Privacy Notice
What you write in My Place to Land is yours. Here is exactly what we hold, why we hold it, and what Teri can and cannot see.
This notice was last updated on 21 October 2026. A Place to Land is open to adults aged 18 and over who live in the United Kingdom. It is operated from the United Kingdom.
Before the legal language, the short version.
What you write in My Place to Land is yours. Teri cannot read it. Not by opening a screen, not by running a query, not by asking someone to fetch it. The only thing she ever sees is writing you send to Teri, which you have deliberately chosen to share with her.
A real person reads what you share, and every response you receive is personally curated by Teri. Nothing is sent to you automatically. Teri does sometimes use a private writing tool to help her think through a difficult reply before she writes it herself, and section 8 explains exactly how that works, because you should know it before you write rather than after.
We do not sell anything to anyone. We do not track you around the internet. Nothing you write is diagnosed or profiled, and no model is trained on it. Writing you send to Teri may be given an internal flag so that anything urgent reaches the top of her list. Section 8 explains exactly what that flag is and what it is not.
On the public pages, before you sign in, we count how the site is used, in the way any shop counts who comes through the door. The moment you sign in, counting stops. There is no other analytics on the site. The counting identifier stays in your browser until you clear it, and nothing counted before you joined is ever attached to your name in our records. Section 4.7 explains it, and the [Cookie Policy] explains it in full.
There are two limits to all this, and we would rather tell you plainly than bury them. If something you share makes us seriously concerned that a child or an adult at risk is in danger, we may have to pass that concern on; section 12 explains how. And when you close your profile, you choose to keep your writing for five years or remove it straight away; section 13 explains both choices.
1. Who we are and how to reach us
Teri Potter, trading as The True Self, is the data controller for the personal information described in this notice. That means she decides what is collected and why, and she is accountable for it.
| Controller | Teri Potter, trading as The True Self |
| Legal form | Sole trader |
| Address for correspondence | Teri Potter t/a The True Self, c/o TWP Accounting, The Old Rectory, Church Street, Weybridge, Surrey KT13 8DE |
| Email about your information | privacy@thetrueself.me |
| General enquiries | hello@thetrueself.me |
| ICO registration | ZC211707 |
| Professional membership | Member of the International Practitioners of Holistic Medicine (IPHM), membership IPHMNM14755 |
| Data protection contact | Teri Potter |
We have assessed whether we need to appoint a Data Protection Officer and concluded that we do not, because of the small scale of what we do. We keep that assessment written down and we will look at it again if the space grows. Teri Potter is personally accountable for data protection here, and she is the person who will answer if you write to us.
Because we handle special category data, we keep an Appropriate Policy Document as required by Schedule 1 of the Data Protection Act 2018, and we have carried out a Data Protection Impact Assessment for this space. You can ask to see either.
Our processor. The space is built and maintained for us by The KBI Group, who act as our data processor under a written contract. They keep the software running and secure. They do not use anything you write for their own purposes, and they are bound by the same confidentiality this notice describes.
2. What this notice covers
This notice covers:
- the public website at thetrueself.me (our older address, thetrueself.app, redirects here)
- A Place to Land, the private space you sign into at thetrueself.me/space (placetoland.me leads to the same place)
- your account and your membership
- the waiting list
- emails we send you about your membership
- messages you send us by email or through the contact form
It does not cover other websites we link to. If you follow a link to a resource, an organisation or a crisis service, that organisation has its own privacy notice and we have no control over it.
S.A.F.E. Practice™ at safepractice.me is not yet open. When it opens it will have its own notice, and this one will be updated to point to it.
3. Who this space is for
A Place to Land is for adults aged 18 or over. It is operated from the United Kingdom and is open only to members who live in the United Kingdom.
Young people do not have accounts in A Place to Land. Nothing in this space collects a child's contact details, login or device information. Nobody under 18 can hold an account anywhere in The True Self at present, and any future service for under 18s would require a separate safeguarding, legal, privacy and design review first.
The counting on the public pages described in section 4.7 does not know or ask who is visiting, identifies nobody of any age, and is never joined to an account.
4. The information we hold
4.1 Information you give us when you join
| What | Why we have it |
|---|---|
| Your first name | So the space can greet you as a person rather than an account |
| Your email address | To sign you in, to reach you about your membership, and to reset your password |
| Your password | Stored only as a one way hash. Nobody here can read it, including us |
| The date you accepted these terms and this notice, and which version | To show what you agreed to and when |
| Your request for your block to begin straight away, and the versions of the terms and this notice in force when you paid | To show what you agreed to with each payment |
| Your confirmation that you are 18 or over and that you live in the UK, each with the date given | To show that you met the conditions for opening an account, and so that Teri knows which emergency and crisis services apply to you |
We do not ask for your surname, your address, your date of birth, or the names of anyone you may write about at this point. We do not need them.
