PRIVACY POLICY

Last updated: 21 June 2026

1. Who we are

East Anglian Psychologists Ltd is the organisation responsible for the personal information described in this Privacy Policy.

Ridgeman is a brand operated by East Anglian Psychologists Ltd.

Our details are:

Legal name: East Anglian Psychologists Ltd
Company number: 14283128
Registered office: 46–54 High Street, Ingatestone, Essex, United Kingdom, CM4 9DW
Privacy email: [email protected]

References in this Privacy Policy to “we”, “us” or “our” mean East Anglian Psychologists Ltd and the brands and websites through which it provides the relevant service.

East Anglian Psychologists Ltd is the data controller for the personal information covered by this Privacy Policy. This means that we decide why and how that personal information is used.

2. What this Privacy Policy covers

This Privacy Policy applies when you:

• visit jamespmanning.com or an associated Kajabi-hosted page;
• request a free resource;
• join an email list;
• create an online account;
• purchase a book, digital product, course, workshop, event, consultation or other service;
• participate in an online course, webinar, community or workshop;
• contact us with a question, complaint, media enquiry or professional enquiry;
• submit feedback, a review or a testimonial;
• interact with our emails, advertisements or social-media content;
• apply to attend training or another event.

This policy principally covers our author, publishing, educational, marketing and commercial activities.

Formal psychological therapy, assessment, clinical consultation and other regulated clinical services may require us to process more detailed clinical and health information. A separate clinical privacy notice, engagement agreement or service-specific notice may apply to those services.

Where a separate clinical privacy notice applies, that notice will take priority in relation to the clinical service concerned.

3. Personal information we may collect

The personal information we collect depends on how you interact with us.

3.1 Identity and contact information

This may include:

• your name;
• email address;
• telephone number;
• postal address;
• billing address;
• country or region;
• time zone;
• professional title;
• job role;
• employer or organisation.

3.2 Account information

This may include:

• account username or login details;
• records of the products or resources associated with your account;
• account preferences;
• course access information;
• membership status;
• login and account activity.

You are responsible for keeping your account password confidential and for telling us if you believe your account has been accessed without permission.

3.3 Order and transaction information

This may include:

• products or services purchased;
• order date;
• payment status;
• transaction reference;
• billing details;
• discounts or promotional codes;
• refunds;
• cancellations;
• invoices;
• subscription information.

Payments may be processed by an external payment provider such as Stripe, PayPal or another provider available through Kajabi.

We do not normally receive or retain your complete payment-card number. Your payment provider processes payment-card information under its own terms and privacy arrangements.

3.4 Communications and enquiry information

This may include:

• emails;
• contact-form submissions;
• support requests;
• complaints;
• questions;
• professional enquiries;
• workshop enquiries;
• media and podcast enquiries;
• correspondence about products or services;
• notes reasonably required to respond to or manage your enquiry.

3.5 Marketing and preference information

This may include:

• whether you have agreed to receive marketing;
• the date and method of your consent;
• your subscription and unsubscribe history;
• books, resources, courses or subjects in which you have expressed an interest;
• email opens and link selections, where this information is available;
• communication preferences;
• forms you have completed;
• resources you have requested;
• tags applied to organise your contact record.

For example, requesting the Autistic Alignment Checklist may result in your record being tagged as showing an interest in autism-related material.

Such a tag describes the material requested. It is not treated as proof that you are autistic, have received a diagnosis or have any particular health condition.

3.6 Website and technical information

When you use our websites or online services, we may receive:

• IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from technical information;
• pages visited;
• referring page or website;
• dates and times of access;
• cookie identifiers;
• login records;
• download activity;
• error information;
• website-security logs.

3.7 Course, workshop and event information

This may include:

• course enrolment;
• course progress;
• attendance;
• completion information;
• answers to educational exercises;
• questions submitted during workshops;
• comments;
• community posts;
• accessibility requests;
• feedback;
• files or materials that you voluntarily submit.

Please do not post confidential clinical, medical, financial or other highly sensitive personal information in a public course or community area.

Other participants may be able to see information that you choose to post publicly within a community, workshop chat or discussion area.

3.8 Reviews, testimonials and contributed content

If you provide a review, testimonial, photograph, video, audio recording or other contribution, we may process:

• your name;
• your chosen display name;
• your comments;
• your photograph;
• your voice;
• your video image;
• the product or service concerned;
• your permission regarding publication.

