Privacy Notice
Last updated: 20 July 2026
Who is responsible for your information?
MiguelMateas Ltd is the data controller responsible for the personal information described in this notice.
MiguelMateas Ltd
Company number: 10155699
Registered office: 18 Northgate, Sleaford, Lincolnshire, England, NG34 7BJ
Email: hello [at] drmiguelmateas [dot] com
ICO registration number: Z3481841
Services are delivered by Dr Miguel Toribio-Mateas on behalf of MiguelMateas Ltd.
What this notice covers
This notice explains how personal information is collected and used when you:
Visit this website.
Make an enquiry or booking.
Purchase a service or digital product.
Attend a consultation, course or masterclass.
Join or participate in The Circle.
Subscribe to email communications.
Contact MiguelMateas Ltd through another channel.
Information collected
Depending on how you interact with the business, information may include:
Identity and contact information
Your name, email address, telephone number, billing address and account details.
Booking and transaction information
Services or products purchased, appointment information, payment status, invoices, cancellations and correspondence relating to your purchase.
Full payment-card details are processed by the relevant payment provider and are not ordinarily stored by MiguelMateas Ltd.
Consultation information
Information you choose to provide about your health, nutrition, neurodivergence, lifestyle, circumstances, goals and wellbeing, together with consultation notes, questionnaires, correspondence and agreed plans.
This may include special-category information under the UK GDPR, particularly health information.
Recordings and transcripts
Where you have explicitly agreed, audio from an online consultation may be recorded and transcribed for confidential note-taking.
Live masterclass or Circle Gathering recordings may also include your display name, image, voice, questions, messages or contributions if you choose to participate.
Membership and community information
Your Circle account, membership status, comments, questions, posts, images, reactions and other contributions made within the members’ area, Journal Club, Library, Chat Room or a Circle Gathering.
Technical information
Your IP address, browser, device, pages visited and information collected through necessary cookies, analytics and similar technologies.
Communications and marketing preferences
Messages you send, enquiries, feedback and whether you have agreed to receive newsletters or promotional communications.
How and why information is used
Information may be used to:
Respond to enquiries.
Arrange and provide consultations.
Process payments and maintain transaction records.
Deliver courses, masterclasses and digital materials.
Administer Circle membership and provide access.
Host Gatherings and member discussions.
Maintain appropriate consultation and business records.
Provide customer service and resolve complaints.
Protect accounts, services and the website from misuse.
Meet tax, accounting, insurance and legal obligations.
Send marketing communications where permitted.
Establish, exercise or defend legal claims.
Lawful bases
Depending on the activity, information is processed because:
It is necessary to enter into or perform a contract with you.
It is necessary to comply with a legal obligation.
It supports the legitimate interests of operating, securing and improving the business, provided those interests do not override your rights.
You have given consent for a specific purpose, such as marketing or consultation recording.
Where health or other special-category information is processed, MiguelMateas Ltd relies on your explicit consent where appropriate. Information may also be retained or used where necessary for establishing, exercising or defending legal claims.
You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully and may not require deletion of information that must be retained for legal or evidential reasons.
Where particular information is necessary to provide a requested service, choosing not to provide it may mean that the service cannot be provided safely or effectively.
Consultation recording and transcription
To support accurate records and as a reasonable adjustment, Zoom Notes may be used to record and transcribe consultation audio.
Recording will not begin without your explicit agreement. If you decline, alternative note-taking arrangements will be used.
Audio is normally deleted after the transcript has been checked and within 30 days. Relevant notes or transcript content may be retained as part of your consultation record.
The provider is permitted to process information only for the agreed purpose and subject to appropriate data-protection and confidentiality arrangements.
Masterclass and Circle recordings
Live masterclasses and Circle Gatherings may be recorded. You will be notified before recording begins.
Recordings may capture your image, voice, display name, messages or questions if you choose to participate. You may keep your camera and microphone off, use a first name or nickname and avoid including identifying information in questions.