Once you are inside the space you can, if you choose, give your full name, a contact email address and how you would like to be referred to, so that Teri can reach you and write to you as you would want. None of it is needed to use A Place to Land, and you can change it at any time.
If you join the waiting list we hold your name, email address and the date you agreed, and we email you when a place opens. If you leave the list your details are deleted the next day. A lapsed or declined offer is deleted 12 months after the offer.
4.2 Information about your membership
| What | Why we have it |
|---|---|
| Which block you are in, when it started, when it ends, whether it is active, paused or finished | To give you what you have paid for and to answer you if you ask |
| Your Stripe customer and payment identifiers | To link your account to your payment record |
| Whether you joined using a code, and which kind | To make codes work and to stop them being reused beyond their limit |
Support is bought in blocks: an introductory week, available once, one month, or three months. Prices are shown on the site at the time of booking. Founding prices may be offered for a limited time, and anyone who joins at a founding price keeps it for later blocks. To do this we keep a record of whether you joined at a founding price. Nothing renews automatically.
Stripe asks for your billing address on its own payment page and emails you a receipt. We send Stripe your account reference, the country and region you gave us and the versions of the terms you agreed to, so the payment record matches your account. If you are refunded we keep a record of the refund.
We never see or store your card details. Payment is taken by Stripe, who are regulated for exactly this. Card numbers go from you to Stripe and never touch our systems. We can see that a payment succeeded or failed, the amount, and the last four digits Stripe shows us. Nothing more.
Notices. Teri may put a notice at the top of your dashboard, for example about a technical problem or if she is unavailable. A notice is either for all members or addressed to you alone, and no other member can see a notice addressed to you. We keep the notice, who it was for and whether you dismissed it, for as long as your account exists.
4.3 What you write, and what you say
This is the part that matters most, so it gets its own detail.
Your entries. Everything you write in My Place to Land. Stored as text, with the date you wrote it and the date you last changed it.
Your voice notes. If you leave a voice note, the recording is saved. A voice note is treated exactly like writing: private to you unless and until you send it to Teri.
- A private voice note is turned into text only if you tap "Show the words". Only then is the recording sent to the transcription service named in section 10. If you never tap it, a private recording stays as audio only and never leaves this platform.
- A voice note you send to Teri is turned into text when you send it, so that she can read it.
You can correct the words. The recording and its words are stored only in this platform. Section 8 names who does the turning into text.
Writing you send to Teri. When you choose to share a piece of writing or a voice note with Teri, the space takes a copy at that moment and stores it as writing you have sent to Teri. The copy is separate from the original. If you later edit or delete the original in My Place to Land, the copy you sent does not change, because Teri may already have read it and replied to it.
Teri's replies. What she writes or records back, and when.
Safeguarding records. If Teri decides that something you shared is a safeguarding concern, she records it in iKnow Safeguarding, the secure system she uses as her formal safeguarding record. The record holds the relevant part of what you shared, her decision, any advice she sought, the action taken and any follow-up. Section 12 explains this.
4.4 Special category data, and why we are careful
Under UK GDPR, information about a person's physical or mental health is "special category" data and gets stronger protection.
We cannot know in advance what you will write. Realistically, someone writing honestly about a hard season may write about their own mental health or that of someone close to them, a diagnosis, a hospital appointment, medication, self harm, or a relationship in trouble. Any of that would be special category data. So would your voice, if it were used to identify you.
So we treat everything you write or record in this space as special category data by default, whether or not it turns out to be. That is why we ask for your explicit consent before you write anything, and why the security described in section 10 applies to every word.
4.5 Information about other people
When you write about your partner, your family, your children if you have them, a friend or anyone else, you are writing personal information about someone who has not given us anything and may not know this space exists.
We handle that carefully:
- We do not build any record about the people you write about. There is no profile of anyone you write about anywhere in this system. Their words exist only inside yours.
- We do not ask for their names and we do not index or search on them.
- We do not contact them, ever, unless section 12 applies.
- Their information is kept and deleted on exactly the same terms as yours.
Please write what you need to write. We mention this only so you know what happens to it.
4.6 Technical information
| What | Why we have it |
|---|---|
| Sign in events, and the date your session last refreshed | To keep your account secure and to spot anything unusual. |
| IP addresses recorded in the hosting platform's own sign in and security logs | To investigate abuse or a security incident |
| The date and time you last opened My Place to Land | So Teri knows whether you have been in recently |
| Error and performance logs from the hosting platform | To find and fix faults |
Nothing is counted inside the private space. Nobody is watching how long you spent on a screen, which pages you opened or how long you sat before writing. The only thing recorded by the member space is when you last came in. Counting stops while you are signed in, on every page.
4.7 If you only visit the public website
On the public pages we measure how the site is being used, so that we can make it better. This is the one place in the whole of The True Self where anything about usage is counted, and we would rather describe it plainly than leave you to guess. The security and technical records in section 4.6 are a different thing, kept for a different reason, and they are not measurement.
