent is required for non-essential storage, it must be obtained before that storage is used. You can manage browser storage through your browser settings, although blocking essential storage may prevent sign-in or other account features from working.

Your rights

Depending on the circumstances and the lawful basis used, you may request access to your personal information, correction of inaccurate information, deletion, restriction of processing or transfer of information in a portable format. You may also withdraw consent where processing relies on it, without affecting the lawfulness of processing before withdrawal. Contact contact@writewellworkshop.com to make a request. We may need to verify your identity and will explain any lawful limitation that applies.

Your right to object

You have the right to object to processing based on legitimate interests on grounds relating to your particular situation. You also have the right to object to direct marketing at any time. Send your objection to the contact email above.

Complaints and changes

If you have a concern about our use of personal information, please contact us so we can investigate. You also have the right to complain to the Information Commissioner's Office, the UK data-protection regulator, through ico.org.uk/make-a-complaint.

We may update this policy to reflect changes in our services or legal obligations. Material changes will be brought to your attention where required. This policy was last updated on 2 October 2026.