Dr Urszula Wysocka
Privacy Policy
Last updated 17/05/2026
1. Introduction
This Privacy Policy explains how I collect, use, store, and protect your personal data when you visit my website and contact me. I am committed to protecting your privacy and handling your personal information in a transparent and lawful manner.
This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
By using this website and/or contacting me, you acknowledge that you have read and understood this Privacy Policy.
2. Who I Am (Data Controller)
Name: Urszula Wysocka
Business Name: SU-FI Education. Consulting. Finances. LTD
Address: 42-44, Bishopsgate, EC2N 4AH London, England
Email: contact@urszulawysockaa.com
Website: www.urszulawysockaa.com
I am the Data Controller responsible for your personal data collected through this website. I am not required to appoint a Data Protection Officer (DPO) as I am a small business. However, if you have any data protection concerns, please contact me directly using the details above.
3. What Personal Data I Collect
When you visit my website or contact me, I may collect the following personal data:
-
Contact details – your name, email address, telephone number, and job title
-
Professional information – your organisation, role, and industry sector
-
Message content – any information you share in enquiry forms, emails, or messages
-
Website usage data – IP address, browser type, pages visited, and time spent on site (via cookies and analytics tools)
-
Communication preferences – whether you would like to receive newsletters, updates, or course information
I only collect personal data that is necessary for the purpose for which it is being collected.
4. How I Collect Your Data
I collect personal data in the following ways:
-
When you complete a contact form on my website
-
When you send me an email directly
-
When you register for a webinar, course, or event I host
-
When you subscribe to a newsletter or mailing list
-
Automatically through cookies and analytics when you browse my website (see Section 9 below)
5. Why I Use Your Data (Purposes and Legal Basis)
Under the UK GDPR, I must have a lawful basis for processing your personal data. The table below explains the purposes for which I use your data and the corresponding legal basis:
Purpose
Legal Basis (UK GDPR)
Responding to your enquiries and messages
Legitimate interests (Art. 6(1)(f))
Providing consultancy, training, or advisory services you have requested
Performance of a contract (Art. 6(1)(b))
Sending you information about courses, events, or services (if you have opted in)
Consent (Art. 6(1)(a))
Improving my website and services through analytics
Legitimate interests (Art. 6(1)(f))
Complying with legal or regulatory obligations
Legal obligation (Art. 6(1)(c))
Sending newsletters or thought leadership content (if requested)
Consent (Art. 6(1)(a))
I will not process your personal data for any purpose that is incompatible with the purposes listed above without your knowledge or consent.
6. Who I Share Your Data With
I treat your personal data with the utmost confidentiality. I do not sell, rent, or trade your personal information to third parties.
In limited circumstances, I may share your data with trusted third-party service providers who assist me in running my website and business, including:
-
Email and communication platforms (e.g., Microsoft Outlook, Mailchimp or similar tools) for delivering newsletters and responding to enquiries
-
Website hosting and analytics providers (e.g., Google Analytics) for website performance
-
Virtual event platforms (e.g., Zoom, Microsoft Teams) for webinars and online courses
-
Document and cloud storage services (e.g., Microsoft OneDrive, Google Drive) for securely storing communications
All third-party providers are required to handle your data securely and in compliance with UK data protection law. Where relevant, I have entered into appropriate data processing agreements with these providers.
I may also disclose your data if required to do so by law, court order, or regulatory authority.
7. International Data Transfers
Some third-party tools I use may transfer your data outside the United Kingdom. Where this occurs, I take steps to ensure your data is protected through appropriate safeguards, such as:
-
Transfers to countries with an adequacy decision from the UK Government
-
Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms under UK law
-
The International Data Transfer Agreement (IDTA) where applicable
-
8. How Long I Keep Your Data (Retention)
I only keep your personal data for as long as it is necessary for the purpose it was collected, or as required by law. The general retention periods I follow are:
Type of Data
Retention Period
Enquiry and contact form messages
2 years from last contact
Client/service-related correspondence
6 years (in line with standard contract law)
Newsletter/marketing opt-in records
Until you unsubscribe or withdraw consent
Website analytics data
As per the analytics platform's own policy (typically 14–26 months)
When data is no longer required, it is securely deleted or anonymised.
9. Cookies and Website Analytics
My website may use cookies – small text files stored on your device – to help the website function properly and to understand how visitors use the site.
Types of cookies I may use:
-
Strictly necessary cookies – essential for the website to function (e.g., security, session management). These do not require your consent.
-
Analytics cookies – help me understand how visitors interact with my website (e.g., Google Analytics). These are only placed with your consent.
-
Preference cookies – remember your choices and settings on the website.
When you first visit my website, you will be asked to consent to non-essential cookies through a cookie banner. You can withdraw your consent or change your cookie preferences at any time through your browser settings or the cookie management tool on my website.
Under the Data (Use and Access) Act 2025, certain low-risk cookies may be used without explicit consent; however, I will always be transparent about what cookies are in use.
10. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
-
Right to be informed – to know how your data is being used (this policy fulfils that obligation)
-
Right of access – to request a copy of the personal data I hold about you (Subject Access Request / SAR)
-
Right to rectification – to request that inaccurate or incomplete data is corrected
-
Right to erasure ("right to be forgotten") – to request that your data is deleted, where no legal obligation requires me to retain it
-
Right to restrict processing – to ask me to limit how I use your data in certain circumstances
-
Right to data portability – to receive your data in a structured, commonly used format
-
Right to object – to object to processing based on legitimate interests or for direct marketing
-
Rights related to automated decision-making – to not be subject to solely automated decisions that significantly affect you
To exercise any of these rights, please contact me at contact@urszulawysockaa.com. I will respond to your request within one calendar month in line with UK GDPR requirements.
11. How I Protect Your Data
I take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:
-
Using secure (HTTPS) connections on my website
-
Storing data on password-protected and encrypted systems
-
Limiting access to personal data to only those who need it
-
Regularly reviewing and updating my data security practices
However, please note that no method of transmission over the internet is 100% secure. Whilst I take every reasonable precaution, I cannot guarantee absolute security of data transmitted to my website.
12. How to Make a Complaint
If you believe I have not handled your personal data in accordance with this policy or UK data protection law, please contact me in the first instance at contact@urszulawysockaa.com so I can address your concern.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk
Helpline: 0303 123 1113
13. Links to Other Websites
My website may contain links to third-party websites. I am not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data.
14. Children's Privacy
My website and services are not directed at children under the age of 13. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me immediately and I will take steps to delete it.
15. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in law, technology, or my business practices. The "Last updated" date at the top of this page will be revised accordingly. I encourage you to review this policy periodically.
If I make significant changes to how I handle your personal data, I will notify you by email (where I hold your contact details) or by prominent notice on my website.
16. Contact Me
If you have any questions about this Privacy Policy or how I handle your personal data, please contact me:
Urszula Wysocka
SU-FI Education.Consulting.Finances.LTD
📧 contact@urszulawysockaa.com
📍 London, England, United Kingdom
🌐 www..urszulawysockaa.com