What is counted
| What | Why |
|---|---|
| Which pages are viewed, and in what order | To see which pages help people understand what this is, and which ones lose them |
| Where a visit came from, for example a search, a link, a newsletter or a social post | To know where the people who need this are finding it |
What is not counted, and never will be on our watch
- Nothing follows you to any other website. There is no cross site tracking, no advertising network, no Meta pixel and no Google Ads tag.
- Nothing records your screen. No session replay, no mouse tracking, no keystroke capture.
- Nothing builds a picture of you. No profile, no scoring, no inference about who you are or what you might need.
- Nothing about the measurement is ever used to make a decision about an individual, and nothing triggers an email, an offer or a follow up. If you get as far as the payment page and change your mind, nobody will chase you. When you begin a payment we keep a record of it against your account, and if it is not completed it is marked as expired after 24 hours. We use those records only to show a simple total of payments begun and not completed. Nobody is chased.
How it works, and how to say no. Our counts are kept in our own database, and there is no other analytics on the site. The individual rows are held for 13 months and then deleted. We rely on the statistical purposes exception in Schedule A1 paragraph 5 of PECR, which permits this on the basis of clear information and a simple way to object, rather than a consent banner. You can switch counting off on this device with the switch on the Cookie Policy page, or by turning on Global Privacy Control in your browser. The [Cookie Policy] sets out the conditions in full.
Where it stops. Counting happens on the public pages only, and only when you are not signed in. It never happens inside your space, and nothing counted is ever joined to your account.
If you use the contact form or email us, we hold what you send and our reply.
5. Where the information comes from
Almost all of it comes directly from you. The rest comes from Stripe, which tells us whether a payment succeeded and when, and from our own systems, which record technical and security events.
We do not buy data. We do not enrich your record from other sources. We do not use data brokers.
6. Why we are allowed to hold it
UK GDPR requires a lawful basis for ordinary personal data, and a separate additional condition for special category data. Here is ours, in full.
| What | Lawful basis (Article 6) | Additional condition for special category data (Article 9) |
|---|---|---|
| Your account details and membership record | Contract, Article 6(1)(b). We cannot give you the space without them | Not applicable |
| Taking payment | Contract, Article 6(1)(b) | Not applicable |
| Your entries, your voice notes, writing you send to Teri and Teri's replies, while your profile is open | Contract, Article 6(1)(b) | Explicit consent, Article 9(2)(a) |
| Holding your record after your profile closes (section 13) | Legitimate interests, Article 6(1)(f): being able to answer a complaint or defend a claim years later, meeting the record keeping conditions of our professional indemnity insurance, and giving you your history back if you return. We have weighed this against your privacy, which is why what is kept is limited and time limited | Legal claims, Article 9(2)(f) |
| Counting how the public pages are used, before you sign in (section 4.7) | Legitimate interests, Article 6(1)(f): understanding whether the public site explains this well enough for the people who need it. We have weighed this against your privacy, which is why the output is aggregate, nothing follows you off the site, nothing is joined to an account, and you can object with the switch on the Cookie Policy page or through Global Privacy Control. Under PECR this runs on the statistical purposes exception in Schedule A1 paragraph 5, not consent | Not applicable. Nothing measured here is special category data, and none of it is joined to an account |
| Keeping the space secure, preventing abuse, keeping technical records | Legitimate interests, Article 6(1)(f): running a service people can trust. We have weighed this against your privacy and consider the impact minimal | Not applicable |
| Keeping financial records | Legal obligation, Article 6(1)(c) (tax law) | Not applicable |
| Recording a safeguarding concern, and acting on a serious one | Recognised legitimate interest, Article 6(1)(ea): safeguarding vulnerable individuals, and disclosure to a public body carrying out a public task. Where someone's life is at risk and they cannot give consent, vital interests, Article 6(1)(d) | Substantial public interest, Article 9(2)(g), read with the safeguarding condition at Schedule 1 Part 2 paragraph 18 of the Data Protection Act 2018. Where a person is physically or legally incapable of consenting, Article 9(2)(c) |
| Complying with the specific reporting duty on everyone under section 38B of the Terrorism Act 2000 | Legal obligation, Article 6(1)(c) | Article 9(2)(g) as above |
| Defending or bringing a legal claim | Legitimate interests, Article 6(1)(f) | Article 9(2)(f), legal claims |
On consent. You give explicit consent when you tick the box about sensitive information on the join page, which is separate from the box confirming you have read this notice and the terms. That consent is what allows us to hold what you write while your profile is open, and you can withdraw it at any time. Section 11 explains what happens when you do.
Being straight with you about what withdrawal does and does not do. Withdrawing your consent stops us using your writing to run your membership, and your membership will end. It does not by itself empty the archive described in section 13, because the archive rests on a different footing, which is our need to be able to answer a complaint or defend a claim. You can still ask us to delete, and section 11 explains what we will and will not be able to do. We would rather set that out here than let you discover it at the point of leaving.