We will seek appropriate permission before using an identifiable testimonial, image, audio recording or video for promotional purposes.

3.9 Fillable PDF worksheets

When you download and complete one of our fillable PDF worksheets, the answers you enter will normally remain on your own device.

We do not automatically receive the answers entered into a downloaded PDF unless you deliberately send, upload or otherwise share the completed document with us.

Your browser, Kajabi and our hosting providers may record that a file was accessed or downloaded, together with normal technical information such as your IP address and device type.

Completed worksheets may contain sensitive personal reflections. You should store and share them only in ways that feel secure and appropriate to you.

3.10 Special category information

Some personal information is treated as particularly sensitive under data-protection law.

This includes information concerning:

• physical or mental health;
• disability;
• neurodivergence;
• racial or ethnic origin;
• religious or philosophical beliefs;
• sexual orientation;
• sex life;
• genetic information;
• biometric identification.

You may voluntarily disclose information concerning autism, ADHD, disability, mental health, accessibility or another health matter when:

• requesting an accessibility adjustment;
• completing a relevant enquiry form;
• describing your experience;
• participating in a course or workshop;
• requesting an appropriate service;
• submitting feedback.

We will not ask you to provide more sensitive information than is reasonably necessary for the relevant purpose.

Where we process special category information, we will identify both a lawful basis for using the personal information and an additional legal condition permitting the use of special category information.

Depending on the circumstances, this may include:

• your explicit consent;
• provision or management of an appropriate health or care service;
• establishment, exercise or defence of legal claims;
• protection of vital interests;
• another condition permitted by applicable law.

We will not infer that you have a diagnosis merely because you download, buy or read autism-related or mental-health-related material.

4. How we obtain personal information

We may obtain personal information:

• directly from you;
• when you complete a form;
• when you create an account;
• when you make a purchase;
• when you send us an email;
• when you attend a course, workshop or event;
• automatically through the use of websites, emails and online platforms;
• from payment, booking, course and technology providers;
• from an event organiser or professional organisation;
• from publicly available professional or business sources;
• from another person authorised to communicate on your behalf.

If another person gives us information about you, we may contact you to explain how that information is being used where it is appropriate or legally required to do so.

5. Why we use personal information

We may use personal information for the purposes described below.

5.1 To provide a requested free resource

We use your contact information to:

• deliver the resource you requested;
• direct you to the appropriate download page;
• send necessary service communications concerning that resource;
• record that the resource was requested;
• provide associated technical support.

Delivering the requested resource does not, by itself, give us unrestricted permission to send unrelated marketing.

Where we send follow-up marketing, we rely on appropriate consent or another lawful route permitted by electronic-marketing law.

5.2 To provide products and services

We may use personal information to:

• process an order;
• create an account;
• provide access to a product or course;
• manage a booking;
• provide a workshop or event;
• administer a subscription;
• issue an invoice;
• process a refund;
• communicate about the service;
• provide customer support.

We normally use this information because it is necessary to take steps at your request or to perform a contract with you.

5.3 To answer enquiries

We use personal information to:

• answer questions;
• assess whether we can assist;
• respond to media or professional enquiries;
• manage complaints;
• provide support;
• maintain an appropriate record of correspondence.

We normally rely on our legitimate interests in responding to enquiries and operating the organisation, or on steps taken at your request before entering a contract.

5.4 To send newsletters and marketing

Where legally permitted, we may send information about:

• books;
• articles;
• free resources;
• courses;
• events;
• workshops;
• consultations;
• relevant products and services.

We will normally rely on your consent.

In limited circumstances, we may rely on the existing-customer soft opt-in where all legal requirements are met and the communication concerns similar products or services.

5.5 To personalise communications

We may use information about the resources you requested, purchases you made or subjects you selected to make communications more relevant.

For example, someone who requests an autism-related resource may receive follow-up material about autism, masking, burnout, relationships or related books and courses.

This personalisation is not used to diagnose you.

5.6 To operate and improve our websites and services

We may use information to:

• understand how websites and resources are used;
• improve navigation;
• identify technical problems;
• assess which content is useful;
• maintain and improve courses;
• test new features;
• monitor performance.

We may rely on legitimate interests for essential operational information.

Where analytics or similar non-essential cookies require consent, we will seek that consent before using them.

