Skip to content
Basic Content

Privacy Policy



Who I am – Philip Hesketh t/a Hesketh Mediation.

My website address is:


When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.


If you leave a comment on my site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit my login page, I will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, I will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

My role as data controller

I am defined as a Data Controller for most of my processing purposes. I am registered with the Information Commissioner's Office (ICO) (Registration No. ZA124673)

How long I retain your data

I only keep your personal information for as long as necessary for the purpose for which it was collected unless there are any legal or compliance reasons that apply.

When deciding the appropriate retention period, I consider a number of factors such as the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it is processed and if those purposes can be achieved by alternative means and any relevant legal requirements.

You can contact me for further by emailing

What rights you have over your data

Data protection laws in the UK give people a number of rights concerning their personal data, although those rights may not apply in all cases or to all information that I hold about you. For example, I may need to continue to hold and process information to establish, exercise or defend my legal rights.

Each link below will take you to the Information Commissioners Office’s website where further detail is provided in section When does the right apply.

These rights are:

Right to be informed - this privacy policy aims to be transparent about what data I process and for what purposes.

Right of access - you have the right to request a copy of the information that I hold about you and so details of how to make a subject access request are below.

Right to rectification - If you believe that any information I am holding on you is incorrect or incomplete, please contact me as soon as possible by emailing I will promptly correct any information found to be incorrect.

Right to erasure - under some circumstances you can ask for the data I hold about you to be erased from my records. There may be circumstances where this is not possible, for example, where I am obliged to retain records of the service that I have provided to you.

Right to restrict processing - where certain conditions apply to have a right to restrict the processing of the data that I have about you.

Right to data portability - you have the right to have the data I hold about you transferred to another organisation.

Right to object - you have the right to object to certain types of processing such as direct marketing. Where you have consented to me processing your personal data, you may withdraw your consent at any time.

Rights in relation to automated decision making and profiling - you also have the right not to be subject to the legal effects of automated processing or profiling.

If you have a query or wish to exercise any of your rights, please contact me by emailing I will respond to your request as soon as we can. Generally, this will be within one calendar month from when I receive your request but on occasions it may take longer to deal with your request and in such circumstances, I will inform you.

If I am not sure of your identity, I may require you to provide further information in order for me to confirm who you are.

Requesting a copy of your information

Typically, I receive information from solicitors dealing with your case, the health and care organisations who provided your care and occasionally directly from you.

You may wish to consider directly contacting the organisation that you provided the information to in the first place (your solicitor or your health or care organisation) for a more complete record of your care or treatment. I do not hold your whole medical or care record.

If you would like to request a copy of your personal data that I am processing then you will need to complete a Subject Access Request Form. View my Subject Access Procedure.

I will respond to your request (including providing information on whether the rights apply in the particular circumstances) within the applicable statutory time period.

If we are not sure of your identity, I may require you to provide further information in order for me to confirm who you are.

Please complete the form as fully as possible. Incorrect information or incomplete forms may cause delay in processing your request as I may need to request further information from you.

Sharing your information

I will only share personal information about individuals as part of my contracted service with you or where I have your permission or required by law to do so. Where I host training or other events, I may share delegate information based on my legitimate interest to do so.

In all circumstances where data is shared, I will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

I use trusted data processors who are third parties who provide elements of services for me. I have contracts in place with my data processors. This means that they cannot do anything with your personal information unless I have instructed them to do it. They will not share your personal information with any organisation apart from me. They will hold it securely and retain it for the period I instruct, unless legal or compliance reasons apply.

Information is shared with parties attending the mediation. Other third parties may include third party IT platforms (including cloud based platforms) and suppliers of IT support or other specialist services.

On rare occasions, I may be obliged to disclose data, for example:

- under certain laws or by order of court or other competent regulatory body or may be permitted to disclose it under applicable data protection laws.

- if Hesketh Mediation merges with another business entity or divests a part of its business or carries out internal restructuring, your information may be disclosed to Hesketh Mediation's new business partners or owners or the new corporate entities.

When hosting events, delegate information may be shared with other delegates and partner organisations.


If you consider I am using your information in a way which breaches UK Data Protection law, you have the right to complain to me and, if you remain unhappy following my response to your complaint, you have the right to raise a further complaint with The Information Commissioners Office (ICO).

If you have a query, complaint or wish to exercise any of your rights, please contact me by emailing

I will respond to your request as soon as I can. Generally, this will be within one calendar month from when I receive your request but on occasions it may take longer to deal with your request and in such circumstances, I will inform you.

The ICO can be contacted via their website or postal address: Customer Contact, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow. SK9 5AF.