7. What we do with it
- Give you a private place to write, and keep what you write safe
- Let you send writing to Teri when you choose to, and deliver her reply back to you
- Turn a voice note into text
- Take payment for your membership
- Send you the transactional emails listed below
- Give you the resources Teri has made available to you
- Flag writing you have sent to Teri that may need her attention sooner, as section 8 explains
- Keep the space secure and working
- Meet our legal, professional and insurance obligations
That is the whole list. We do not do anything else with it.
7.1 The emails we send
We send only what is needed to run your membership: welcoming you once payment is complete, resetting your password, and telling you two days and one day before a block ends. If Teri has to pause the service, because she is ill, on a planned break or dealing with something unexpected, we email members who have a block running when the pause begins and again when she is back. Those emails give the dates and say how your block is affected, and nothing else. Stripe sends its own payment receipt. Teri receives an email when your block is ending so that she can write your closing reflection, and an email giving only your first name and a category if a triage flag described in section 8 is red. The closing reflection is a message from Teri, sent to you in the space at the end of a block.
We never put your words, or Teri's reply, in an email. The notification says something is waiting. It does not say what. Email is not a private enough place for either. Messages sent through the contact form are different: they are emailed to Teri in full.
We do not send marketing. There is no newsletter, no offers, no re-engagement campaign. If that ever changes we will ask you first, separately, and you will be free to say no without it affecting anything.
7.2 What we never do
- We never sell, rent or share your information with anyone for their own purposes
- We never use anything you write to advertise, promote or illustrate this space, even anonymised, unless you have separately and specifically agreed in writing
- We never send you a reply automatically. There is no chatbot here, and nothing is delivered to you that Teri has not read, shaped and approved
- No machine ever diagnoses you, profiles you or makes a decision about you. Writing you send to Teri may be given an internal triage flag, described in section 8, so that she reads anything urgent first. That flag is a prompt to her, never a judgement about you. The only safeguarding judgement ever made about what you share is the one described in section 12, and that is made by Teri, deliberately, and written down
- We never make an automated decision about you that has a legal or similarly significant effect
- We never train any model on your writing or your voice, and every supplier we use is contractually forbidden from doing so
One honest exception, and it is nowhere near your writing. Stripe runs automated fraud checks on card payments, which is normal and is how card fraud is stopped. That check looks at the payment and the device it came from. It never sees anything you have written, and it cannot. If a payment is ever declined by that check you can ask us to look at it and we will put it in front of a person. Stripe explains its checks at stripe.com/privacy.
8. Where technology sits, and where it does not
We want to be exact about this, because it is the question people most want answered and the one most often fudged.
Every reply you receive is personally curated by Teri. She reads what you send to her herself, takes time to understand it, shapes the answer with care, and approves it before it is sent. Nothing reaches you that she has not meant.
She may use a private writing assistant to help her think. When she is working out how to answer something hard, she may put what you shared into a writing tool and ask it how it would respond, in the same way another practitioner might talk something through with a colleague, or write three drafts before finding the right one. When the tool is asked for help, it is given the writing you have sent to Teri in that conversation, her earlier replies there, relevant writing you have sent in your other conversations, and the country and region you live in, so that any urgent help it suggests fits where you are. The draft appears in Teri's own reply box; she rewrites it or discards it, and nothing is sent until she chooses to send it. At the end of a block Teri may also ask it to help her draft your closing reflection from writing you sent her during that block. She writes and approves the reflection herself.
What that means for your information:
- The tool is engaged only with writing you send to Teri, which is something you have already chosen to share. It never touches your private entries, because nothing can.
- It is used under Lovable's data processing agreement, which forbids Lovable from using your words to train, retrain or fine-tune any AI model. Lovable's own terms say its agreements with the AI model providers restrict how those providers may use what is sent to them.
- The supplier is listed in section 10 like every other supplier, so you can see who it is.
- Teri is accountable for every word that reaches you, whatever helped her get there.
Elsewhere in the space, technology is used for one ordinary thing: turning voice notes into text. Writing prompts are written by Teri. Most are the same for everybody, and she may sometimes set one just for you. A private voice note is only turned into text if you choose to tap "Show the words", and that is the one point at which something you have kept private leaves our systems, because you asked it to. A voice note you send to Teri is turned into text when you send it. Transcription does not produce a reply to you and does not read your entries for any other purpose.
Triage flags, to help Teri decide what to read first. A Place to Land is not monitored as your writing arrives. Teri reads and replies on Mondays, Wednesdays and Fridays, between 10am and 5pm UK time, and nothing checks your writing outside those times. When Teri asks the writing tool for help with a reply, the tool also gives the writing you sent her an internal flag: red, amber or green. Separately, a simple word check, with no AI involved, highlights certain words such as "not safe" or "hospital". Both exist for one reason: when Teri is working, if something you have sent suggests that someone may be in danger, she reads it first and does not miss it. If you or someone else is not safe, please do not wait for Teri: section 12 and the urgent help page say who to contact. To be clear about what a flag is not:
- It is not a clinical risk assessment, and it is not a safeguarding decision. Whether something is a safeguarding concern is decided by Teri alone, as section 12 describes.