5.7 To protect our services

We may process information to:

• maintain website and account security;
• detect misuse;
• prevent fraud;
• investigate suspicious activity;
• enforce our terms;
• protect our intellectual property;
• protect our legal rights;
• protect users and third parties.

We normally rely on legitimate interests and, where applicable, legal obligations.

5.8 To meet legal and financial obligations

We may use personal information to:

• maintain accounting records;
• maintain tax records;
• comply with company-law obligations;
• respond to legal requests;
• cooperate with regulators;
• establish, exercise or defend legal claims;
• meet insurance requirements;
• prevent or investigate unlawful activity.

5.9 To publish reviews and testimonials

We may use your review or testimonial where you have agreed to its use or granted us an appropriate licence.

You may withdraw consent for future promotional use where consent is the relevant basis. This will not necessarily require us to recall material already lawfully printed or distributed before consent was withdrawn.

5.10 Business-to-business communications

We may contact professional organisations or corporate contacts about relevant books, training, workshops or services.

Where personal information is involved, we will consider applicable data-protection and electronic-marketing requirements.

Recipients may object to direct marketing at any time.

6. Our lawful bases

Depending on the purpose and circumstances, we may rely on:

• consent, where you have actively agreed to a particular use;
• contract, where processing is needed to enter into or perform a contract with you;
• legal obligation, where we must use information to comply with the law;
• legitimate interests, where processing is reasonably necessary for our organisation or a third party and those interests are not overridden by your rights;
• vital interests, in rare circumstances where processing is necessary to protect life;
• another lawful basis permitted under applicable data-protection law.

Our legitimate interests may include:

• responding to enquiries;
• operating and improving our services;
• maintaining appropriate business records;
• protecting our websites and accounts;
• preventing misuse;
• understanding how resources are used;
• communicating proportionately with relevant professional contacts;
• establishing or defending legal rights.

Where we rely on legitimate interests, we consider:

• the purpose of the processing;
• whether the processing is necessary;
• the likely effect on the individual;
• whether the individual would reasonably expect the processing;
• whether appropriate safeguards are available.

7. When you are required to provide information

You are not generally required to provide personal information simply to browse our public website.

However, we may need certain information to:

• provide a requested resource;
• create an account;
• fulfil an order;
• process a payment;
• provide a course or workshop;
• respond to an enquiry;
• meet a legal requirement.

If you do not provide information that is reasonably necessary, we may be unable to provide the relevant product, resource or service.

8. Email marketing

We may send marketing emails where:

• you have actively agreed to receive them; or
• another lawful electronic-marketing route applies.

We may use a double opt-in process. This means you may be asked to confirm your email address before being added to a marketing sequence.

Every marketing email will include an unsubscribe option.

You can also unsubscribe by contacting:

[email protected]

Unsubscribing from marketing will not prevent us from sending necessary service communications, including:

• order confirmations;
• account messages;
• course-access information;
• security notices;
• booking information;
• responses to enquiries;
• legally required communications.

We may retain a minimal suppression record after you unsubscribe. This helps ensure that we respect your decision and do not accidentally add you back to marketing.

You have an absolute right to object to the use of your personal information for direct marketing.

9. Tagging, segmentation and profiling

Kajabi and related systems allow us to apply tags and organise contacts according to their interactions.

A tag may indicate:

• the form submitted;
• the resource requested;
• a stated area of interest;
• a course purchased;
• an event attended;
• a source such as a website or podcast;
• a stage in a customer journey.

We use this information to:

• deliver the correct resource;
• organise contacts;
• avoid irrelevant communications;
• send appropriate follow-up material;
• understand which resources are useful.

We do not use this basic segmentation to make decisions that produce legal or similarly significant effects.

We do not use a content-interest tag as proof of a medical or psychological diagnosis.

You may object to profiling that is connected with direct marketing at any time.

10. Automated decision-making

We do not normally make decisions about you using solely automated processing where the decision would produce a legal or similarly significant effect.

Automated systems may perform routine tasks, such as:

• sending a requested email;
• applying a tag;
• granting course access;
• scheduling a follow-up email;
• recording completion of a form.

These routine automations do not determine a diagnosis, clinical treatment, employment outcome, legal entitlement or similarly significant matter.

11. Cookies and similar technologies

Our websites and online platforms may use cookies, pixels and similar technologies.