Masterclass recordings may be made available to registered participants and, where stated before purchase, future purchasers of the on-demand masterclass. Circle Gathering recordings are available only to active Circle members.
They will not be used publicly or for advertising without separate permission.
Sharing within The Circle
Material you post within The Circle is visible to other current and future members and may remain in its private archive.
Please do not post identifiable information about another person without permission. Other members are required not to reproduce or distribute your contributions outside The Circle, although absolute confidentiality within any online community cannot be guaranteed.
If you wish to request removal of a contribution, contact hello [at] drmiguelmateas [dot] com. Requests will be considered in accordance with your data-protection rights and any legal or technical limitations.
Service providers and other recipients
Information may be processed by organisations helping to deliver the services, including:
Squarespace, for website hosting, checkout and member accounts.
Payment processors, such as Stripe, Squarespace Payments, and/or PayPal.
Zoom, for consultations, masterclasses and Gatherings.
FastComments, for community comments and chat.
Zoom Notes, where consultation recording is agreed.
Email, cloud-storage, scheduling and administrative providers.
Accountants, insurers, legal advisers and other professional advisers.
Information may also be disclosed where required by law, in response to a valid regulatory request, for safeguarding, or to establish or defend a legal claim.
Personal information is not sold.
International transfers
Some service providers may process information outside the United Kingdom.
Where this happens, the provider will be selected and used only where an appropriate legal mechanism is available, such as UK adequacy regulations or approved contractual safeguards.
Further information about a particular provider or transfer can be requested using the contact details above.
Retention
Information is retained only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, insurance and evidential requirements.
The following periods normally apply:
General enquiries that do not lead to a service: up to two years after the last communication.
Financial and transaction records: normally six years after the relevant financial period.
Consultation records: normally eight years after the final consultation.
Consultation audio: deleted after the transcript has been checked and within 30 days.
Masterclass and Circle recordings: retained while they remain part of the relevant learning or member archive and reviewed periodically.
Circle posts and comments: retained while the community and relevant archive operate, unless removed earlier.
Marketing information: until you unsubscribe or the information is no longer required.
Consent and suppression records: for as long as reasonably necessary to demonstrate and respect your choices.
Limited copies may remain temporarily within secure backups until overwritten through the normal backup cycle.
Security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, alteration or disclosure.
Access is limited to those who need the information for an authorised purpose. Third-party processors are selected with regard to their security and data-protection arrangements.
No online system can be guaranteed completely secure. If a personal-data breach creates a risk to your rights, it will be handled and reported in accordance with applicable law.
Marketing
Marketing emails are sent only where there is an appropriate lawful basis.
You can unsubscribe at any time using the link in an email or by contacting hello [at] drmiguelmateas [dot] com. Unsubscribing from marketing will not prevent necessary communications relating to a purchase, booking or active membership.
Cookies and analytics
This website uses necessary cookies and may use analytics or other optional technologies with your consent where required.
Further information is available through the website’s cookie banner and Cookie Policy. You can change your cookie preferences through the available cookie controls.
Your rights
Depending on the circumstances, you may have the right to:
Be informed about how your information is used.
Access the personal information held about you.
Correct inaccurate or incomplete information.
Request deletion of information.
Restrict particular processing.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent.
Complain to the Information Commissioner’s Office.
These rights are not absolute and may be limited where information must be retained for legal, contractual or evidential reasons.
To exercise a right, contact hello [at] drmiguelmateas [dot] com. Identity verification may be requested before information is disclosed.
Complaints
Please contact hello [at] drmiguelmateas [dot] com first if you have a concern so that it can be investigated.
You also have the right to complain to:
Information Commissioner’s Office
ico.org.uk/make-a-complaint
Children
Services are intended primarily for adults. Information concerning a person under 18 will only be processed where the service has been expressly agreed and any necessary parental or guardian involvement has been established.
Changes to this notice
This notice may be updated when services, providers or legal requirements change. The updated date will appear at the top, and significant changes will be brought to the attention of affected clients or members where appropriate.