- It makes no decision about you and never contacts anyone outside the space. If a flag is amber or red, a reminder to review it is added to Teri's own task list, and if it is red Teri is also emailed straight away, with your first name and the category only, so that she reads it first.
- You never see it, and it is never mentioned in a reply.
- It only ever looks at writing you have chosen to send to Teri. It cannot see your private writing.
- The flag, its category, a one line reason and whether a child appears to be involved are kept as part of the record of what you sent and Teri's replies, for the same period, as section 13 describes.
What is never true here. Nothing you write is analysed for mood or sentiment. Nothing is summarised behind your back. Nothing is used to build a picture of you. No machine decides anything about you.
When Teri reads what you have sent, she does think about whether anyone is in danger, because section 12 obliges her to. That is a person exercising judgement about something you chose to show her, and it is the only safeguarding judgement made here.
The writing assistant and voice transcription are OpenAI models reached through Lovable's AI gateway, and section 10 names them. What we can tell you about them:
- Lovable is our sub-processor under its data processing agreement, which forbids it from training any model on your words and covers transfers outside the UK with the UK's approved contract terms.
- Lovable passes each request to one of the AI providers it lists publicly for its gateway, in the United States or the European Union.
- Your writing and voice notes are stored only in this platform. The AI provider receives a request, returns the result, and is not given anything else.
- Lovable does not publish how long each AI provider may keep a request after returning the result, for example to check for misuse. We have asked Lovable for this in writing and will update this notice when we have the answer.
9. The privacy wall
This is a promise about how the software is built, not just about how we behave.
- Your entries can be read only by an account signed in as you. This is enforced at the database level by row level security, so the rule holds no matter which screen, query or route is used.
- There is no policy of any kind that grants Teri's account access to your entries. Not a read policy, not a view, not a function that bypasses the rules, not an administrative override in her side of the space. The build was tested to prove that Teri's own account, querying the entries table directly, gets nothing back while entries exist.
- The wall holds after you close, too. When your profile closes the same database rules keep applying, so your private writing stays unreadable to her afterwards exactly as it was while you were here. What she can reach is only what she could already see while you were here: the writing you chose to send to her, her own replies, and any safeguarding record.
- She sees writing you send to Teri only once you have sent it.
- You can change the words of something you have sent until Teri replies to it. After that, neither of you can edit it, and it cannot be deleted from your side.
The one thing we will not pretend. Any system that stores information has somebody who can reach the database underneath it, or the software could never be repaired. That is true here and it is true everywhere, and a policy that claimed otherwise would be lying to you. So, plainly: our engineers at The KBI Group hold infrastructure level access to the database. They use it only to fix a fault or answer a security question, only when there is no other way, under a written contract that forbids anything else. Database reads made this way are not recorded line by line inside the database itself, so The KBI Group keeps its own written note of the date, the reason and what was looked at, each time it has to look at member content. They have no interest in your writing and no reason to open it. What we can promise absolutely is that Teri has no such access, and no route to it, which is the promise that actually matters when you sit down to write.
If anyone ever asks for this to be changed so that private entries can be read from Teri's side of the space, the answer is no, and the instruction to refuse is written into the build itself.
10. Who else is involved, and how your information is protected
We use a small number of carefully chosen suppliers. Most of them are processors, which means they act only on our documented instructions and cannot use your information for their own ends, and each of those is bound by a written data processing agreement. Stripe is different, and is a controller in its own right for the payment data it holds. The table says which is which.