11.1 Strictly necessary technologies

These may be required for:

• website security;
• login;
• account functions;
• checkout;
• remembering privacy choices;
• page operation;
• fraud prevention.

These technologies may be used where they are essential to provide a requested service.

11.2 Preference technologies

These may remember settings or choices that improve the user experience.

11.3 Analytics technologies

These may help us understand:

• which pages are visited;
• how visitors move through the website;
• which resources are downloaded;
• whether technical problems occur;
• how website performance can be improved.

11.4 Marketing technologies

Where enabled, these may help us:

• understand campaign performance;
• measure advertising;
• avoid showing irrelevant advertisements;
• understand whether a visitor completed a particular action.

Where consent is legally required, non-essential cookies or similar technologies will not be used before valid consent has been obtained.

Our cookie mechanism should allow users to reject non-essential technologies as easily as accepting them.

You can alter your cookie choices through the website’s cookie settings or through your browser. Blocking some technologies may affect website functionality.

Further information may be provided in a separate Cookie Policy.

12. Who we share personal information with

We do not sell or rent personal information.

We may share information with carefully selected providers where it is reasonably necessary to operate our organisation.

12.1 Kajabi

Kajabi provides website, landing-page, form, account, course, email-marketing and customer-management services.

Kajabi may process:

• account information;
• contact information;
• form submissions;
• course information;
• purchase information;
• email-engagement information;
• technical information.

12.2 Payment providers

Payment providers may process:

• payment-card information;
• billing information;
• transaction information;
• fraud-prevention information;
• refund and dispute information.

Payment providers may act as our processors or as independent data controllers for parts of their activity.

12.3 Domain, hosting and technology providers

These may include providers of:

• domain registration;
• DNS services;
• web hosting;
• email hosting;
• cloud storage;
• data backup;
• file hosting;
• content delivery;
• IT support;
• cyber security.

12.4 Communication and event providers

Where used, these may include providers of:

• video meetings;
• webinars;
• appointment scheduling;
• online forms;
• surveys;
• event ticketing;
• podcast recording;
• customer support.

If a workshop, webinar, call or event will be recorded, we will provide appropriate notice.

We will not normally record a private consultation or coaching session without prior agreement.

12.5 Professional advisers

We may share relevant information with:

• accountants;
• auditors;
• insurers;
• solicitors;
• data-protection advisers;
• consultants;
• debt-recovery providers;
• dispute-resolution services.

12.6 Authorities and legal recipients

We may disclose information where reasonably necessary to:

• comply with a legal obligation;
• respond to a lawful request;
• cooperate with a regulator;
• prevent or investigate fraud;
• protect someone’s vital interests;
• establish, exercise or defend legal claims;
• protect our rights or the rights of another person.

12.7 Business transfers

If our organisation, business or assets are sold, merged, reorganised or transferred, relevant personal information may be disclosed to advisers and potential or actual purchasers.

Any such disclosure will be subject to appropriate confidentiality and data-protection safeguards.

13. International transfers

Some of our technology and service providers may process personal information outside the United Kingdom.

Where a restricted international transfer takes place, we will use an appropriate legal mechanism, which may include:

• a country covered by UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission’s Standard Contractual Clauses;
• another safeguard permitted by UK data-protection law;
• a limited legal exception where applicable.

Where required, we will assess the transfer and consider whether supplementary technical or contractual protections are appropriate.

14. How long we keep personal information

We keep personal information only for as long as reasonably required for the purpose for which it was collected.

We consider:

• the nature of the information;
• the purpose for which it is used;
• the duration of the customer or subscriber relationship;
• legal and accounting requirements;
• potential complaints or disputes;
• security requirements;
• whether the information can be anonymised.

Our normal approach is as follows.

Marketing contacts

We normally retain marketing contact details for as long as you remain subscribed and there is a continuing reason to communicate with you.

We periodically review inactive records and delete, suppress or anonymise information that is no longer needed.

Unsubscribe and suppression records

We may retain a minimal suppression record for as long as reasonably necessary to ensure that your marketing objection continues to be respected.

Free-resource requests

We normally retain a record of the resource requested while you remain subscribed or while it is reasonably necessary to provide and support that resource.

General enquiries

General enquiry records are normally retained for up to 24 months after the last meaningful communication, unless there is a reason to retain them for longer.

