Last Updated: 30 January 2026
1. Introduction
Welcome to Diary of a Barrister (“we,” “our,” or “us”), operated by Chelsea Brooke-Ward. We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website diaryofabarrister.co.uk and use our services, including our online courses, membership community, and downloadable resources.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Data Controller
The data controller responsible for your personal data is:
- Name: Diary of a Barrister / Chelsea Brooke-Ward
- Website: diaryofabarrister.co.uk
- Email: hello@doab.thisisfoursocial.com
3. Information We Collect
Information You Provide Directly
We collect information you voluntarily provide when you:
- Register for an account or membership
- Purchase courses or subscriptions
- Complete your member profile
- Participate in community discussions
- Download resources or sign up for our newsletter
- Contact us with enquiries or feedback
This information may include:
- Name and email address
- Billing information and payment details (processed securely via Stripe)
- Profile information (bio, location, career stage, practice interests)
- Educational background and career goals
- Community posts, comments, and messages
Information Collected Automatically
When you access our website, we automatically collect certain information, including:
- Device information (browser type, operating system, device type)
- IP address and general location data
- Pages visited and time spent on site
- Course progress and completion data
- Referring website and search terms
4. How We Use Your Information
We use the information we collect to:
- Provide our services: Deliver courses, process payments, manage your membership, and enable community features
- Personalise your experience: Recommend relevant courses, track your progress, and tailor content to your interests
- Communicate with you: Send course updates, community notifications, newsletters, and respond to enquiries
- Improve our services: Analyse usage patterns, conduct research, and develop new features
- Ensure security: Protect against fraud, abuse, and unauthorised access
- Comply with legal obligations: Meet regulatory requirements and respond to legal requests
5. Lawful Bases for Processing
Under the UK GDPR, we process your personal data on the following lawful bases:
- Contract: Processing necessary for account registration, payment processing, course delivery, and customer support
- Consent: Marketing emails and non-essential cookies (you may withdraw consent at any time)
- Legitimate Interest: Website analytics, security monitoring, and service improvement
- Legal Obligation: Tax and accounting records, responding to legal requests
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
Service Providers
- Stripe: Payment processing
- Email Service Provider: Newsletter and transactional emails
- Hosting Provider: Website hosting and data storage
- Analytics Tools: Website performance analysis (Google Analytics with IP anonymisation)
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
7. International Data Transfers
Some of our third-party service providers are based outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:
- UK adequacy decisions
- Standard contractual clauses approved by the ICO
- Data processing agreements with all processors
8. Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience. For detailed information about the cookies we use and your choices, please see our Cookie Policy.
- Essential cookies: Required for site functionality and security
- Performance cookies: Help us understand how visitors use our site
- Functionality cookies: Remember your preferences and settings
- Marketing cookies: Track advertising effectiveness (optional, consent required)
9. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- SSL/TLS encryption for data in transit
- Secure payment processing via Stripe (PCI-DSS compliant)
- Regular security assessments and updates
- Access controls and authentication measures
- Secure data backup and recovery procedures
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. Your Rights (UK GDPR)
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Data Portability: Request transfer of your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at hello@doab.thisisfoursocial.com. We will respond within one month.
You may also submit a formal data request via our GDPR Data Request page.
11. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, accounting, or reporting obligations
- Resolve disputes and enforce our agreements
Typically, we retain account data for the duration of your membership plus 6 years after cancellation (for legal and tax purposes). Course completion records may be retained indefinitely for certification purposes unless you request deletion.
12. Children’s Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the “Last Updated” date
- Sending an email notification to registered users (for significant changes)
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: hello@doab.thisisfoursocial.com
- Data Controller: Chelsea Brooke-Ward, Diary of a Barrister
- Website: diaryofabarrister.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated: ico.org.uk