| Supplier | What they do | Where the data sits | Notes |
|---|---|---|---|
| Supabase | Hosts the database, the sign in system and the file storage | Amazon Web Services, Paris (eu-west-3), in the European Economic Area | Everything you write lives here, encrypted |
| Stripe Payments UK, Ltd. and Stripe Payments Europe, Limited | Takes payment | United Kingdom and Ireland, with processing and support in the United States | Stripe is a controller in its own right for the payment data it holds, and is authorised by the Financial Conduct Authority. Its own privacy policy applies to that, and it is at stripe.com/privacy |
| Lovable (Lovable Labs Incorporated) | Hosts the application, serves every page, sends the transactional emails and carries the AI calls | United States and Europe | Our sub-processor under Lovable's data processing agreement, with the UK's approved contract terms for transfers. Receives your email address and the plain text of a notification. Never your writing, except where an AI call is made as described below. Lovable's own sub-processors are listed at trust.lovable.dev |
| Our own visit counter | Counts signed-out public page views as section 4.7 describes | Our database | Visitor identifier, page, referring domain and time; deleted after 13 months |
| OpenAI models reached through Lovable's AI gateway: GPT-5.5 for drafting help and triage flags, and GPT-4o Transcribe for turning voice notes into text | Helps Teri draft a reply, as section 8 describes, and turns a voice recording into text | United States or the European Union, depending on which of its listed AI providers Lovable routes the request to | Sees writing you have sent to Teri when she asks for a draft, and gives it the internal triage flag described in section 8. Sees a voice recording you send to Teri, and a private recording only if you tap "Show the words". Not used to train models, under Lovable's data processing agreement. Section 8 explains what we are still asking Lovable about retention |
| Anthropic, reached directly | Helps Teri draft her own documents and materials in her admin tools | United States | Never receives anything you write. It only sees material Teri writes or uploads herself |
| Google Gemini models reached through Lovable's AI gateway | Reads files Teri uploads to her own Learning Hub, and makes images for her | United States, through Google Cloud Vertex AI, as listed by Lovable | Never receives anything you write |
| Cloudflare | The network in front of the site | Global network, with traffic served from the nearest location | Traffic passes through it and its encryption is terminated there. It does not store anything you write |
| The KBI Group | Builds and maintains the space | United Kingdom | Our processor under a written data processing agreement. Access to production data only where strictly necessary to fix a fault, with a written note kept of each time member content is looked at. If Teri is unwell and cannot log in, The KBI Group, or a backup person Teri has chosen, can switch on a notice and pause the service for her, using an account that cannot see anything members write |
| iKnow Safeguarding, provided by Edit Websites Ltd and endorsed by Thirtyone:eight, the UK safeguarding charity | Holds Teri's formal safeguarding record, as section 12 describes | Confirmed with the provider before any record is made | Used only when Teri decides that something is a safeguarding concern, and only the relevant part of what you shared is recorded, under Teri's agreement with the provider. A Place to Land has no connection to it: nothing is sent there automatically, and Teri records each concern herself |
We do not use Meta pixels, advertising networks, session recording tools, chat widgets or third party font services on any part of this site. We do not use Google Analytics.
If that ever changes. We have no advertising or retargeting on this site today. If we ever introduce any, it would need your consent rather than an opt out, so you would see a proper choice before anything was set, this notice and the [Cookie Policy] would be reissued first, and saying no would be exactly as easy as saying yes.
Others we may have to tell. We may disclose information where the law requires it, for example to a court, the police, a local authority or a regulator, or where section 12 applies. We may also have to disclose it to our insurer or our legal advisers if a claim or complaint is made. We would tell you if we were allowed to.
If the business ever changes hands, your information could transfer to whoever takes it on. If that ever happens we will tell you before it does, and you will be able to close your profile first, and ask us for a copy of your writing.
Transfers outside the UK. Where a supplier processes information outside the UK, we rely on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or on UK adequacy regulations where they apply. Transfers to the European Economic Area rely on the UK's adequacy regulations for the EEA. We keep copies of these arrangements and you can ask to see the relevant one.
Security measures.
- Encrypted in transit (TLS) and at rest
- Row level security on every table, so access rules are enforced by the database rather than by the interface
- Passwords of at least 12 characters, stored only as one way hashes
- Resources and voice recordings are held in a private store and served only through links that expire
- Closed profiles are marked as closed; Teri can still read only writing already shared with her, never private entries
- Administrative access to the space is held by Teri alone
- Access limited to the smallest possible number of people, which today means Teri and, for maintenance, The KBI Group
Breaches. If something goes wrong and there is a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware, and we will tell you directly, plainly, and without waiting to be asked, if the risk to you is high.
11. Your rights
You have the following rights over your information. All of them are free to use, and using one will never affect how you are treated here.
| Right | What it means here |
|---|---|
| Access | Ask for a copy of everything we hold about you, including anything in the archive. Much of it is already in front of you in the space. Ask us and we will send you a copy in a readable file within a month |
| Rectification | Ask us to correct anything inaccurate, such as your name or email |
| Erasure | Ask us to delete what we hold. See below |
| Restriction | Ask us to stop using your information while a concern is looked into, without deleting it |
| Portability | Get your writing in a readable, machine usable file. Ask us and we will send you a copy in a readable file within a month |
| Objection | Object to anything we do on the basis of legitimate interests, including the archive |
| Withdraw consent | Withdraw your consent to us holding what you have written, at any time |
How to use them. Do it in the space where you can, or write to privacy@thetrueself.me. We will answer within one month. If a request is genuinely complicated we may take up to two further months, and we will tell you within the first month if that happens and why. We will not charge you, and we will not make you justify yourself.
We may need to check you are who you say you are before we act, which usually means replying from the email address on the account. If we have to ask you to confirm who you are, or to tell us more about what you are looking for, the clock pauses until you answer.
Erasure, in practice, said honestly.
- Ask us to delete and we will delete everything we are not obliged to keep. That includes your private entries and unshared voice notes, always, because nothing about them could ever be the subject of a complaint or a claim; Teri has never seen them.