Customer and purchase records

Customer, order, contract and purchase information is normally retained for up to six years following the end of the relevant financial year or business relationship, where this is necessary for accounting, tax, contractual or legal purposes.

Course information

Course-enrolment and progress information may be retained while access remains active and for a reasonable period afterwards.

Workshop and event records

Workshop and event records are normally retained for up to 24 months after the event unless a longer period is needed for financial, contractual, safeguarding or legal reasons.

Support records

Customer-support records are normally retained for up to 24 months after the issue is resolved, unless they form part of a contract, complaint or dispute.

Testimonials and permissions

Testimonial material and associated permissions may be retained while the testimonial remains in use and for a reasonable period afterwards so that we can evidence the permission granted.

Technical and security logs

Technical and security logs are normally retained for up to 12 months unless they are required for longer to investigate an incident or protect legal rights.

Recordings

Recordings are retained for the period explained before the recording takes place.

Clinical information

Clinical information is subject to separate professional, legal, insurance and clinical-record retention requirements described in the applicable clinical privacy notice.

We may retain information for longer where:

• a complaint is ongoing;
• a legal claim is anticipated or ongoing;
• an insurer requires it;
• a regulator requires it;
• a safeguarding concern exists;
• fraud or security concerns exist;
• the law requires longer retention.

When information is no longer needed, we will delete it, securely destroy it or anonymise it.

15. Security

We use reasonable technical and organisational measures designed to protect personal information against:

• loss;
• misuse;
• unauthorised access;
• unauthorised alteration;
• accidental disclosure;
• destruction.

Measures may include:

• access controls;
• passwords;
• multifactor authentication;
• secure website connections;
• reputable third-party platforms;
• confidentiality requirements;
• backups;
• software updates;
• restricted administrative access;
• appropriate processor contracts.

No method of internet transmission or electronic storage is completely secure.

You should:

• use a strong and unique account password;
• avoid sharing login details;
• avoid sending highly sensitive information through ordinary email;
• avoid placing confidential information in public community areas;
• tell us promptly if you suspect unauthorised account access.

If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where legally required.

16. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information;
• ask us to restrict how personal information is used;
• object to processing based on legitimate interests;
• object to direct marketing;
• request transfer of information you supplied in certain circumstances;
• withdraw consent where processing relies on consent;
• ask for information about international-transfer safeguards;
• complain about our use of your information.

These rights are not absolute. Legal conditions and exemptions may apply.

To exercise a right, contact:

[email protected]

We may need to verify your identity before providing, correcting or deleting information.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

17. Children and young people

Our general website, email list, books, downloadable resources and adult education services are primarily intended for people aged 18 or over unless a particular page or service states otherwise.

We do not knowingly use our general marketing services to collect personal information directly from children.

If a service is offered to someone under 18, we will provide age-appropriate privacy information and seek parental or guardian involvement where legally, professionally or clinically appropriate.

If you believe that a child has submitted personal information inappropriately, contact:

[email protected]

18. Third-party websites

Our websites, emails and resources may contain links to:

• retailers;
• social-media platforms;
• review websites;
• payment providers;
• booking services;
• external resources;
• other third-party websites.

Those organisations control their own privacy practices.

We are not responsible for the content, security or privacy practices of an external website. You should review the third party’s privacy information before providing personal data.

19. Social media

If you interact with us through a social-media platform, both we and the platform may process information relating to that interaction.

Information posted publicly on social media may be visible to other users.

Please avoid posting confidential clinical or highly sensitive information in public comments or messages.

20. Contacting us

Questions, requests or complaints about this Privacy Policy or our use of personal information should be sent to:

East Anglian Psychologists Ltd
46–54 High Street
Ingatestone
Essex
CM4 9DW
United Kingdom

Email: [email protected]

We will take reasonable steps to investigate and respond to your concern.

21. Complaints to the Information Commissioner’s Office

You have the right to complain to the Information Commissioner’s Office, which is the United Kingdom’s data-protection regulator.

The Information Commissioner’s Office can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern before you contact the regulator, although you are not required to contact us first.

22. Changes to this Privacy Policy

We may update this Privacy Policy when:

• our services change;
• we introduce a new provider or technology;
• applicable law changes;
• our security practices change;
• our retention practices change;
• we introduce new products or processing activities.

The latest version will be published on our website with its updated date.

Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected individuals.