- Where we cannot delete, we will say so and say why. UK GDPR Article 17(3)(e) allows us to keep personal data to the extent it is necessary for the establishment, exercise or defence of legal claims. The writing you sent to Teri, Teri's replies and any safeguarding record are the record of what we did for you, and they are what we would need if you or anyone else ever questioned it. We will keep only what is genuinely necessary, only for as long as section 13 says, and we will tell you exactly what has been kept.
- You can object at any time, and if you do we will look at your particular circumstances rather than applying a policy at you.
- Deletion from the live system happens straight away. Copies held in the hosting platform's daily database backups are kept for about 14 days and then cycle out. They are never restored except to recover from a failure.
- The minimum financial record the law requires us to keep for six years survives everything. That is the fact of a payment and its amount, not anything you wrote.
Withdrawing your consent. You can withdraw your consent at any time, by telling us or by closing your profile. Your membership will end and we will stop using your writing to run it. We will refund the unused part of any period you have paid for. What happens to the writing itself is set out in section 13 and in the paragraphs just above, and we would rather you read that before you join than discover it on the way out.
Your right to complain to us. You have a legal right under section 164A of the Data Protection Act 2018 to complain to us about how we have handled your information, and we have a legal duty to make that easy. Write to privacy@thetrueself.me. We will acknowledge within 5 working days, and in any event well within the 30 days the law allows, look into it properly, and tell you what we have done about it.
Complaining to the regulator. If we cannot put it right, you can complain to the Information Commissioner's Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You can go to them directly at any point. You do not need our permission and you do not have to come to us first.
12. Safeguarding, and the limits of confidentiality
We would rather be honest about this in advance than surprise you with it later. The [Safeguarding Policy] sets it out in full; this is the summary.
Teri holds professional obligations that do not switch off because the writing happens on a screen. In a small number of situations she may have to act on something shared with her, including passing a concern to someone outside this space.
When that might happen. Where what you have shared gives serious concern that:
- a child is suffering, or is at risk of suffering, significant harm
- an adult at risk is being abused or neglected
- you or someone else is at immediate risk of death or serious injury
- there is a risk of serious harm to another person
- the law compels disclosure, for example a court order, or the duty that section 38B of the Terrorism Act 2000 places on everyone
How it would happen.
- She would use judgement, not a rule. Writing honestly about how hard things are, about anger, exhaustion, despair or thoughts you are frightened of, is not in itself a safeguarding concern. It is the reason this space exists.
- Wherever it is safe and possible, she would talk to you first, and tell you what she was going to do and why.
- She would share the minimum necessary, with the appropriate service.
- If she decides that something is a safeguarding concern, she records it in iKnow Safeguarding, her formal safeguarding record: the relevant part of what you shared, her decision, any advice she sought, the action taken and any follow-up, with dates. The internal triage flag described in section 8 only prompts her to read something sooner. It is not the safeguarding record, and it decides nothing.
- A concern can only ever arise from something you chose to share. She cannot see your private entries, so she cannot act on them.
Formal safeguarding records are retained separately from ordinary client records, in accordance with safeguarding guidance and applicable legal and regulatory requirements. Safeguarding records are kept for five years from the date recorded where they concern an adult, and until the child's 25th birthday, or five years, whichever is later, where they concern a child. They are not deleted when you close your profile. They are held separately from everything else, seen only by Teri, and never shared except as described above. We keep them because a safeguarding record that disappears is no use to the person it was meant to protect, and because we may have to account for what we did.
If you are in danger right now, this is not the right place to turn. In the UK, call 999. For urgent health advice call NHS 111. Samaritans are on 116 123, day or night. Shout is a text line, text SHOUT to 85258.
13. How long we keep things, and what happens when you close your profile
13.1 When a block ends
When a block ends, nothing is deleted and nothing changes about who can read what. You can keep writing privately in My Place to Land, free for now, as section 9.1 of the [Terms of Use] explains, and that writing is held under exactly the same rules as before. Teri still cannot read it. What you sent to Teri, her replies and her closing reflections stay where they are, so you can go back to them.
Your account stays open, with everything in it, until you close your profile. The five years described below only begin when you close it.
13.2 The choice you are asked to make when you close your profile
When you close your profile you are asked to choose. Either everything you have written is kept for five years from the day you close and then deleted, or it is erased there and then, which deletes your writing, your voice recordings, your contact details and your sign-in account straight away. Only the minimum payment record that tax law requires is kept, together with a record of the blocks you took and the agreements you accepted, with your name and email address removed.
If you choose to keep it, here is why that option exists:
- Insurance and professional record keeping. Ordinary client records are retained for a minimum of five years in accordance with the requirements of our professional indemnity insurer. Without a record, the cover that protects you as well as Teri does not work as it should.
- Complaints and claims arrive late. Somebody might raise a concern about how they were treated two or four years after they left. If everything has been destroyed, neither of you has anything to point to, and that is worse for you than for us.
- People come back. If you return using the same email address, your history can be returned to you rather than lost, and you do not have to start from nothing or repeat yourself.
13.3 What keeping it means, and what it does not
- Nothing is moved to a different system. It stays exactly where it is, under exactly the same rules.
- Your private writing stays private. Those rules keep Teri out of it after you close exactly as they did while you were here.
- Your profile is marked closed. Teri can still see the writing you sent her in her own member records, for the specific reasons below. Your private writing remains inaccessible to her.
- What she can reach is only what she could already see: the writing you chose to send to Teri, her own replies, and any safeguarding record.
- It is looked at only for a specific reason, which means a complaint, a claim, a safeguarding matter, or your own request to have your history back.
- After five years the daily job deletes your writing, voice recordings, contact details, sign-in account and identifying tasks. It removes your name, email and residence from your profile. Only the minimum payment and refund records, blocks and agreement versions and dates remain, without your name or email.
13.4 You can still ask
Everything in section 11 still applies. If you ask us to delete, we will delete your private entries and unshared voice notes without argument, and we will delete anything else that is not genuinely needed to answer a complaint or defend a claim. Where we keep something, we will tell you what and why. If you would rather nothing at all were kept, say so and we will look at your circumstances properly rather than quoting a policy at you.
13.5 The full retention table
| What | How long | Why |
|---|---|---|
| Your entries and voice notes, while your profile is open, including after a block has ended | For as long as your profile is open | They are yours |
| Your entries and unshared voice notes, after you close | Kept, unreadable by Teri, for 5 years from closing, then deleted | So they are there if you return. Deleted on request at any time |
| Writing you sent to Teri and Teri's replies, after you close | Kept for 5 years from closing, then deleted | Insurance, professional record keeping, and being able to answer a complaint or defend a claim |
| Your account and profile | 5 years from closing if you choose to keep them, then the sign-in account and contact details are deleted and the profile is anonymised; immediate removal does the same straight away | To reconnect your history if you return; only agreement versions and dates remain without name or email |
| Membership and payment records | 6 years from the end of the tax year in which the last payment fell | Required by tax law |
| Safeguarding records about an adult | 5 years from the date recorded | Professional obligation, insurance, and being able to account for what we did |
| Safeguarding records about a child | Until the child's 25th birthday, or 5 years, whichever is later | Ordinary safeguarding practice. A person may need the record of what happened to them long after they have grown up |
| Public site measurement, at individual level | A row for each page view, holding a visitor identifier held in your browser, the page path and the referring domain. Held for 13 months and then deleted | It exists only to become a total. Once it is a total there is no reason to keep the row it came from |
| Public site measurement, as aggregate totals | Kept as long as it is useful, and holds nothing that identifies anybody | Counts of pages and visits, with no person behind them |
| Contact form messages and their copies in task notes | 24 months, then deleted by the daily job | To keep track of a conversation, then gone |
| Email correspondence held outside this site | 24 months, handled separately by Teri | To keep track of a conversation |
| Waiting list | Until you leave, then deleted the next day; lapsed or declined offers 12 months after the offer | To offer you a place |
| Records of consent and the version you accepted | For as long as your account exists; after that, only the versions and dates, with your name and email removed, alongside the payment record | To be able to show what you agreed to |
If your membership is paused, by you or because Teri is unwell, on a planned break or dealing with something unexpected, nothing is deleted, and any days added back to your block are recorded with your membership. My Place to Land and everything in it stays open to you throughout the pause, and nothing you write is sent to Teri unless you choose to send it.
14. Cookies
On the public pages, we count how the site is used, as section 4.7 describes, using an identifier held in your browser's local storage. No advertising, no tracking pixels, no cross site tracking, no third party fonts. You can switch counting off on this device on the Cookie Policy page, or turn on Global Privacy Control in your browser.
Once you sign in, the space keeps your sign in on this device, keeps anything you have written but not yet saved or sent so that it is not lost, and keeps a voice recording on this device while it is being made until it has safely reached us. These stay on the device after you sign out, so on a shared device please send, save or delete them first. Payment happens on Stripe's own page, which sets its own cookies. Counting stops once you are signed in, and there is no other analytics on the site.
The full detail is in the [Cookie Policy].
15. Changes to this notice
If we change this notice we will change the version number and the date at the top, and keep the previous versions available.
If a change materially affects what we do with what you have written, we will tell you by email before it takes effect, and where the law requires it we will ask for your consent again rather than assume it.
16. Getting in touch
Please write to privacy@thetrueself.me, or to Teri Potter t/a The True Self, c/o TWP Accounting, The Old Rectory, Church Street, Weybridge, Surrey KT13 8DE.
A person will read it and a person will answer it.
The True Self · Privacy Notice, for members of A Place to Land · Version 3.6 · 16 October 2026 Related documents: [Terms of Use] · [Cookie Policy] · [Safeguarding Policy]
